[2025-08-24 00:21:05][357269400228144][1 ms][INFO] === Request start === [2025-08-24 00:21:05][357269400228144][2 ms][DEBUG] START check_scloud [2025-08-24 00:21:05][357269400228144][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 00:21:05][357269400228144][325 ms][DEBUG] SU: done in 323 ms; outu0_a118 26236 15285 23553496 129540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 00:21:05][357269400228144][325 ms][DEBUG] targetPkg: running [2025-08-24 00:21:05][357269400228144][325 ms][DEBUG] END check_scloud in 324 ms [2025-08-24 00:21:05][357269400228144][325 ms][DEBUG] START check_boot_completed [2025-08-24 00:21:05][357269400228144][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 00:21:05][357269400228144][371 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 00:21:05][357269400228144][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 00:21:05][357269400228144][418 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 00:21:05][357269400228144][418 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 00:21:05][357269400228144][418 ms][DEBUG] rawBody.length=1149 [2025-08-24 00:21:05][357269400228144][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357269400228144\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7036\"}'\'' -e'"" [2025-08-24 00:21:05][357269400228144][418 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 00:21:05][357269400228144][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357269400228144\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7036\"}'\'' -e'"" [2025-08-24 00:21:12][357269400228144][6729 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_605a0cac-d455-4a41-aac8-cc3b030882d1","id":"QR_605a0cac-d455-4a41-aac8-cc3b030882d1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 00:21:12][357269400228144][6885 ms][DEBUG] proc_open done in 6467 ms; code=255; res.len=3343 [2025-08-24 00:21:12][357269400228144][6885 ms][DEBUG] END runCmdUntilRes#1 in 6467 ms [2025-08-24 00:21:12][357269400228144][6885 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 00:34:03][357962504589797][1 ms][INFO] === Request start === [2025-08-24 00:34:03][357962504589797][1 ms][DEBUG] START check_scloud [2025-08-24 00:34:03][357962504589797][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 00:34:03][357962504589797][286 ms][DEBUG] SU: done in 284 ms; outu0_a118 26236 15285 23695868 115380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 00:34:03][357962504589797][286 ms][DEBUG] targetPkg: running [2025-08-24 00:34:03][357962504589797][286 ms][DEBUG] END check_scloud in 285 ms [2025-08-24 00:34:03][357962504589797][286 ms][DEBUG] START check_boot_completed [2025-08-24 00:34:03][357962504589797][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 00:34:03][357962504589797][332 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 00:34:03][357962504589797][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 00:34:03][357962504589797][395 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 00:34:03][357962504589797][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 00:34:03][357962504589797][395 ms][DEBUG] START check_internet [2025-08-24 00:34:03][357962504589797][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 00:34:04][357962504589797][864 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.893/200.893/200.893/0.000 ms\n [2025-08-24 00:34:04][357962504589797][864 ms][DEBUG] check_internet: online [2025-08-24 00:34:04][357962504589797][864 ms][DEBUG] END check_internet in 469 ms [2025-08-24 00:34:04][357962504589797][864 ms][DEBUG] rawBody.length=1148 [2025-08-24 00:34:04][357962504589797][864 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962504589797\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2432\"}'\'' -e'"" [2025-08-24 00:34:04][357962504589797][864 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 00:34:04][357962504589797][864 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962504589797\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2432\"}'\'' -e'"" [2025-08-24 00:34:08][357962504589797][5394 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c3794bea-13f1-4108-9dd8-a00b3ad29021","id":"QR_c3794bea-13f1-4108-9dd8-a00b3ad29021","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 00:34:08][357962504589797][5550 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-08-24 00:34:08][357962504589797][5550 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-08-24 00:34:08][357962504589797][5550 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 00:35:04][359259108572172][0 ms][INFO] === Request start === [2025-08-24 00:35:04][359259108572172][1 ms][DEBUG] START check_scloud [2025-08-24 00:35:04][359259108572172][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 00:35:05][359259108572172][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 26236 15285 23863852 126592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 00:35:05][359259108572172][253 ms][DEBUG] targetPkg: running [2025-08-24 00:35:05][359259108572172][253 ms][DEBUG] END check_scloud in 252 ms [2025-08-24 00:35:05][359259108572172][253 ms][DEBUG] START check_boot_completed [2025-08-24 00:35:05][359259108572172][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 00:35:05][359259108572172][299 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 00:35:05][359259108572172][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 00:35:05][359259108572172][347 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 00:35:05][359259108572172][347 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 00:35:05][359259108572172][347 ms][DEBUG] rawBody.length=1149 [2025-08-24 00:35:05][359259108572172][347 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359259108572172\",\"model\":\"SM-N975F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6123\"}'\'' -e'"" [2025-08-24 00:35:05][359259108572172][347 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 00:35:05][359259108572172][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359259108572172\",\"model\":\"SM-N975F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6123\"}'\'' -e'"" [2025-08-24 00:35:11][359259108572172][6891 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3ba1842a-02b1-4667-a8b0-cb816bae12fb","id":"QR_3ba1842a-02b1-4667-a8b0-cb816bae12fb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 00:35:11][359259108572172][7048 ms][DEBUG] proc_open done in 6700 ms; code=255; res.len=3343 [2025-08-24 00:35:11][359259108572172][7048 ms][DEBUG] END runCmdUntilRes#1 in 6701 ms [2025-08-24 00:35:11][359259108572172][7048 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 00:43:03][350673972578793][1 ms][INFO] === Request start === [2025-08-24 00:43:03][350673972578793][1 ms][DEBUG] START check_scloud [2025-08-24 00:43:03][350673972578793][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 00:43:03][350673972578793][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 26236 15285 23992964 137932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 00:43:03][350673972578793][308 ms][DEBUG] targetPkg: running [2025-08-24 00:43:03][350673972578793][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-24 00:43:03][350673972578793][308 ms][DEBUG] START check_boot_completed [2025-08-24 00:43:03][350673972578793][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 00:43:03][350673972578793][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 00:43:03][350673972578793][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 00:43:03][350673972578793][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 00:43:03][350673972578793][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 00:43:03][350673972578793][386 ms][DEBUG] rawBody.length=1148 [2025-08-24 00:43:03][350673972578793][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350673972578793\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5147\"}'\'' -e'"" [2025-08-24 00:43:03][350673972578793][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 00:43:03][350673972578793][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350673972578793\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5147\"}'\'' -e'"" [2025-08-24 00:43:07][350673972578793][4557 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b333c358-a102-4ff7-ae43-aebf525caa10","id":"QR_b333c358-a102-4ff7-ae43-aebf525caa10","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 00:43:07][350673972578793][4713 ms][DEBUG] proc_open done in 4327 ms; code=255; res.len=3343 [2025-08-24 00:43:07][350673972578793][4713 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-24 00:43:07][350673972578793][4713 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 00:43:11][353204668401343][0 ms][INFO] === Request start === [2025-08-24 00:43:11][353204668401343][1 ms][DEBUG] START check_scloud [2025-08-24 00:43:11][353204668401343][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 00:43:12][353204668401343][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 26236 15285 24160856 148120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 00:43:12][353204668401343][319 ms][DEBUG] targetPkg: running [2025-08-24 00:43:12][353204668401343][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-24 00:43:12][353204668401343][319 ms][DEBUG] START check_boot_completed [2025-08-24 00:43:12][353204668401343][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 00:43:12][353204668401343][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 00:43:12][353204668401343][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 00:43:12][353204668401343][414 ms][DEBUG] SU: done in 49 ms; out [2025-08-24 00:43:12][353204668401343][414 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 00:43:12][353204668401343][414 ms][DEBUG] rawBody.length=1149 [2025-08-24 00:43:12][353204668401343][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204668401343\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1027\"}'\'' -e'"" [2025-08-24 00:43:12][353204668401343][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 00:43:12][353204668401343][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204668401343\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1027\"}'\'' -e'"" [2025-08-24 00:43:17][353204668401343][5255 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aa213b36-7295-4912-92cb-78e81eb5c5aa","id":"QR_aa213b36-7295-4912-92cb-78e81eb5c5aa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 00:43:17][353204668401343][5411 ms][DEBUG] proc_open done in 4996 ms; code=255; res.len=3343 [2025-08-24 00:43:17][353204668401343][5411 ms][DEBUG] END runCmdUntilRes#1 in 4997 ms [2025-08-24 00:43:17][353204668401343][5411 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 00:43:23][352682501120710][0 ms][INFO] === Request start === [2025-08-24 00:43:23][352682501120710][1 ms][DEBUG] START check_scloud [2025-08-24 00:43:23][352682501120710][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 00:43:23][352682501120710][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 26236 15285 24301372 159764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 00:43:23][352682501120710][314 ms][DEBUG] targetPkg: running [2025-08-24 00:43:23][352682501120710][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-24 00:43:23][352682501120710][314 ms][DEBUG] START check_boot_completed [2025-08-24 00:43:23][352682501120710][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 00:43:24][352682501120710][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 00:43:24][352682501120710][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 00:43:24][352682501120710][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 00:43:24][352682501120710][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 00:43:24][352682501120710][407 ms][DEBUG] rawBody.length=1149 [2025-08-24 00:43:24][352682501120710][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682501120710\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8554\"}'\'' -e'"" [2025-08-24 00:43:24][352682501120710][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 00:43:24][352682501120710][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682501120710\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8554\"}'\'' -e'"" [2025-08-24 00:43:28][352682501120710][5218 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b4cc3a91-aab9-426a-b028-787fde88f72f","id":"QR_b4cc3a91-aab9-426a-b028-787fde88f72f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 00:43:29][352682501120710][5374 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=3343 [2025-08-24 00:43:29][352682501120710][5374 ms][DEBUG] END runCmdUntilRes#1 in 4967 ms [2025-08-24 00:43:29][352682501120710][5374 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 00:46:04][354737330572115][1 ms][INFO] === Request start === [2025-08-24 00:46:04][354737330572115][1 ms][DEBUG] START check_scloud [2025-08-24 00:46:04][354737330572115][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 00:46:04][354737330572115][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 26236 15285 24407036 166584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 00:46:04][354737330572115][314 ms][DEBUG] targetPkg: running [2025-08-24 00:46:04][354737330572115][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-24 00:46:04][354737330572115][314 ms][DEBUG] START check_boot_completed [2025-08-24 00:46:04][354737330572115][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 00:46:04][354737330572115][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 00:46:04][354737330572115][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 00:46:04][354737330572115][423 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 00:46:04][354737330572115][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 00:46:04][354737330572115][423 ms][DEBUG] START check_internet [2025-08-24 00:46:04][354737330572115][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 00:46:05][354737330572115][908 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.941/202.941/202.941/0.000 ms\n [2025-08-24 00:46:05][354737330572115][908 ms][DEBUG] check_internet: online [2025-08-24 00:46:05][354737330572115][908 ms][DEBUG] END check_internet in 484 ms [2025-08-24 00:46:05][354737330572115][908 ms][DEBUG] rawBody.length=1149 [2025-08-24 00:46:05][354737330572115][908 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354737330572115\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2723\"}'\'' -e'"" [2025-08-24 00:46:05][354737330572115][908 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 00:46:05][354737330572115][908 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354737330572115\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2723\"}'\'' -e'"" [2025-08-24 00:46:11][354737330572115][7687 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d6db42a9-2e65-45e8-a6e9-3cb0b1c5da20","id":"QR_d6db42a9-2e65-45e8-a6e9-3cb0b1c5da20","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 00:46:12][354737330572115][7843 ms][DEBUG] proc_open done in 6935 ms; code=255; res.len=3343 [2025-08-24 00:46:12][354737330572115][7843 ms][DEBUG] END runCmdUntilRes#1 in 6935 ms [2025-08-24 00:46:12][354737330572115][7843 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 00:53:04][350822574347236][1 ms][INFO] === Request start === [2025-08-24 00:53:04][350822574347236][1 ms][DEBUG] START check_scloud [2025-08-24 00:53:04][350822574347236][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 00:53:04][350822574347236][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 26236 15285 24554516 173064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 00:53:04][350822574347236][318 ms][DEBUG] targetPkg: running [2025-08-24 00:53:04][350822574347236][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-24 00:53:04][350822574347236][318 ms][DEBUG] START check_boot_completed [2025-08-24 00:53:04][350822574347236][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 00:53:04][350822574347236][350 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 00:53:04][350822574347236][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 00:53:04][350822574347236][397 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 00:53:04][350822574347236][397 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 00:53:04][350822574347236][397 ms][DEBUG] rawBody.length=1149 [2025-08-24 00:53:04][350822574347236][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350822574347236\",\"model\":\"SM-S926U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7558\"}'\'' -e'"" [2025-08-24 00:53:04][350822574347236][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 00:53:04][350822574347236][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350822574347236\",\"model\":\"SM-S926U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7558\"}'\'' -e'"" [2025-08-24 00:53:10][350822574347236][6333 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e0ea5c0e-c465-41b4-90aa-e9f1fd514b7f","id":"QR_e0ea5c0e-c465-41b4-90aa-e9f1fd514b7f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 00:53:11][350822574347236][6489 ms][DEBUG] proc_open done in 6091 ms; code=255; res.len=3343 [2025-08-24 00:53:11][350822574347236][6489 ms][DEBUG] END runCmdUntilRes#1 in 6091 ms [2025-08-24 00:53:11][350822574347236][6489 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 00:55:03][351681593649041][0 ms][INFO] === Request start === [2025-08-24 00:55:03][351681593649041][1 ms][DEBUG] START check_scloud [2025-08-24 00:55:03][351681593649041][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 00:55:03][351681593649041][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 26236 15285 24677700 182208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 00:55:03][351681593649041][251 ms][DEBUG] targetPkg: running [2025-08-24 00:55:03][351681593649041][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-24 00:55:03][351681593649041][251 ms][DEBUG] START check_boot_completed [2025-08-24 00:55:03][351681593649041][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 00:55:03][351681593649041][298 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 00:55:03][351681593649041][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 00:55:03][351681593649041][360 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 00:55:03][351681593649041][360 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 00:55:03][351681593649041][360 ms][DEBUG] rawBody.length=1148 [2025-08-24 00:55:03][351681593649041][360 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681593649041\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8406\"}'\'' -e'"" [2025-08-24 00:55:03][351681593649041][360 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 00:55:03][351681593649041][360 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681593649041\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8406\"}'\'' -e'"" [2025-08-24 00:55:08][351681593649041][4749 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c03814a7-0c79-4030-9510-90120b162aca","id":"QR_c03814a7-0c79-4030-9510-90120b162aca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 00:55:08][351681593649041][4906 ms][DEBUG] proc_open done in 4545 ms; code=255; res.len=3343 [2025-08-24 00:55:08][351681593649041][4906 ms][DEBUG] END runCmdUntilRes#1 in 4545 ms [2025-08-24 00:55:08][351681593649041][4906 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 01:20:31][352053265160914][1 ms][INFO] === Request start === [2025-08-24 01:20:31][352053265160914][1 ms][DEBUG] START check_scloud [2025-08-24 01:20:31][352053265160914][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 01:20:31][352053265160914][292 ms][DEBUG] SU: done in 290 ms; outu0_a118 26236 15285 24813020 107684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 01:20:31][352053265160914][292 ms][DEBUG] targetPkg: running [2025-08-24 01:20:31][352053265160914][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-24 01:20:31][352053265160914][292 ms][DEBUG] START check_boot_completed [2025-08-24 01:20:31][352053265160914][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 01:20:31][352053265160914][338 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 01:20:31][352053265160914][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 01:20:31][352053265160914][401 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 01:20:31][352053265160914][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 01:20:31][352053265160914][401 ms][DEBUG] START check_internet [2025-08-24 01:20:31][352053265160914][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 01:20:32][352053265160914][948 ms][DEBUG] SU: done in 546 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.850/201.850/201.850/0.000 ms\n [2025-08-24 01:20:32][352053265160914][948 ms][DEBUG] check_internet: online [2025-08-24 01:20:32][352053265160914][948 ms][DEBUG] END check_internet in 546 ms [2025-08-24 01:20:32][352053265160914][948 ms][DEBUG] rawBody.length=1149 [2025-08-24 01:20:32][352053265160914][948 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053265160914\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9937\"}'\'' -e'"" [2025-08-24 01:20:32][352053265160914][948 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 01:20:32][352053265160914][948 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053265160914\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9937\"}'\'' -e'"" [2025-08-24 01:20:39][352053265160914][7837 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_703821cf-bf64-4fe6-8b6e-5f289b1a994d","id":"QR_703821cf-bf64-4fe6-8b6e-5f289b1a994d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 01:20:39][352053265160914][7993 ms][DEBUG] proc_open done in 7045 ms; code=255; res.len=3343 [2025-08-24 01:20:39][352053265160914][7993 ms][DEBUG] END runCmdUntilRes#1 in 7045 ms [2025-08-24 01:20:39][352053265160914][7993 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 01:21:05][351066361422476][0 ms][INFO] === Request start === [2025-08-24 01:21:05][351066361422476][1 ms][DEBUG] START check_scloud [2025-08-24 01:21:05][351066361422476][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 01:21:05][351066361422476][319 ms][DEBUG] SU: done in 319 ms; outu0_a118 26236 15285 24951496 123132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 01:21:05][351066361422476][319 ms][DEBUG] targetPkg: running [2025-08-24 01:21:05][351066361422476][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-24 01:21:05][351066361422476][320 ms][DEBUG] START check_boot_completed [2025-08-24 01:21:05][351066361422476][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 01:21:05][351066361422476][350 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 01:21:05][351066361422476][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 01:21:05][351066361422476][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 01:21:05][351066361422476][398 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 01:21:05][351066361422476][398 ms][DEBUG] rawBody.length=1149 [2025-08-24 01:21:05][351066361422476][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351066361422476\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4062\"}'\'' -e'"" [2025-08-24 01:21:05][351066361422476][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 01:21:05][351066361422476][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351066361422476\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4062\"}'\'' -e'"" [2025-08-24 01:21:10][351066361422476][4787 ms][DEBUG] proc_open done in 4389 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 01:21:10][351066361422476][4787 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-24 01:21:10][351066361422476][4787 ms][WARN] Detected error: Process with pid 26236 either refused to load frida-agent, or terminated during injection [2025-08-24 01:21:10][351066361422476][4787 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 01:21:10][351066361422476][4928 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 01:21:10][351066361422476][4928 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 01:21:10][351066361422476][4928 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 01:21:10][351066361422476][5068 ms][DEBUG] SU: done in 141 ms; out [2025-08-24 01:21:10][351066361422476][5068 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 01:21:10][351066361422476][5334 ms][DEBUG] SU: done in 266 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 01:21:12][351066361422476][7349 ms][DEBUG] START check_boot_completed [2025-08-24 01:21:12][351066361422476][7349 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 01:21:12][351066361422476][7396 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 01:21:12][351066361422476][7396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 01:21:12][351066361422476][7443 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 01:21:12][351066361422476][7443 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 01:21:15][351066361422476][10457 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 01:21:15][351066361422476][10458 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351066361422476\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4062\"}'\'' -e'"" [2025-08-24 01:21:20][351066361422476][15347 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c678d2a2-e7b5-41c0-92f6-09b0c85eaa50","id":"QR_c678d2a2-e7b5-41c0-92f6-09b0c85eaa50","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 01:21:20][351066361422476][15503 ms][DEBUG] proc_open done in 5046 ms; code=255; res.len=3343 [2025-08-24 01:21:20][351066361422476][15503 ms][DEBUG] END runCmdUntilRes#2 in 5046 ms [2025-08-24 01:21:20][351066361422476][15503 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 01:23:03][352520445390421][1 ms][INFO] === Request start === [2025-08-24 01:23:03][352520445390421][1 ms][DEBUG] START check_scloud [2025-08-24 01:23:03][352520445390421][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 01:23:04][352520445390421][320 ms][DEBUG] SU: done in 318 ms; outu0_a118 31733 15285 23649688 128724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 01:23:04][352520445390421][320 ms][DEBUG] targetPkg: running [2025-08-24 01:23:04][352520445390421][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-24 01:23:04][352520445390421][320 ms][DEBUG] START check_boot_completed [2025-08-24 01:23:04][352520445390421][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 01:23:04][352520445390421][367 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 01:23:04][352520445390421][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 01:23:04][352520445390421][429 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 01:23:04][352520445390421][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 01:23:04][352520445390421][429 ms][DEBUG] rawBody.length=1148 [2025-08-24 01:23:04][352520445390421][429 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352520445390421\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5135\"}'\'' -e'"" [2025-08-24 01:23:04][352520445390421][429 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 01:23:04][352520445390421][429 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352520445390421\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5135\"}'\'' -e'"" [2025-08-24 01:23:08][352520445390421][4928 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b492c93a-4ff3-40cb-b9c6-c9680422ea65","id":"QR_b492c93a-4ff3-40cb-b9c6-c9680422ea65","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 01:23:08][352520445390421][5084 ms][DEBUG] proc_open done in 4655 ms; code=255; res.len=3343 [2025-08-24 01:23:08][352520445390421][5084 ms][DEBUG] END runCmdUntilRes#1 in 4655 ms [2025-08-24 01:23:08][352520445390421][5084 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 01:37:05][356522911251810][1 ms][INFO] === Request start === [2025-08-24 01:37:05][356522911251810][1 ms][DEBUG] START check_scloud [2025-08-24 01:37:05][356522911251810][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 01:37:05][356522911251810][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 31733 15285 23758144 140148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 01:37:05][356522911251810][314 ms][DEBUG] targetPkg: running [2025-08-24 01:37:05][356522911251810][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-24 01:37:05][356522911251810][314 ms][DEBUG] START check_boot_completed [2025-08-24 01:37:05][356522911251810][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 01:37:05][356522911251810][346 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 01:37:05][356522911251810][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 01:37:05][356522911251810][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 01:37:05][356522911251810][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 01:37:05][356522911251810][393 ms][DEBUG] rawBody.length=1149 [2025-08-24 01:37:05][356522911251810][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356522911251810\",\"model\":\"SM-A245M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2410\"}'\'' -e'"" [2025-08-24 01:37:05][356522911251810][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 01:37:05][356522911251810][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356522911251810\",\"model\":\"SM-A245M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2410\"}'\'' -e'"" [2025-08-24 01:37:10][356522911251810][5704 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_085768ef-d117-4ed4-8597-c070062f2b74","id":"QR_085768ef-d117-4ed4-8597-c070062f2b74","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 01:37:10][356522911251810][5860 ms][DEBUG] proc_open done in 5467 ms; code=255; res.len=3343 [2025-08-24 01:37:10][356522911251810][5860 ms][DEBUG] END runCmdUntilRes#1 in 5467 ms [2025-08-24 01:37:10][356522911251810][5860 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 01:43:03][354569111313660][1 ms][INFO] === Request start === [2025-08-24 01:43:03][354569111313660][1 ms][DEBUG] START check_scloud [2025-08-24 01:43:03][354569111313660][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 01:43:03][354569111313660][309 ms][DEBUG] SU: done in 307 ms; outu0_a118 31733 15285 23909808 150840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 01:43:03][354569111313660][309 ms][DEBUG] targetPkg: running [2025-08-24 01:43:03][354569111313660][309 ms][DEBUG] END check_scloud in 307 ms [2025-08-24 01:43:03][354569111313660][309 ms][DEBUG] START check_boot_completed [2025-08-24 01:43:03][354569111313660][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 01:43:03][354569111313660][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 01:43:03][354569111313660][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 01:43:03][354569111313660][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 01:43:03][354569111313660][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 01:43:03][354569111313660][387 ms][DEBUG] rawBody.length=1148 [2025-08-24 01:43:03][354569111313660][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354569111313660\",\"model\":\"SM-G988B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5058\"}'\'' -e'"" [2025-08-24 01:43:03][354569111313660][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 01:43:03][354569111313660][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354569111313660\",\"model\":\"SM-G988B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5058\"}'\'' -e'"" [2025-08-24 01:43:08][354569111313660][4557 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_da78175c-7563-4a94-bbad-9371c6192696","id":"QR_da78175c-7563-4a94-bbad-9371c6192696","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 01:43:08][354569111313660][4714 ms][DEBUG] proc_open done in 4327 ms; code=255; res.len=3343 [2025-08-24 01:43:08][354569111313660][4714 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-24 01:43:08][354569111313660][4714 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 01:44:02][352539599560928][0 ms][INFO] === Request start === [2025-08-24 01:44:02][352539599560928][1 ms][DEBUG] START check_scloud [2025-08-24 01:44:02][352539599560928][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 01:44:03][352539599560928][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 31733 15285 24025740 162652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 01:44:03][352539599560928][257 ms][DEBUG] targetPkg: running [2025-08-24 01:44:03][352539599560928][257 ms][DEBUG] END check_scloud in 257 ms [2025-08-24 01:44:03][352539599560928][257 ms][DEBUG] START check_boot_completed [2025-08-24 01:44:03][352539599560928][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 01:44:03][352539599560928][304 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 01:44:03][352539599560928][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 01:44:03][352539599560928][352 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 01:44:03][352539599560928][352 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 01:44:03][352539599560928][352 ms][DEBUG] START check_internet [2025-08-24 01:44:03][352539599560928][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 01:44:03][352539599560928][835 ms][DEBUG] SU: done in 483 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.537/199.537/199.537/0.000 ms\n [2025-08-24 01:44:03][352539599560928][835 ms][DEBUG] check_internet: online [2025-08-24 01:44:03][352539599560928][835 ms][DEBUG] END check_internet in 483 ms [2025-08-24 01:44:03][352539599560928][835 ms][DEBUG] rawBody.length=1148 [2025-08-24 01:44:03][352539599560928][835 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539599560928\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3437\"}'\'' -e'"" [2025-08-24 01:44:03][352539599560928][835 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 01:44:03][352539599560928][835 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539599560928\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3437\"}'\'' -e'"" [2025-08-24 01:44:07][352539599560928][5037 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c746add1-c168-474f-8fdf-9a1d8ab58836","id":"QR_c746add1-c168-474f-8fdf-9a1d8ab58836","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 01:44:08][352539599560928][5193 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3343 [2025-08-24 01:44:08][352539599560928][5193 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-24 01:44:08][352539599560928][5193 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 01:50:03][353302721491077][1 ms][INFO] === Request start === [2025-08-24 01:50:03][353302721491077][1 ms][DEBUG] START check_scloud [2025-08-24 01:50:03][353302721491077][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 01:50:04][353302721491077][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 31733 15285 24174320 173564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 01:50:04][353302721491077][307 ms][DEBUG] targetPkg: running [2025-08-24 01:50:04][353302721491077][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-24 01:50:04][353302721491077][308 ms][DEBUG] START check_boot_completed [2025-08-24 01:50:04][353302721491077][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 01:50:04][353302721491077][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 01:50:04][353302721491077][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 01:50:04][353302721491077][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 01:50:04][353302721491077][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 01:50:04][353302721491077][401 ms][DEBUG] START check_internet [2025-08-24 01:50:04][353302721491077][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 01:50:04][353302721491077][823 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.702/199.702/199.702/0.000 ms\n [2025-08-24 01:50:04][353302721491077][823 ms][DEBUG] check_internet: online [2025-08-24 01:50:04][353302721491077][823 ms][DEBUG] END check_internet in 422 ms [2025-08-24 01:50:04][353302721491077][823 ms][DEBUG] rawBody.length=1148 [2025-08-24 01:50:04][353302721491077][823 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353302721491077\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6137\"}'\'' -e'"" [2025-08-24 01:50:04][353302721491077][823 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 01:50:04][353302721491077][823 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353302721491077\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6137\"}'\'' -e'"" [2025-08-24 01:50:08][353302721491077][5072 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_88317c06-269c-405f-ad97-84813a6b831c","id":"QR_88317c06-269c-405f-ad97-84813a6b831c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 01:50:09][353302721491077][5228 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-08-24 01:50:09][353302721491077][5228 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-24 01:50:09][353302721491077][5228 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 02:16:03][350290810914989][1 ms][INFO] === Request start === [2025-08-24 02:16:03][350290810914989][1 ms][DEBUG] START check_scloud [2025-08-24 02:16:03][350290810914989][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 02:16:03][350290810914989][290 ms][DEBUG] SU: done in 288 ms; outu0_a118 31733 15285 24309512 185176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 02:16:03][350290810914989][290 ms][DEBUG] targetPkg: running [2025-08-24 02:16:03][350290810914989][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-24 02:16:03][350290810914989][290 ms][DEBUG] START check_boot_completed [2025-08-24 02:16:03][350290810914989][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 02:16:03][350290810914989][321 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 02:16:03][350290810914989][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 02:16:03][350290810914989][368 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 02:16:03][350290810914989][369 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 02:16:03][350290810914989][369 ms][DEBUG] START check_internet [2025-08-24 02:16:03][350290810914989][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 02:16:04][350290810914989][789 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.830/200.830/200.830/0.000 ms\n [2025-08-24 02:16:04][350290810914989][790 ms][DEBUG] check_internet: online [2025-08-24 02:16:04][350290810914989][790 ms][DEBUG] END check_internet in 421 ms [2025-08-24 02:16:04][350290810914989][790 ms][DEBUG] rawBody.length=1148 [2025-08-24 02:16:04][350290810914989][790 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290810914989\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8249\"}'\'' -e'"" [2025-08-24 02:16:04][350290810914989][790 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 02:16:04][350290810914989][790 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290810914989\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8249\"}'\'' -e'"" [2025-08-24 02:16:08][350290810914989][5319 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e5c07a00-e462-499b-ba39-407c868d1ffb","id":"QR_e5c07a00-e462-499b-ba39-407c868d1ffb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 02:16:08][350290810914989][5476 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-08-24 02:16:08][350290810914989][5476 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-08-24 02:16:08][350290810914989][5476 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 02:19:04][354747958664763][1 ms][INFO] === Request start === [2025-08-24 02:19:04][354747958664763][1 ms][DEBUG] START check_scloud [2025-08-24 02:19:04][354747958664763][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 02:19:04][354747958664763][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 31733 15285 24487992 165540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 02:19:04][354747958664763][270 ms][DEBUG] targetPkg: running [2025-08-24 02:19:04][354747958664763][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-24 02:19:04][354747958664763][270 ms][DEBUG] START check_boot_completed [2025-08-24 02:19:04][354747958664763][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 02:19:04][354747958664763][301 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 02:19:04][354747958664763][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 02:19:04][354747958664763][348 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 02:19:04][354747958664763][349 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 02:19:04][354747958664763][349 ms][DEBUG] rawBody.length=1148 [2025-08-24 02:19:04][354747958664763][349 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747958664763\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8326\"}'\'' -e'"" [2025-08-24 02:19:04][354747958664763][349 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 02:19:04][354747958664763][349 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747958664763\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8326\"}'\'' -e'"" [2025-08-24 02:19:08][354747958664763][4597 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5f956fae-544e-4ffa-9d43-e61467b2db8c","id":"QR_5f956fae-544e-4ffa-9d43-e61467b2db8c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 02:19:08][354747958664763][4753 ms][DEBUG] proc_open done in 4404 ms; code=255; res.len=3343 [2025-08-24 02:19:08][354747958664763][4753 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-24 02:19:08][354747958664763][4753 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 02:38:03][350272253231634][1 ms][INFO] === Request start === [2025-08-24 02:38:03][350272253231634][1 ms][DEBUG] START check_scloud [2025-08-24 02:38:03][350272253231634][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 02:38:04][350272253231634][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 31733 15285 24621072 169452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 02:38:04][350272253231634][300 ms][DEBUG] targetPkg: running [2025-08-24 02:38:04][350272253231634][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-24 02:38:04][350272253231634][300 ms][DEBUG] START check_boot_completed [2025-08-24 02:38:04][350272253231634][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 02:38:04][350272253231634][331 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 02:38:04][350272253231634][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 02:38:04][350272253231634][378 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 02:38:04][350272253231634][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 02:38:04][350272253231634][378 ms][DEBUG] START check_internet [2025-08-24 02:38:04][350272253231634][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 02:38:04][350272253231634][831 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.440/202.440/202.440/0.000 ms\n [2025-08-24 02:38:04][350272253231634][831 ms][DEBUG] check_internet: online [2025-08-24 02:38:04][350272253231634][831 ms][DEBUG] END check_internet in 453 ms [2025-08-24 02:38:04][350272253231634][831 ms][DEBUG] rawBody.length=1148 [2025-08-24 02:38:04][350272253231634][831 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350272253231634\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3639\"}'\'' -e'"" [2025-08-24 02:38:04][350272253231634][832 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 02:38:04][350272253231634][832 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350272253231634\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3639\"}'\'' -e'"" [2025-08-24 02:38:09][350272253231634][5299 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fd2ed31b-0ccc-4983-82f8-81fa4408af2d","id":"QR_fd2ed31b-0ccc-4983-82f8-81fa4408af2d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 02:38:09][350272253231634][5455 ms][DEBUG] proc_open done in 4623 ms; code=255; res.len=3343 [2025-08-24 02:38:09][350272253231634][5455 ms][DEBUG] END runCmdUntilRes#1 in 4623 ms [2025-08-24 02:38:09][350272253231634][5455 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 02:39:04][355039640490230][0 ms][INFO] === Request start === [2025-08-24 02:39:04][355039640490230][1 ms][DEBUG] START check_scloud [2025-08-24 02:39:04][355039640490230][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 02:39:04][355039640490230][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 31733 15285 24750400 168444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 02:39:04][355039640490230][303 ms][DEBUG] targetPkg: running [2025-08-24 02:39:04][355039640490230][303 ms][DEBUG] END check_scloud in 303 ms [2025-08-24 02:39:04][355039640490230][303 ms][DEBUG] START check_boot_completed [2025-08-24 02:39:04][355039640490230][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 02:39:04][355039640490230][350 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 02:39:04][355039640490230][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 02:39:05][355039640490230][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 02:39:05][355039640490230][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 02:39:05][355039640490230][397 ms][DEBUG] rawBody.length=1149 [2025-08-24 02:39:05][355039640490230][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355039640490230\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9712\"}'\'' -e'"" [2025-08-24 02:39:05][355039640490230][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 02:39:05][355039640490230][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355039640490230\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9712\"}'\'' -e'"" [2025-08-24 02:39:11][355039640490230][6614 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_16ad2163-0309-47ff-a0c2-bf51efd806f4","id":"QR_16ad2163-0309-47ff-a0c2-bf51efd806f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 02:39:11][355039640490230][6770 ms][DEBUG] proc_open done in 6373 ms; code=255; res.len=3343 [2025-08-24 02:39:11][355039640490230][6770 ms][DEBUG] END runCmdUntilRes#1 in 6373 ms [2025-08-24 02:39:11][355039640490230][6770 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 02:42:05][356380561512357][1 ms][INFO] === Request start === [2025-08-24 02:42:05][356380561512357][1 ms][DEBUG] START check_scloud [2025-08-24 02:42:05][356380561512357][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 02:42:05][356380561512357][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 31733 15285 24913444 178992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 02:42:05][356380561512357][309 ms][DEBUG] targetPkg: running [2025-08-24 02:42:05][356380561512357][310 ms][DEBUG] END check_scloud in 308 ms [2025-08-24 02:42:05][356380561512357][310 ms][DEBUG] START check_boot_completed [2025-08-24 02:42:05][356380561512357][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 02:42:05][356380561512357][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 02:42:05][356380561512357][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 02:42:05][356380561512357][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 02:42:05][356380561512357][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 02:42:05][356380561512357][403 ms][DEBUG] START check_internet [2025-08-24 02:42:05][356380561512357][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 02:42:06][356380561512357][684 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=172 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 172.752/172.752/172.752/0.000 ms\n [2025-08-24 02:42:06][356380561512357][684 ms][DEBUG] check_internet: online [2025-08-24 02:42:06][356380561512357][684 ms][DEBUG] END check_internet in 281 ms [2025-08-24 02:42:06][356380561512357][684 ms][DEBUG] rawBody.length=1149 [2025-08-24 02:42:06][356380561512357][684 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356380561512357\",\"model\":\"SM-S921W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6013\"}'\'' -e'"" [2025-08-24 02:42:06][356380561512357][685 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 02:42:06][356380561512357][685 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356380561512357\",\"model\":\"SM-S921W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6013\"}'\'' -e'"" [2025-08-24 02:42:11][356380561512357][5964 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fd79cdb8-d960-4a17-99dc-e5a031d9df5d","id":"QR_fd79cdb8-d960-4a17-99dc-e5a031d9df5d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 02:42:11][356380561512357][6120 ms][DEBUG] proc_open done in 5435 ms; code=255; res.len=3343 [2025-08-24 02:42:11][356380561512357][6120 ms][DEBUG] END runCmdUntilRes#1 in 5436 ms [2025-08-24 02:42:11][356380561512357][6120 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 02:45:04][350290815421865][1 ms][INFO] === Request start === [2025-08-24 02:45:04][350290815421865][1 ms][DEBUG] START check_scloud [2025-08-24 02:45:04][350290815421865][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 02:45:04][350290815421865][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 31733 15285 25047692 181504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 02:45:04][350290815421865][300 ms][DEBUG] targetPkg: running [2025-08-24 02:45:04][350290815421865][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-24 02:45:04][350290815421865][300 ms][DEBUG] START check_boot_completed [2025-08-24 02:45:04][350290815421865][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 02:45:04][350290815421865][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 02:45:04][350290815421865][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 02:45:04][350290815421865][409 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 02:45:04][350290815421865][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 02:45:04][350290815421865][409 ms][DEBUG] rawBody.length=1148 [2025-08-24 02:45:04][350290815421865][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290815421865\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5945\"}'\'' -e'"" [2025-08-24 02:45:04][350290815421865][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 02:45:04][350290815421865][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290815421865\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5945\"}'\'' -e'"" [2025-08-24 02:45:08][350290815421865][4424 ms][DEBUG] proc_open done in 4015 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 02:45:08][350290815421865][4424 ms][DEBUG] END runCmdUntilRes#1 in 4015 ms [2025-08-24 02:45:08][350290815421865][4424 ms][WARN] Detected error: Process with pid 31733 either refused to load frida-agent, or terminated during injection [2025-08-24 02:45:08][350290815421865][4424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 02:45:08][350290815421865][4565 ms][DEBUG] SU: done in 141 ms; out [2025-08-24 02:45:08][350290815421865][4565 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 02:45:08][350290815421865][4565 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 02:45:08][350290815421865][4705 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 02:45:08][350290815421865][4705 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 02:45:08][350290815421865][4908 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 02:45:10][350290815421865][6923 ms][DEBUG] START check_boot_completed [2025-08-24 02:45:10][350290815421865][6923 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 02:45:11][350290815421865][6970 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 02:45:11][350290815421865][6971 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 02:45:11][350290815421865][7033 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 02:45:11][350290815421865][7033 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 02:45:14][350290815421865][10048 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 02:45:14][350290815421865][10048 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290815421865\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5945\"}'\'' -e'"" [2025-08-24 02:45:18][350290815421865][14390 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a14e701-af26-4df5-83ff-bcd4883b8f11","id":"QR_0a14e701-af26-4df5-83ff-bcd4883b8f11","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 02:45:18][350290815421865][14547 ms][DEBUG] proc_open done in 4499 ms; code=255; res.len=3343 [2025-08-24 02:45:18][350290815421865][14547 ms][DEBUG] END runCmdUntilRes#2 in 4499 ms [2025-08-24 02:45:18][350290815421865][14547 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 02:51:03][358780103862566][1 ms][INFO] === Request start === [2025-08-24 02:51:03][358780103862566][1 ms][DEBUG] START check_scloud [2025-08-24 02:51:03][358780103862566][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 02:51:03][358780103862566][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 2850 15285 23631360 129068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 02:51:03][358780103862566][305 ms][DEBUG] targetPkg: running [2025-08-24 02:51:03][358780103862566][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-24 02:51:03][358780103862566][305 ms][DEBUG] START check_boot_completed [2025-08-24 02:51:03][358780103862566][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 02:51:03][358780103862566][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 02:51:03][358780103862566][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 02:51:03][358780103862566][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 02:51:03][358780103862566][398 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 02:51:03][358780103862566][398 ms][DEBUG] rawBody.length=1148 [2025-08-24 02:51:03][358780103862566][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358780103862566\",\"model\":\"SM-N975F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"GLB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2844\"}'\'' -e'"" [2025-08-24 02:51:03][358780103862566][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 02:51:03][358780103862566][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358780103862566\",\"model\":\"SM-N975F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"GLB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2844\"}'\'' -e'"" [2025-08-24 02:51:07][358780103862566][4460 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_59db5950-75ef-4a69-ac7a-2880dfa85b39","id":"QR_59db5950-75ef-4a69-ac7a-2880dfa85b39","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 02:51:07][358780103862566][4616 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-24 02:51:07][358780103862566][4616 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-08-24 02:51:07][358780103862566][4616 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 02:54:05][354261831299565][1 ms][INFO] === Request start === [2025-08-24 02:54:05][354261831299565][1 ms][DEBUG] START check_scloud [2025-08-24 02:54:05][354261831299565][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 02:54:05][354261831299565][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 2850 15285 23785892 139892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 02:54:05][354261831299565][306 ms][DEBUG] targetPkg: running [2025-08-24 02:54:05][354261831299565][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-24 02:54:05][354261831299565][306 ms][DEBUG] START check_boot_completed [2025-08-24 02:54:05][354261831299565][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 02:54:05][354261831299565][337 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 02:54:05][354261831299565][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 02:54:05][354261831299565][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 02:54:05][354261831299565][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 02:54:05][354261831299565][384 ms][DEBUG] START check_internet [2025-08-24 02:54:05][354261831299565][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 02:54:05][354261831299565][931 ms][DEBUG] SU: done in 547 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.392/199.392/199.392/0.000 ms\n [2025-08-24 02:54:05][354261831299565][931 ms][DEBUG] check_internet: online [2025-08-24 02:54:05][354261831299565][931 ms][DEBUG] END check_internet in 547 ms [2025-08-24 02:54:05][354261831299565][931 ms][DEBUG] rawBody.length=1150 [2025-08-24 02:54:05][354261831299565][931 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354261831299565\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4748\"}'\'' -e'"" [2025-08-24 02:54:05][354261831299565][931 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 02:54:05][354261831299565][931 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354261831299565\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4748\"}'\'' -e'"" [2025-08-24 02:54:11][354261831299565][6289 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6df471dd-33e1-4f31-bc38-15922e854bcf","id":"QR_6df471dd-33e1-4f31-bc38-15922e854bcf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 02:54:11][354261831299565][6445 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-08-24 02:54:11][354261831299565][6445 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-24 02:54:11][354261831299565][6445 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 03:06:03][350991621708441][1 ms][INFO] === Request start === [2025-08-24 03:06:03][350991621708441][1 ms][DEBUG] START check_scloud [2025-08-24 03:06:03][350991621708441][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 03:06:03][350991621708441][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 2850 15285 23876028 151096 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 03:06:03][350991621708441][307 ms][DEBUG] targetPkg: running [2025-08-24 03:06:03][350991621708441][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-24 03:06:03][350991621708441][307 ms][DEBUG] START check_boot_completed [2025-08-24 03:06:03][350991621708441][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 03:06:03][350991621708441][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 03:06:03][350991621708441][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 03:06:03][350991621708441][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 03:06:03][350991621708441][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 03:06:03][350991621708441][386 ms][DEBUG] START check_internet [2025-08-24 03:06:03][350991621708441][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 03:06:04][350991621708441][901 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.432/202.432/202.432/0.000 ms\n [2025-08-24 03:06:04][350991621708441][901 ms][DEBUG] check_internet: online [2025-08-24 03:06:04][350991621708441][901 ms][DEBUG] END check_internet in 516 ms [2025-08-24 03:06:04][350991621708441][901 ms][DEBUG] rawBody.length=1148 [2025-08-24 03:06:04][350991621708441][901 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350991621708441\",\"model\":\"SM-A356N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1402\"}'\'' -e'"" [2025-08-24 03:06:04][350991621708441][901 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 03:06:04][350991621708441][901 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350991621708441\",\"model\":\"SM-A356N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1402\"}'\'' -e'"" [2025-08-24 03:06:08][350991621708441][4931 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5d99678d-b7cc-4630-ab1a-a4371607c0c3","id":"QR_5d99678d-b7cc-4630-ab1a-a4371607c0c3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 03:06:08][350991621708441][5087 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-24 03:06:08][350991621708441][5087 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-24 03:06:08][350991621708441][5087 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 03:17:02][351771924706824][1 ms][INFO] === Request start === [2025-08-24 03:17:02][351771924706824][1 ms][DEBUG] START check_scloud [2025-08-24 03:17:02][351771924706824][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 03:17:03][351771924706824][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 2850 15285 24047136 162224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 03:17:03][351771924706824][257 ms][DEBUG] targetPkg: running [2025-08-24 03:17:03][351771924706824][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-24 03:17:03][351771924706824][257 ms][DEBUG] START check_boot_completed [2025-08-24 03:17:03][351771924706824][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 03:17:03][351771924706824][288 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 03:17:03][351771924706824][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 03:17:03][351771924706824][336 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 03:17:03][351771924706824][336 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 03:17:03][351771924706824][336 ms][DEBUG] rawBody.length=1148 [2025-08-24 03:17:03][351771924706824][336 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771924706824\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7979\"}'\'' -e'"" [2025-08-24 03:17:03][351771924706824][336 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 03:17:03][351771924706824][336 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771924706824\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7979\"}'\'' -e'"" [2025-08-24 03:17:07][351771924706824][4397 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_408b8f67-7ca7-4a66-9f06-e247b401bf71","id":"QR_408b8f67-7ca7-4a66-9f06-e247b401bf71","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 03:17:07][351771924706824][4553 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-24 03:17:07][351771924706824][4553 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-24 03:17:07][351771924706824][4553 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 03:24:03][352682505093608][1 ms][INFO] === Request start === [2025-08-24 03:24:03][352682505093608][1 ms][DEBUG] START check_scloud [2025-08-24 03:24:03][352682505093608][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 03:24:03][352682505093608][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 2850 15285 24193540 171948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 03:24:03][352682505093608][317 ms][DEBUG] targetPkg: running [2025-08-24 03:24:03][352682505093608][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-24 03:24:03][352682505093608][317 ms][DEBUG] START check_boot_completed [2025-08-24 03:24:03][352682505093608][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 03:24:03][352682505093608][348 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 03:24:03][352682505093608][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 03:24:03][352682505093608][397 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 03:24:03][352682505093608][397 ms][DEBUG] END check_boot_completed in 80 ms [2025-08-24 03:24:03][352682505093608][397 ms][DEBUG] START check_internet [2025-08-24 03:24:03][352682505093608][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 03:24:04][352682505093608][942 ms][DEBUG] SU: done in 545 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.810/202.810/202.810/0.000 ms\n [2025-08-24 03:24:04][352682505093608][942 ms][DEBUG] check_internet: online [2025-08-24 03:24:04][352682505093608][942 ms][DEBUG] END check_internet in 545 ms [2025-08-24 03:24:04][352682505093608][942 ms][DEBUG] rawBody.length=1148 [2025-08-24 03:24:04][352682505093608][942 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682505093608\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7086\"}'\'' -e'"" [2025-08-24 03:24:04][352682505093608][942 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 03:24:04][352682505093608][942 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682505093608\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7086\"}'\'' -e'"" [2025-08-24 03:24:08][352682505093608][5097 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b658b477-3a3b-48ee-a0f7-9f686985db72","id":"QR_b658b477-3a3b-48ee-a0f7-9f686985db72","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 03:24:08][352682505093608][5253 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-24 03:24:08][352682505093608][5253 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-24 03:24:08][352682505093608][5253 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 03:42:03][357733315915210][1 ms][INFO] === Request start === [2025-08-24 03:42:03][357733315915210][1 ms][DEBUG] START check_scloud [2025-08-24 03:42:03][357733315915210][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 03:42:03][357733315915210][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 2850 15285 24305256 163044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 03:42:03][357733315915210][297 ms][DEBUG] targetPkg: running [2025-08-24 03:42:03][357733315915210][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-24 03:42:03][357733315915210][297 ms][DEBUG] START check_boot_completed [2025-08-24 03:42:03][357733315915210][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 03:42:03][357733315915210][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 03:42:03][357733315915210][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 03:42:03][357733315915210][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 03:42:03][357733315915210][390 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 03:42:03][357733315915210][390 ms][DEBUG] START check_internet [2025-08-24 03:42:03][357733315915210][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 03:42:04][357733315915210][875 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.539/200.539/200.539/0.000 ms\n [2025-08-24 03:42:04][357733315915210][875 ms][DEBUG] check_internet: online [2025-08-24 03:42:04][357733315915210][875 ms][DEBUG] END check_internet in 485 ms [2025-08-24 03:42:04][357733315915210][875 ms][DEBUG] rawBody.length=1148 [2025-08-24 03:42:04][357733315915210][875 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357733315915210\",\"model\":\"SM-A5460\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"BRI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3787\"}'\'' -e'"" [2025-08-24 03:42:04][357733315915210][875 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 03:42:04][357733315915210][875 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357733315915210\",\"model\":\"SM-A5460\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"BRI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3787\"}'\'' -e'"" [2025-08-24 03:42:08][357733315915210][5108 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_166c035a-a2b5-4d65-83ba-f7391ac7fee6","id":"QR_166c035a-a2b5-4d65-83ba-f7391ac7fee6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 03:42:08][357733315915210][5264 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-24 03:42:08][357733315915210][5264 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-24 03:42:08][357733315915210][5264 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 03:47:03][354485112748178][1 ms][INFO] === Request start === [2025-08-24 03:47:03][354485112748178][1 ms][DEBUG] START check_scloud [2025-08-24 03:47:03][354485112748178][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 03:47:03][354485112748178][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 2850 15285 24442648 162736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 03:47:03][354485112748178][299 ms][DEBUG] targetPkg: running [2025-08-24 03:47:03][354485112748178][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-24 03:47:03][354485112748178][299 ms][DEBUG] START check_boot_completed [2025-08-24 03:47:03][354485112748178][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 03:47:03][354485112748178][331 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 03:47:03][354485112748178][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 03:47:03][354485112748178][378 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 03:47:03][354485112748178][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 03:47:03][354485112748178][378 ms][DEBUG] rawBody.length=1148 [2025-08-24 03:47:03][354485112748178][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354485112748178\",\"model\":\"SM-A516N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7212\"}'\'' -e'"" [2025-08-24 03:47:03][354485112748178][378 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 03:47:03][354485112748178][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354485112748178\",\"model\":\"SM-A516N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7212\"}'\'' -e'"" [2025-08-24 03:47:07][354485112748178][4564 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_daa48c25-03ec-43c6-b6f9-68386edc9753","id":"QR_daa48c25-03ec-43c6-b6f9-68386edc9753","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 03:47:07][354485112748178][4720 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-08-24 03:47:07][354485112748178][4720 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-24 03:47:07][354485112748178][4720 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 03:55:03][357967972131444][1 ms][INFO] === Request start === [2025-08-24 03:55:03][357967972131444][1 ms][DEBUG] START check_scloud [2025-08-24 03:55:03][357967972131444][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 03:55:03][357967972131444][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 2850 15285 24558632 173884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 03:55:03][357967972131444][292 ms][DEBUG] targetPkg: running [2025-08-24 03:55:03][357967972131444][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-24 03:55:03][357967972131444][292 ms][DEBUG] START check_boot_completed [2025-08-24 03:55:03][357967972131444][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 03:55:03][357967972131444][339 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 03:55:03][357967972131444][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 03:55:04][357967972131444][387 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 03:55:04][357967972131444][387 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 03:55:04][357967972131444][387 ms][DEBUG] rawBody.length=1148 [2025-08-24 03:55:04][357967972131444][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967972131444\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"VFJ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7885\"}'\'' -e'"" [2025-08-24 03:55:04][357967972131444][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 03:55:04][357967972131444][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967972131444\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"VFJ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7885\"}'\'' -e'"" [2025-08-24 03:55:08][357967972131444][4494 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f64109a7-5813-44be-96d4-5636a14b6256","id":"QR_f64109a7-5813-44be-96d4-5636a14b6256","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 03:55:08][357967972131444][4650 ms][DEBUG] proc_open done in 4263 ms; code=255; res.len=3343 [2025-08-24 03:55:08][357967972131444][4650 ms][DEBUG] END runCmdUntilRes#1 in 4263 ms [2025-08-24 03:55:08][357967972131444][4650 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 04:02:04][355296341186976][1 ms][INFO] === Request start === [2025-08-24 04:02:04][355296341186976][1 ms][DEBUG] START check_scloud [2025-08-24 04:02:04][355296341186976][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 04:02:04][355296341186976][297 ms][DEBUG] SU: done in 295 ms; outu0_a118 2850 15285 24717580 184272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 04:02:04][355296341186976][297 ms][DEBUG] targetPkg: running [2025-08-24 04:02:04][355296341186976][297 ms][DEBUG] END check_scloud in 295 ms [2025-08-24 04:02:04][355296341186976][297 ms][DEBUG] START check_boot_completed [2025-08-24 04:02:04][355296341186976][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 04:02:04][355296341186976][328 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 04:02:04][355296341186976][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 04:02:04][355296341186976][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 04:02:04][355296341186976][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 04:02:04][355296341186976][375 ms][DEBUG] START check_internet [2025-08-24 04:02:04][355296341186976][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 04:02:05][355296341186976][890 ms][DEBUG] SU: done in 516 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.692/201.692/201.692/0.000 ms\n [2025-08-24 04:02:05][355296341186976][890 ms][DEBUG] check_internet: online [2025-08-24 04:02:05][355296341186976][890 ms][DEBUG] END check_internet in 516 ms [2025-08-24 04:02:05][355296341186976][891 ms][DEBUG] rawBody.length=1149 [2025-08-24 04:02:05][355296341186976][891 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355296341186976\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8186\"}'\'' -e'"" [2025-08-24 04:02:05][355296341186976][891 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 04:02:05][355296341186976][891 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355296341186976\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8186\"}'\'' -e'"" [2025-08-24 04:02:11][355296341186976][6608 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1280b560-1289-472a-bb60-16e73eb6db23","id":"QR_1280b560-1289-472a-bb60-16e73eb6db23","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 04:02:11][355296341186976][6764 ms][DEBUG] proc_open done in 5873 ms; code=255; res.len=3343 [2025-08-24 04:02:11][355296341186976][6764 ms][DEBUG] END runCmdUntilRes#1 in 5873 ms [2025-08-24 04:02:11][355296341186976][6764 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 04:04:03][354737330572115][1 ms][INFO] === Request start === [2025-08-24 04:04:03][354737330572115][1 ms][DEBUG] START check_scloud [2025-08-24 04:04:03][354737330572115][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 04:04:03][354737330572115][309 ms][DEBUG] SU: done in 307 ms; outu0_a118 2850 15285 24838716 194844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 04:04:03][354737330572115][309 ms][DEBUG] targetPkg: running [2025-08-24 04:04:03][354737330572115][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-24 04:04:03][354737330572115][309 ms][DEBUG] START check_boot_completed [2025-08-24 04:04:03][354737330572115][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 04:04:03][354737330572115][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 04:04:03][354737330572115][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 04:04:03][354737330572115][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 04:04:03][354737330572115][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 04:04:03][354737330572115][418 ms][DEBUG] START check_internet [2025-08-24 04:04:03][354737330572115][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 04:04:04][354737330572115][902 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.811/201.811/201.811/0.000 ms\n [2025-08-24 04:04:04][354737330572115][902 ms][DEBUG] check_internet: online [2025-08-24 04:04:04][354737330572115][902 ms][DEBUG] END check_internet in 484 ms [2025-08-24 04:04:04][354737330572115][903 ms][DEBUG] rawBody.length=1149 [2025-08-24 04:04:04][354737330572115][903 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354737330572115\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8390\"}'\'' -e'"" [2025-08-24 04:04:04][354737330572115][903 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 04:04:04][354737330572115][903 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354737330572115\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8390\"}'\'' -e'"" [2025-08-24 04:04:09][354737330572115][6370 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f3a15636-6e0b-4f4c-90c1-5f17df591667","id":"QR_f3a15636-6e0b-4f4c-90c1-5f17df591667","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 04:04:10][354737330572115][6526 ms][DEBUG] proc_open done in 5623 ms; code=255; res.len=3343 [2025-08-24 04:04:10][354737330572115][6526 ms][DEBUG] END runCmdUntilRes#1 in 5623 ms [2025-08-24 04:04:10][354737330572115][6526 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 04:25:03][357301902469650][1 ms][INFO] === Request start === [2025-08-24 04:25:03][357301902469650][1 ms][DEBUG] START check_scloud [2025-08-24 04:25:03][357301902469650][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 04:25:03][357301902469650][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 2850 15285 24967896 190644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 04:25:03][357301902469650][311 ms][DEBUG] targetPkg: running [2025-08-24 04:25:03][357301902469650][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-24 04:25:03][357301902469650][311 ms][DEBUG] START check_boot_completed [2025-08-24 04:25:03][357301902469650][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 04:25:03][357301902469650][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 04:25:03][357301902469650][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 04:25:03][357301902469650][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 04:25:03][357301902469650][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 04:25:03][357301902469650][420 ms][DEBUG] rawBody.length=1148 [2025-08-24 04:25:03][357301902469650][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357301902469650\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9688\"}'\'' -e'"" [2025-08-24 04:25:03][357301902469650][421 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 04:25:03][357301902469650][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357301902469650\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9688\"}'\'' -e'"" [2025-08-24 04:25:07][357301902469650][4607 ms][DEBUG] proc_open done in 4186 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-24 04:25:07][357301902469650][4607 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-24 04:25:07][357301902469650][4607 ms][WARN] Detected error: Process with pid 2850 either refused to load frida-agent, or terminated during injection [2025-08-24 04:25:07][357301902469650][4607 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 04:25:08][357301902469650][4763 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 04:25:08][357301902469650][4763 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 04:25:08][357301902469650][4763 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 04:25:08][357301902469650][4888 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 04:25:08][357301902469650][4888 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 04:25:08][357301902469650][5060 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 04:25:10][357301902469650][7075 ms][DEBUG] START check_boot_completed [2025-08-24 04:25:10][357301902469650][7075 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 04:25:10][357301902469650][7122 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 04:25:10][357301902469650][7122 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 04:25:10][357301902469650][7184 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 04:25:10][357301902469650][7185 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-24 04:25:13][357301902469650][10199 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 04:25:13][357301902469650][10199 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357301902469650\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9688\"}'\'' -e'"" [2025-08-24 04:25:17][357301902469650][14261 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cac487f8-0644-4950-899a-fc49e693eb7e","id":"QR_cac487f8-0644-4950-899a-fc49e693eb7e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 04:25:17][357301902469650][14417 ms][DEBUG] proc_open done in 4218 ms; code=255; res.len=3343 [2025-08-24 04:25:17][357301902469650][14417 ms][DEBUG] END runCmdUntilRes#2 in 4218 ms [2025-08-24 04:25:17][357301902469650][14417 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 04:33:04][351671773415008][1 ms][INFO] === Request start === [2025-08-24 04:33:04][351671773415008][1 ms][DEBUG] START check_scloud [2025-08-24 04:33:04][351671773415008][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 04:33:05][351671773415008][300 ms][DEBUG] SU: done in 298 ms; outu0_a118 7922 15285 23584664 129556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 04:33:05][351671773415008][300 ms][DEBUG] targetPkg: running [2025-08-24 04:33:05][351671773415008][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-24 04:33:05][351671773415008][300 ms][DEBUG] START check_boot_completed [2025-08-24 04:33:05][351671773415008][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 04:33:05][351671773415008][345 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 04:33:05][351671773415008][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 04:33:05][351671773415008][407 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 04:33:05][351671773415008][408 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-24 04:33:05][351671773415008][408 ms][DEBUG] rawBody.length=1148 [2025-08-24 04:33:05][351671773415008][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351671773415008\",\"model\":\"SM-A136S\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4772\"}'\'' -e'"" [2025-08-24 04:33:05][351671773415008][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 04:33:05][351671773415008][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351671773415008\",\"model\":\"SM-A136S\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4772\"}'\'' -e'"" [2025-08-24 04:33:09][351671773415008][4516 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_50d2611b-af4a-40c0-bf79-dc15271f97f5","id":"QR_50d2611b-af4a-40c0-bf79-dc15271f97f5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 04:33:09][351671773415008][4672 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-24 04:33:09][351671773415008][4672 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-24 04:33:09][351671773415008][4672 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 04:36:03][354747955674393][1 ms][INFO] === Request start === [2025-08-24 04:36:03][354747955674393][1 ms][DEBUG] START check_scloud [2025-08-24 04:36:03][354747955674393][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 04:36:03][354747955674393][298 ms][DEBUG] SU: done in 296 ms; outu0_a118 7922 15285 23707784 140424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 04:36:03][354747955674393][298 ms][DEBUG] targetPkg: running [2025-08-24 04:36:03][354747955674393][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-24 04:36:03][354747955674393][298 ms][DEBUG] START check_boot_completed [2025-08-24 04:36:03][354747955674393][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 04:36:03][354747955674393][329 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 04:36:03][354747955674393][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 04:36:03][354747955674393][376 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 04:36:03][354747955674393][376 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 04:36:03][354747955674393][376 ms][DEBUG] START check_internet [2025-08-24 04:36:03][354747955674393][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 04:36:04][354747955674393][907 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.476/200.476/200.476/0.000 ms\n [2025-08-24 04:36:04][354747955674393][907 ms][DEBUG] check_internet: online [2025-08-24 04:36:04][354747955674393][907 ms][DEBUG] END check_internet in 531 ms [2025-08-24 04:36:04][354747955674393][907 ms][DEBUG] rawBody.length=1148 [2025-08-24 04:36:04][354747955674393][908 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747955674393\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1768\"}'\'' -e'"" [2025-08-24 04:36:04][354747955674393][908 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 04:36:04][354747955674393][908 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747955674393\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1768\"}'\'' -e'"" [2025-08-24 04:36:08][354747955674393][5140 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7c4c641d-5932-4ae8-a932-07df27f45338","id":"QR_7c4c641d-5932-4ae8-a932-07df27f45338","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 04:36:08][354747955674393][5297 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-24 04:36:08][354747955674393][5297 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-24 04:36:08][354747955674393][5297 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 04:52:03][357298581778924][1 ms][INFO] === Request start === [2025-08-24 04:52:03][357298581778924][1 ms][DEBUG] START check_scloud [2025-08-24 04:52:03][357298581778924][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 04:52:03][357298581778924][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 7922 15285 23814204 151888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 04:52:03][357298581778924][301 ms][DEBUG] targetPkg: running [2025-08-24 04:52:03][357298581778924][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-24 04:52:03][357298581778924][301 ms][DEBUG] START check_boot_completed [2025-08-24 04:52:03][357298581778924][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 04:52:03][357298581778924][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 04:52:03][357298581778924][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 04:52:03][357298581778924][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 04:52:03][357298581778924][394 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 04:52:03][357298581778924][394 ms][DEBUG] START check_internet [2025-08-24 04:52:03][357298581778924][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 04:52:04][357298581778924][1284 ms][DEBUG] SU: done in 890 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.900/199.900/199.900/0.000 ms\n [2025-08-24 04:52:04][357298581778924][1284 ms][DEBUG] check_internet: online [2025-08-24 04:52:04][357298581778924][1284 ms][DEBUG] END check_internet in 890 ms [2025-08-24 04:52:04][357298581778924][1284 ms][DEBUG] rawBody.length=1148 [2025-08-24 04:52:04][357298581778924][1284 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357298581778924\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1943\"}'\'' -e'"" [2025-08-24 04:52:04][357298581778924][1284 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 04:52:04][357298581778924][1284 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357298581778924\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1943\"}'\'' -e'"" [2025-08-24 04:52:08][357298581778924][5377 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f0eae4b-906c-4136-b0da-42e6cf72bd3d","id":"QR_3f0eae4b-906c-4136-b0da-42e6cf72bd3d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 04:52:08][357298581778924][5533 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-08-24 04:52:08][357298581778924][5533 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-24 04:52:08][357298581778924][5533 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 05:06:03][350076121748251][1 ms][INFO] === Request start === [2025-08-24 05:06:03][350076121748251][1 ms][DEBUG] START check_scloud [2025-08-24 05:06:03][350076121748251][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 05:06:03][350076121748251][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 7922 15285 23936160 162780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 05:06:03][350076121748251][264 ms][DEBUG] targetPkg: running [2025-08-24 05:06:03][350076121748251][264 ms][DEBUG] END check_scloud in 263 ms [2025-08-24 05:06:03][350076121748251][264 ms][DEBUG] START check_boot_completed [2025-08-24 05:06:03][350076121748251][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 05:06:03][350076121748251][311 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 05:06:03][350076121748251][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 05:06:03][350076121748251][358 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 05:06:03][350076121748251][358 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 05:06:03][350076121748251][358 ms][DEBUG] START check_internet [2025-08-24 05:06:03][350076121748251][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 05:06:03][350076121748251][781 ms][DEBUG] SU: done in 423 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.939/200.939/200.939/0.000 ms\n [2025-08-24 05:06:03][350076121748251][781 ms][DEBUG] check_internet: online [2025-08-24 05:06:03][350076121748251][781 ms][DEBUG] END check_internet in 423 ms [2025-08-24 05:06:03][350076121748251][781 ms][DEBUG] rawBody.length=1148 [2025-08-24 05:06:03][350076121748251][781 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350076121748251\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2213\"}'\'' -e'"" [2025-08-24 05:06:03][350076121748251][781 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 05:06:03][350076121748251][781 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350076121748251\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2213\"}'\'' -e'"" [2025-08-24 05:06:08][350076121748251][5122 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1affa182-2207-4d8f-9842-379d1def1261","id":"QR_1affa182-2207-4d8f-9842-379d1def1261","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 05:06:08][350076121748251][5278 ms][DEBUG] proc_open done in 4497 ms; code=255; res.len=3343 [2025-08-24 05:06:08][350076121748251][5278 ms][DEBUG] END runCmdUntilRes#1 in 4497 ms [2025-08-24 05:06:08][350076121748251][5278 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 05:15:03][350490940431413][1 ms][INFO] === Request start === [2025-08-24 05:15:03][350490940431413][1 ms][DEBUG] START check_scloud [2025-08-24 05:15:03][350490940431413][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 05:15:03][350490940431413][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 7922 15285 24091012 166732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 05:15:03][350490940431413][275 ms][DEBUG] targetPkg: running [2025-08-24 05:15:03][350490940431413][275 ms][DEBUG] END check_scloud in 274 ms [2025-08-24 05:15:03][350490940431413][275 ms][DEBUG] START check_boot_completed [2025-08-24 05:15:03][350490940431413][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 05:15:03][350490940431413][322 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 05:15:03][350490940431413][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 05:15:03][350490940431413][369 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 05:15:03][350490940431413][369 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 05:15:03][350490940431413][369 ms][DEBUG] rawBody.length=1148 [2025-08-24 05:15:03][350490940431413][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350490940431413\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8729\"}'\'' -e'"" [2025-08-24 05:15:03][350490940431413][369 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 05:15:03][350490940431413][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350490940431413\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8729\"}'\'' -e'"" [2025-08-24 05:15:07][350490940431413][4586 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c8bc64f5-24f6-4fe2-9834-b458b733b687","id":"QR_c8bc64f5-24f6-4fe2-9834-b458b733b687","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 05:15:07][350490940431413][4742 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3343 [2025-08-24 05:15:07][350490940431413][4742 ms][DEBUG] END runCmdUntilRes#1 in 4373 ms [2025-08-24 05:15:07][350490940431413][4742 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 05:41:02][359257101194952][1 ms][INFO] === Request start === [2025-08-24 05:41:02][359257101194952][1 ms][DEBUG] START check_scloud [2025-08-24 05:41:02][359257101194952][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 05:41:03][359257101194952][326 ms][DEBUG] SU: done in 324 ms; outu0_a118 7922 15285 24239720 153560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 05:41:03][359257101194952][326 ms][DEBUG] targetPkg: running [2025-08-24 05:41:03][359257101194952][326 ms][DEBUG] END check_scloud in 325 ms [2025-08-24 05:41:03][359257101194952][326 ms][DEBUG] START check_boot_completed [2025-08-24 05:41:03][359257101194952][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 05:41:03][359257101194952][357 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 05:41:03][359257101194952][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 05:41:03][359257101194952][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 05:41:03][359257101194952][404 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 05:41:03][359257101194952][404 ms][DEBUG] rawBody.length=1148 [2025-08-24 05:41:03][359257101194952][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359257101194952\",\"model\":\"SM-N975F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4797\"}'\'' -e'"" [2025-08-24 05:41:03][359257101194952][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 05:41:03][359257101194952][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359257101194952\",\"model\":\"SM-N975F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4797\"}'\'' -e'"" [2025-08-24 05:41:07][359257101194952][4668 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_35e93cfa-23f5-4f0a-b909-9d11a1981175","id":"QR_35e93cfa-23f5-4f0a-b909-9d11a1981175","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 05:41:07][359257101194952][4825 ms][DEBUG] proc_open done in 4421 ms; code=255; res.len=3343 [2025-08-24 05:41:07][359257101194952][4825 ms][DEBUG] END runCmdUntilRes#1 in 4421 ms [2025-08-24 05:41:07][359257101194952][4825 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 05:51:03][357582386843961][1 ms][INFO] === Request start === [2025-08-24 05:51:03][357582386843961][1 ms][DEBUG] START check_scloud [2025-08-24 05:51:03][357582386843961][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 05:51:03][357582386843961][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 7922 15285 24380172 149804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 05:51:03][357582386843961][275 ms][DEBUG] targetPkg: running [2025-08-24 05:51:03][357582386843961][275 ms][DEBUG] END check_scloud in 274 ms [2025-08-24 05:51:03][357582386843961][275 ms][DEBUG] START check_boot_completed [2025-08-24 05:51:03][357582386843961][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 05:51:03][357582386843961][322 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 05:51:03][357582386843961][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 05:51:03][357582386843961][370 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 05:51:03][357582386843961][370 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 05:51:03][357582386843961][370 ms][DEBUG] rawBody.length=1148 [2025-08-24 05:51:03][357582386843961][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357582386843961\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4366\"}'\'' -e'"" [2025-08-24 05:51:03][357582386843961][370 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 05:51:03][357582386843961][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357582386843961\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4366\"}'\'' -e'"" [2025-08-24 05:51:07][357582386843961][4321 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_15cd5525-96a1-4c24-8fe3-905626630e98","id":"QR_15cd5525-96a1-4c24-8fe3-905626630e98","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 05:51:07][357582386843961][4477 ms][DEBUG] proc_open done in 4107 ms; code=255; res.len=3343 [2025-08-24 05:51:07][357582386843961][4477 ms][DEBUG] END runCmdUntilRes#1 in 4107 ms [2025-08-24 05:51:07][357582386843961][4477 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 06:01:05][354519748426948][1 ms][INFO] === Request start === [2025-08-24 06:01:05][354519748426948][1 ms][DEBUG] START check_scloud [2025-08-24 06:01:05][354519748426948][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 06:01:05][354519748426948][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 7922 15285 24506224 162028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 06:01:05][354519748426948][302 ms][DEBUG] targetPkg: running [2025-08-24 06:01:05][354519748426948][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-24 06:01:05][354519748426948][302 ms][DEBUG] START check_boot_completed [2025-08-24 06:01:05][354519748426948][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 06:01:05][354519748426948][333 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 06:01:05][354519748426948][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 06:01:05][354519748426948][380 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 06:01:05][354519748426948][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 06:01:05][354519748426948][380 ms][DEBUG] rawBody.length=1158 [2025-08-24 06:01:05][354519748426948][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354519748426948\",\"model\":\"SM-X510\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R54X203S2WB\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8765\"}'\'' -e'"" [2025-08-24 06:01:05][354519748426948][380 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 06:01:05][354519748426948][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354519748426948\",\"model\":\"SM-X510\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R54X203S2WB\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8765\"}'\'' -e'"" [2025-08-24 06:01:09][354519748426948][4598 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_49999f48-807b-47a3-a8b6-23003cdecdba","id":"QR_49999f48-807b-47a3-a8b6-23003cdecdba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 06:01:09][354519748426948][4754 ms][DEBUG] proc_open done in 4374 ms; code=255; res.len=3343 [2025-08-24 06:01:09][354519748426948][4754 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-24 06:01:09][354519748426948][4754 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 06:03:04][353690624135605][1 ms][INFO] === Request start === [2025-08-24 06:03:04][353690624135605][1 ms][DEBUG] START check_scloud [2025-08-24 06:03:04][353690624135605][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 06:03:05][353690624135605][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 7922 15285 24635552 170692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 06:03:05][353690624135605][317 ms][DEBUG] targetPkg: running [2025-08-24 06:03:05][353690624135605][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-24 06:03:05][353690624135605][317 ms][DEBUG] START check_boot_completed [2025-08-24 06:03:05][353690624135605][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 06:03:05][353690624135605][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 06:03:05][353690624135605][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 06:03:05][353690624135605][410 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 06:03:05][353690624135605][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 06:03:05][353690624135605][410 ms][DEBUG] rawBody.length=1149 [2025-08-24 06:03:05][353690624135605][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353690624135605\",\"model\":\"SM-S921U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CCT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9995\"}'\'' -e'"" [2025-08-24 06:03:05][353690624135605][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 06:03:05][353690624135605][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353690624135605\",\"model\":\"SM-S921U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CCT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9995\"}'\'' -e'"" [2025-08-24 06:03:10][353690624135605][5675 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5b066079-01e9-4fc3-b80a-b2c94c602ffa","id":"QR_5b066079-01e9-4fc3-b80a-b2c94c602ffa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 06:03:10][353690624135605][5831 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-08-24 06:03:10][353690624135605][5831 ms][DEBUG] END runCmdUntilRes#1 in 5421 ms [2025-08-24 06:03:10][353690624135605][5831 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 06:07:03][350616254794240][1 ms][INFO] === Request start === [2025-08-24 06:07:03][350616254794240][1 ms][DEBUG] START check_scloud [2025-08-24 06:07:03][350616254794240][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 06:07:04][350616254794240][318 ms][DEBUG] SU: done in 316 ms; outu0_a118 7922 15285 24779464 182868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 06:07:04][350616254794240][318 ms][DEBUG] targetPkg: running [2025-08-24 06:07:04][350616254794240][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-24 06:07:04][350616254794240][318 ms][DEBUG] START check_boot_completed [2025-08-24 06:07:04][350616254794240][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 06:07:04][350616254794240][349 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 06:07:04][350616254794240][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 06:07:04][350616254794240][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 06:07:04][350616254794240][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 06:07:04][350616254794240][396 ms][DEBUG] rawBody.length=1148 [2025-08-24 06:07:04][350616254794240][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616254794240\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2280\"}'\'' -e'"" [2025-08-24 06:07:04][350616254794240][396 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 06:07:04][350616254794240][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616254794240\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2280\"}'\'' -e'"" [2025-08-24 06:07:08][350616254794240][4442 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3237f2d5-405f-4d16-a82a-10d5011f859a","id":"QR_3237f2d5-405f-4d16-a82a-10d5011f859a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 06:07:08][350616254794240][4598 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-08-24 06:07:08][350616254794240][4598 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-24 06:07:08][350616254794240][4598 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 06:07:10][351234166489591][0 ms][INFO] === Request start === [2025-08-24 06:07:10][351234166489591][1 ms][DEBUG] START check_scloud [2025-08-24 06:07:10][351234166489591][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 06:07:11][351234166489591][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 7922 15285 24930256 193788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 06:07:11][351234166489591][315 ms][DEBUG] targetPkg: running [2025-08-24 06:07:11][351234166489591][315 ms][DEBUG] END check_scloud in 315 ms [2025-08-24 06:07:11][351234166489591][315 ms][DEBUG] START check_boot_completed [2025-08-24 06:07:11][351234166489591][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 06:07:11][351234166489591][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 06:07:11][351234166489591][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 06:07:11][351234166489591][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 06:07:11][351234166489591][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 06:07:11][351234166489591][409 ms][DEBUG] rawBody.length=1148 [2025-08-24 06:07:11][351234166489591][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234166489591\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2462\"}'\'' -e'"" [2025-08-24 06:07:11][351234166489591][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 06:07:11][351234166489591][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234166489591\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2462\"}'\'' -e'"" [2025-08-24 06:07:15][351234166489591][4720 ms][DEBUG] proc_open done in 4311 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-24 06:07:15][351234166489591][4720 ms][DEBUG] END runCmdUntilRes#1 in 4312 ms [2025-08-24 06:07:15][351234166489591][4720 ms][WARN] Detected error: Process with pid 7922 either refused to load frida-agent, or terminated during injection [2025-08-24 06:07:15][351234166489591][4720 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 06:07:15][351234166489591][4877 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 06:07:15][351234166489591][4877 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 06:07:15][351234166489591][4877 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 06:07:15][351234166489591][5017 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 06:07:15][351234166489591][5017 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 06:07:16][351234166489591][5205 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 06:07:18][351234166489591][7220 ms][DEBUG] START check_boot_completed [2025-08-24 06:07:18][351234166489591][7220 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 06:07:18][351234166489591][7267 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 06:07:18][351234166489591][7267 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 06:07:18][351234166489591][7346 ms][DEBUG] SU: done in 79 ms; out [2025-08-24 06:07:18][351234166489591][7346 ms][DEBUG] END check_boot_completed in 127 ms [2025-08-24 06:07:21][351234166489591][10360 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 06:07:21][351234166489591][10360 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234166489591\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2462\"}'\'' -e'"" [2025-08-24 06:07:24][351234166489591][14046 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3fb54c2f-07f6-41f3-a424-ef4bfb8e3bd2","id":"QR_3fb54c2f-07f6-41f3-a424-ef4bfb8e3bd2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 06:07:25][351234166489591][14202 ms][DEBUG] proc_open done in 3843 ms; code=255; res.len=3343 [2025-08-24 06:07:25][351234166489591][14202 ms][DEBUG] END runCmdUntilRes#2 in 3843 ms [2025-08-24 06:07:25][351234166489591][14202 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 06:08:03][350490940496796][1 ms][INFO] === Request start === [2025-08-24 06:08:03][350490940496796][1 ms][DEBUG] START check_scloud [2025-08-24 06:08:03][350490940496796][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 06:08:04][350490940496796][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 11816 15285 23640240 128932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 06:08:04][350490940496796][313 ms][DEBUG] targetPkg: running [2025-08-24 06:08:04][350490940496796][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-24 06:08:04][350490940496796][313 ms][DEBUG] START check_boot_completed [2025-08-24 06:08:04][350490940496796][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 06:08:04][350490940496796][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 06:08:04][350490940496796][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 06:08:04][350490940496796][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 06:08:04][350490940496796][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 06:08:04][350490940496796][407 ms][DEBUG] START check_internet [2025-08-24 06:08:04][350490940496796][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 06:08:05][350490940496796][1297 ms][DEBUG] SU: done in 891 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.854/202.854/202.854/0.000 ms\n [2025-08-24 06:08:05][350490940496796][1297 ms][DEBUG] check_internet: online [2025-08-24 06:08:05][350490940496796][1297 ms][DEBUG] END check_internet in 891 ms [2025-08-24 06:08:05][350490940496796][1297 ms][DEBUG] rawBody.length=1148 [2025-08-24 06:08:05][350490940496796][1298 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350490940496796\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2442\"}'\'' -e'"" [2025-08-24 06:08:05][350490940496796][1298 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 06:08:05][350490940496796][1298 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350490940496796\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2442\"}'\'' -e'"" [2025-08-24 06:08:09][350490940496796][5483 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c7a3ea00-d92a-45db-bea3-63c0694abbba","id":"QR_c7a3ea00-d92a-45db-bea3-63c0694abbba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 06:08:09][350490940496796][5640 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-08-24 06:08:09][350490940496796][5640 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-24 06:08:09][350490940496796][5640 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 06:22:03][350013886432607][0 ms][INFO] === Request start === [2025-08-24 06:22:03][350013886432607][0 ms][DEBUG] START check_scloud [2025-08-24 06:22:03][350013886432607][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 06:22:03][350013886432607][307 ms][DEBUG] SU: done in 307 ms; outu0_a118 11816 15285 23778612 140660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 06:22:03][350013886432607][307 ms][DEBUG] targetPkg: running [2025-08-24 06:22:03][350013886432607][307 ms][DEBUG] END check_scloud in 307 ms [2025-08-24 06:22:03][350013886432607][307 ms][DEBUG] START check_boot_completed [2025-08-24 06:22:03][350013886432607][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 06:22:03][350013886432607][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 06:22:03][350013886432607][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 06:22:03][350013886432607][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 06:22:03][350013886432607][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 06:22:03][350013886432607][401 ms][DEBUG] START check_internet [2025-08-24 06:22:03][350013886432607][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 06:22:04][350013886432607][948 ms][DEBUG] SU: done in 547 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.640/202.640/202.640/0.000 ms\n [2025-08-24 06:22:04][350013886432607][948 ms][DEBUG] check_internet: online [2025-08-24 06:22:04][350013886432607][948 ms][DEBUG] END check_internet in 547 ms [2025-08-24 06:22:04][350013886432607][948 ms][DEBUG] rawBody.length=1148 [2025-08-24 06:22:04][350013886432607][948 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013886432607\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1419\"}'\'' -e'"" [2025-08-24 06:22:04][350013886432607][948 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 06:22:04][350013886432607][948 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013886432607\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1419\"}'\'' -e'"" [2025-08-24 06:22:08][350013886432607][5478 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c26b7e94-c441-4bb6-a6d7-1d403da426d9","id":"QR_c26b7e94-c441-4bb6-a6d7-1d403da426d9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 06:22:08][350013886432607][5634 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-08-24 06:22:08][350013886432607][5634 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-08-24 06:22:08][350013886432607][5634 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 06:29:29][353628424738574][1 ms][INFO] === Request start === [2025-08-24 06:29:29][353628424738574][1 ms][DEBUG] START check_scloud [2025-08-24 06:29:29][353628424738574][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 06:29:29][353628424738574][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 11816 15285 23895256 151684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 06:29:29][353628424738574][300 ms][DEBUG] targetPkg: running [2025-08-24 06:29:29][353628424738574][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-24 06:29:29][353628424738574][300 ms][DEBUG] START check_boot_completed [2025-08-24 06:29:29][353628424738574][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 06:29:29][353628424738574][331 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 06:29:29][353628424738574][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 06:29:30][353628424738574][394 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 06:29:30][353628424738574][394 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 06:29:30][353628424738574][394 ms][DEBUG] rawBody.length=1148 [2025-08-24 06:29:30][353628424738574][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628424738574\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6125\"}'\'' -e'"" [2025-08-24 06:29:30][353628424738574][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 06:29:30][353628424738574][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628424738574\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6125\"}'\'' -e'"" [2025-08-24 06:29:33][353628424738574][4158 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 06:29:33][353628424738574][4315 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=107 [2025-08-24 06:29:33][353628424738574][4315 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-08-24 06:29:33][353628424738574][4315 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 06:29:34][][0 ms][INFO] === Request start === [2025-08-24 06:29:34][][1 ms][DEBUG] START check_scloud [2025-08-24 06:29:34][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 06:29:34][][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 11816 15285 24062436 162864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 06:29:34][][313 ms][DEBUG] targetPkg: running [2025-08-24 06:29:34][][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-24 06:29:34][][313 ms][DEBUG] START check_boot_completed [2025-08-24 06:29:34][][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 06:29:34][][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 06:29:34][][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 06:29:34][][406 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 06:29:34][][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 06:29:34][][406 ms][DEBUG] rawBody.length=1129 [2025-08-24 06:29:34][][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8X2020ADD\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6725\"}'\'' -e'"" [2025-08-24 06:29:34][][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 06:29:34][][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8X2020ADD\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6725\"}'\'' -e'"" [2025-08-24 06:29:38][][3796 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 06:29:38][][3952 ms][DEBUG] proc_open done in 3546 ms; code=255; res.len=107 [2025-08-24 06:29:38][][3952 ms][DEBUG] END runCmdUntilRes#1 in 3546 ms [2025-08-24 06:29:38][][3952 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 06:29:40][353628424738574][0 ms][INFO] === Request start === [2025-08-24 06:29:40][353628424738574][1 ms][DEBUG] START check_scloud [2025-08-24 06:29:40][353628424738574][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 06:29:40][353628424738574][264 ms][DEBUG] SU: done in 264 ms; outu0_a118 11816 15285 24202988 173620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 06:29:40][353628424738574][265 ms][DEBUG] targetPkg: running [2025-08-24 06:29:40][353628424738574][265 ms][DEBUG] END check_scloud in 264 ms [2025-08-24 06:29:40][353628424738574][265 ms][DEBUG] START check_boot_completed [2025-08-24 06:29:40][353628424738574][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 06:29:40][353628424738574][311 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 06:29:40][353628424738574][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 06:29:40][353628424738574][374 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 06:29:40][353628424738574][374 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 06:29:40][353628424738574][374 ms][DEBUG] rawBody.length=1149 [2025-08-24 06:29:40][353628424738574][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628424738574\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1693\"}'\'' -e'"" [2025-08-24 06:29:40][353628424738574][374 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 06:29:40][353628424738574][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628424738574\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1693\"}'\'' -e'"" [2025-08-24 06:29:46][353628424738574][6341 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fd53d7d4-ee65-452d-85f6-6e1a439ab903","id":"QR_fd53d7d4-ee65-452d-85f6-6e1a439ab903","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 06:29:47][353628424738574][6497 ms][DEBUG] proc_open done in 6123 ms; code=255; res.len=3343 [2025-08-24 06:29:47][353628424738574][6497 ms][DEBUG] END runCmdUntilRes#1 in 6123 ms [2025-08-24 06:29:47][353628424738574][6497 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 06:32:03][354529383857877][1 ms][INFO] === Request start === [2025-08-24 06:32:03][354529383857877][1 ms][DEBUG] START check_scloud [2025-08-24 06:32:03][354529383857877][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 06:32:03][354529383857877][318 ms][DEBUG] SU: done in 316 ms; outu0_a118 11816 15285 24326080 185608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 06:32:03][354529383857877][318 ms][DEBUG] targetPkg: running [2025-08-24 06:32:03][354529383857877][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-24 06:32:03][354529383857877][318 ms][DEBUG] START check_boot_completed [2025-08-24 06:32:03][354529383857877][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 06:32:03][354529383857877][349 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 06:32:03][354529383857877][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 06:32:03][354529383857877][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 06:32:03][354529383857877][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 06:32:03][354529383857877][396 ms][DEBUG] START check_internet [2025-08-24 06:32:03][354529383857877][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 06:32:04][354529383857877][818 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.517/200.517/200.517/0.000 ms\n [2025-08-24 06:32:04][354529383857877][818 ms][DEBUG] check_internet: online [2025-08-24 06:32:04][354529383857877][818 ms][DEBUG] END check_internet in 422 ms [2025-08-24 06:32:04][354529383857877][818 ms][DEBUG] rawBody.length=1148 [2025-08-24 06:32:04][354529383857877][818 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529383857877\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7413\"}'\'' -e'"" [2025-08-24 06:32:04][354529383857877][818 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 06:32:04][354529383857877][818 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529383857877\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7413\"}'\'' -e'"" [2025-08-24 06:32:07][354529383857877][4566 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-24 06:32:08][354529383857877][4723 ms][DEBUG] proc_open done in 3904 ms; code=255; res.len=115 [2025-08-24 06:32:08][354529383857877][4723 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-24 06:32:08][354529383857877][4723 ms][INFO] SUCCESS response from frida (len=115) [2025-08-24 06:32:08][][0 ms][INFO] === Request start === [2025-08-24 06:32:08][][1 ms][DEBUG] START check_scloud [2025-08-24 06:32:08][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 06:32:08][][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 11816 15285 24483016 196396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 06:32:08][][301 ms][DEBUG] targetPkg: running [2025-08-24 06:32:08][][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-24 06:32:08][][301 ms][DEBUG] START check_boot_completed [2025-08-24 06:32:08][][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 06:32:08][][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 06:32:08][][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 06:32:08][][410 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 06:32:08][][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 06:32:08][][410 ms][DEBUG] START check_internet [2025-08-24 06:32:08][][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 06:32:09][][660 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=136 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 136.799/136.799/136.799/0.000 ms\n [2025-08-24 06:32:09][][660 ms][DEBUG] check_internet: online [2025-08-24 06:32:09][][660 ms][DEBUG] END check_internet in 250 ms [2025-08-24 06:32:09][][661 ms][DEBUG] rawBody.length=1129 [2025-08-24 06:32:09][][661 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8TB02WFMD\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4584\"}'\'' -e'"" [2025-08-24 06:32:09][][661 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 06:32:09][][661 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8TB02WFMD\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4584\"}'\'' -e'"" [2025-08-24 06:32:12][][4112 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 06:32:12][][4268 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=107 [2025-08-24 06:32:12][][4268 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-08-24 06:32:12][][4268 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 06:32:14][354529383857877][0 ms][INFO] === Request start === [2025-08-24 06:32:14][354529383857877][1 ms][DEBUG] START check_scloud [2025-08-24 06:32:14][354529383857877][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 06:32:15][354529383857877][330 ms][DEBUG] SU: done in 329 ms; outu0_a118 11816 15285 24623440 208092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 06:32:15][354529383857877][330 ms][DEBUG] targetPkg: running [2025-08-24 06:32:15][354529383857877][330 ms][DEBUG] END check_scloud in 330 ms [2025-08-24 06:32:15][354529383857877][330 ms][DEBUG] START check_boot_completed [2025-08-24 06:32:15][354529383857877][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 06:32:15][354529383857877][361 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 06:32:15][354529383857877][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 06:32:15][354529383857877][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 06:32:15][354529383857877][408 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 06:32:15][354529383857877][408 ms][DEBUG] START check_internet [2025-08-24 06:32:15][354529383857877][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 06:32:15][354529383857877][767 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=253 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 253.815/253.815/253.815/0.000 ms\n [2025-08-24 06:32:15][354529383857877][768 ms][DEBUG] check_internet: online [2025-08-24 06:32:15][354529383857877][768 ms][DEBUG] END check_internet in 360 ms [2025-08-24 06:32:15][354529383857877][768 ms][DEBUG] rawBody.length=1149 [2025-08-24 06:32:15][354529383857877][768 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529383857877\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9428\"}'\'' -e'"" [2025-08-24 06:32:15][354529383857877][768 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 06:32:15][354529383857877][768 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529383857877\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9428\"}'\'' -e'"" [2025-08-24 06:32:21][354529383857877][6235 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_80e3680a-ee7f-40ab-8335-12cbb7e31ca7","id":"QR_80e3680a-ee7f-40ab-8335-12cbb7e31ca7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 06:32:21][354529383857877][6391 ms][DEBUG] proc_open done in 5623 ms; code=255; res.len=3343 [2025-08-24 06:32:21][354529383857877][6391 ms][DEBUG] END runCmdUntilRes#1 in 5623 ms [2025-08-24 06:32:21][354529383857877][6391 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 06:34:04][355451118077011][1 ms][INFO] === Request start === [2025-08-24 06:34:04][355451118077011][1 ms][DEBUG] START check_scloud [2025-08-24 06:34:04][355451118077011][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 06:34:04][355451118077011][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 11816 15285 24737132 219072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 06:34:04][355451118077011][299 ms][DEBUG] targetPkg: running [2025-08-24 06:34:04][355451118077011][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-24 06:34:04][355451118077011][299 ms][DEBUG] START check_boot_completed [2025-08-24 06:34:04][355451118077011][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 06:34:04][355451118077011][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 06:34:04][355451118077011][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 06:34:04][355451118077011][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 06:34:04][355451118077011][378 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 06:34:04][355451118077011][378 ms][DEBUG] START check_internet [2025-08-24 06:34:04][355451118077011][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 06:34:05][355451118077011][846 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.253/199.253/199.253/0.000 ms\n [2025-08-24 06:34:05][355451118077011][846 ms][DEBUG] check_internet: online [2025-08-24 06:34:05][355451118077011][846 ms][DEBUG] END check_internet in 468 ms [2025-08-24 06:34:05][355451118077011][846 ms][DEBUG] rawBody.length=1149 [2025-08-24 06:34:05][355451118077011][846 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355451118077011\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7750\"}'\'' -e'"" [2025-08-24 06:34:05][355451118077011][846 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 06:34:05][355451118077011][846 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355451118077011\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7750\"}'\'' -e'"" [2025-08-24 06:34:10][355451118077011][6297 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a98e752-d999-4ad1-9ee5-851e255967ee","id":"QR_1a98e752-d999-4ad1-9ee5-851e255967ee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 06:34:11][355451118077011][6454 ms][DEBUG] proc_open done in 5607 ms; code=255; res.len=3343 [2025-08-24 06:34:11][355451118077011][6454 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-08-24 06:34:11][355451118077011][6454 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 06:40:03][358438733228084][1 ms][INFO] === Request start === [2025-08-24 06:40:03][358438733228084][1 ms][DEBUG] START check_scloud [2025-08-24 06:40:03][358438733228084][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 06:40:03][358438733228084][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 11816 15285 24869332 228012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 06:40:03][358438733228084][250 ms][DEBUG] targetPkg: running [2025-08-24 06:40:03][358438733228084][250 ms][DEBUG] END check_scloud in 248 ms [2025-08-24 06:40:03][358438733228084][250 ms][DEBUG] START check_boot_completed [2025-08-24 06:40:03][358438733228084][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 06:40:03][358438733228084][281 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 06:40:03][358438733228084][281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 06:40:03][358438733228084][328 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 06:40:03][358438733228084][328 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 06:40:03][358438733228084][328 ms][DEBUG] START check_internet [2025-08-24 06:40:03][358438733228084][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 06:40:04][358438733228084][843 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.192/201.192/201.192/0.000 ms\n [2025-08-24 06:40:04][358438733228084][843 ms][DEBUG] check_internet: online [2025-08-24 06:40:04][358438733228084][843 ms][DEBUG] END check_internet in 516 ms [2025-08-24 06:40:04][358438733228084][844 ms][DEBUG] rawBody.length=1148 [2025-08-24 06:40:04][358438733228084][844 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438733228084\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9123\"}'\'' -e'"" [2025-08-24 06:40:04][358438733228084][844 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 06:40:04][358438733228084][844 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438733228084\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9123\"}'\'' -e'"" [2025-08-24 06:40:08][358438733228084][5014 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2d4fba81-8b95-431c-97d1-2ecec57fcfc4","id":"QR_2d4fba81-8b95-431c-97d1-2ecec57fcfc4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 06:40:08][358438733228084][5170 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=3343 [2025-08-24 06:40:08][358438733228084][5170 ms][DEBUG] END runCmdUntilRes#1 in 4326 ms [2025-08-24 06:40:08][358438733228084][5170 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 06:43:03][355844570486896][1 ms][INFO] === Request start === [2025-08-24 06:43:03][355844570486896][1 ms][DEBUG] START check_scloud [2025-08-24 06:43:03][355844570486896][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 06:43:03][355844570486896][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 11816 15285 24991416 231180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 06:43:03][355844570486896][259 ms][DEBUG] targetPkg: running [2025-08-24 06:43:03][355844570486896][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-24 06:43:03][355844570486896][259 ms][DEBUG] START check_boot_completed [2025-08-24 06:43:03][355844570486896][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 06:43:03][355844570486896][290 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 06:43:03][355844570486896][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 06:43:03][355844570486896][337 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 06:43:03][355844570486896][337 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 06:43:03][355844570486896][337 ms][DEBUG] rawBody.length=1148 [2025-08-24 06:43:03][355844570486896][337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355844570486896\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4479\"}'\'' -e'"" [2025-08-24 06:43:03][355844570486896][337 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 06:43:03][355844570486896][337 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355844570486896\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4479\"}'\'' -e'"" [2025-08-24 06:43:07][355844570486896][4227 ms][DEBUG] proc_open done in 3889 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 06:43:07][355844570486896][4227 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-24 06:43:07][355844570486896][4227 ms][WARN] Detected error: Process with pid 11816 either refused to load frida-agent, or terminated during injection [2025-08-24 06:43:07][355844570486896][4227 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 06:43:07][355844570486896][4367 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 06:43:07][355844570486896][4367 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 06:43:07][355844570486896][4367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 06:43:07][355844570486896][4492 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 06:43:07][355844570486896][4492 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 06:43:07][355844570486896][4680 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 06:43:09][355844570486896][6695 ms][DEBUG] START check_boot_completed [2025-08-24 06:43:09][355844570486896][6695 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 06:43:09][355844570486896][6742 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 06:43:09][355844570486896][6742 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 06:43:09][355844570486896][6789 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 06:43:09][355844570486896][6789 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 06:43:12][355844570486896][9803 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 06:43:12][355844570486896][9803 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355844570486896\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4479\"}'\'' -e'"" [2025-08-24 06:43:17][355844570486896][13943 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0172cf36-6a50-470c-8e7c-d5515c7afbb3","id":"QR_0172cf36-6a50-470c-8e7c-d5515c7afbb3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 06:43:17][355844570486896][14099 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-08-24 06:43:17][355844570486896][14099 ms][DEBUG] END runCmdUntilRes#2 in 4296 ms [2025-08-24 06:43:17][355844570486896][14099 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 06:48:03][351477977632459][1 ms][INFO] === Request start === [2025-08-24 06:48:03][351477977632459][1 ms][DEBUG] START check_scloud [2025-08-24 06:48:03][351477977632459][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 06:48:04][351477977632459][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 14257 15285 23575816 128672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 06:48:04][351477977632459][308 ms][DEBUG] targetPkg: running [2025-08-24 06:48:04][351477977632459][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-24 06:48:04][351477977632459][308 ms][DEBUG] START check_boot_completed [2025-08-24 06:48:04][351477977632459][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 06:48:04][351477977632459][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 06:48:04][351477977632459][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 06:48:04][351477977632459][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 06:48:04][351477977632459][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 06:48:04][351477977632459][386 ms][DEBUG] START check_internet [2025-08-24 06:48:04][351477977632459][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 06:48:04][351477977632459][917 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.074/202.074/202.074/0.000 ms\n [2025-08-24 06:48:04][351477977632459][917 ms][DEBUG] check_internet: online [2025-08-24 06:48:04][351477977632459][917 ms][DEBUG] END check_internet in 531 ms [2025-08-24 06:48:04][351477977632459][917 ms][DEBUG] rawBody.length=1148 [2025-08-24 06:48:04][351477977632459][917 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477977632459\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7471\"}'\'' -e'"" [2025-08-24 06:48:04][351477977632459][917 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 06:48:04][351477977632459][917 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477977632459\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7471\"}'\'' -e'"" [2025-08-24 06:48:08][351477977632459][4979 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ca9f72ff-5288-41b6-8478-1baecdf27751","id":"QR_ca9f72ff-5288-41b6-8478-1baecdf27751","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 06:48:08][351477977632459][5135 ms][DEBUG] proc_open done in 4218 ms; code=255; res.len=3343 [2025-08-24 06:48:08][351477977632459][5135 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-08-24 06:48:08][351477977632459][5135 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 06:54:04][350197384919270][1 ms][INFO] === Request start === [2025-08-24 06:54:04][350197384919270][1 ms][DEBUG] START check_scloud [2025-08-24 06:54:04][350197384919270][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 06:54:05][350197384919270][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 14257 15285 23722540 140016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 06:54:05][350197384919270][259 ms][DEBUG] targetPkg: running [2025-08-24 06:54:05][350197384919270][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-24 06:54:05][350197384919270][259 ms][DEBUG] START check_boot_completed [2025-08-24 06:54:05][350197384919270][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 06:54:05][350197384919270][290 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 06:54:05][350197384919270][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 06:54:05][350197384919270][337 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 06:54:05][350197384919270][338 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 06:54:05][350197384919270][338 ms][DEBUG] START check_internet [2025-08-24 06:54:05][350197384919270][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 06:54:05][350197384919270][886 ms][DEBUG] SU: done in 548 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.965/201.965/201.965/0.000 ms\n [2025-08-24 06:54:05][350197384919270][886 ms][DEBUG] check_internet: online [2025-08-24 06:54:05][350197384919270][886 ms][DEBUG] END check_internet in 548 ms [2025-08-24 06:54:05][350197384919270][886 ms][DEBUG] rawBody.length=1149 [2025-08-24 06:54:05][350197384919270][886 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350197384919270\",\"model\":\"SM-S711W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8720\"}'\'' -e'"" [2025-08-24 06:54:05][350197384919270][886 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 06:54:05][350197384919270][886 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350197384919270\",\"model\":\"SM-S711W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8720\"}'\'' -e'"" [2025-08-24 06:54:13][350197384919270][8601 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e2e330c1-59dd-41b8-9c58-1fe5b3a340b9","id":"QR_e2e330c1-59dd-41b8-9c58-1fe5b3a340b9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 06:54:13][350197384919270][8757 ms][DEBUG] proc_open done in 7871 ms; code=255; res.len=3343 [2025-08-24 06:54:13][350197384919270][8757 ms][DEBUG] END runCmdUntilRes#1 in 7871 ms [2025-08-24 06:54:13][350197384919270][8757 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 06:57:03][352397450123264][1 ms][INFO] === Request start === [2025-08-24 06:57:03][352397450123264][1 ms][DEBUG] START check_scloud [2025-08-24 06:57:03][352397450123264][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 06:57:04][352397450123264][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 14257 15285 23867216 151004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 06:57:04][352397450123264][308 ms][DEBUG] targetPkg: running [2025-08-24 06:57:04][352397450123264][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-24 06:57:04][352397450123264][308 ms][DEBUG] START check_boot_completed [2025-08-24 06:57:04][352397450123264][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 06:57:04][352397450123264][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 06:57:04][352397450123264][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 06:57:04][352397450123264][417 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 06:57:04][352397450123264][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 06:57:04][352397450123264][417 ms][DEBUG] rawBody.length=1148 [2025-08-24 06:57:04][352397450123264][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397450123264\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4681\"}'\'' -e'"" [2025-08-24 06:57:04][352397450123264][417 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 06:57:04][352397450123264][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397450123264\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4681\"}'\'' -e'"" [2025-08-24 06:57:08][352397450123264][4228 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ca754699-ac78-47e4-8fd1-98b7a3bb00ea","id":"QR_ca754699-ac78-47e4-8fd1-98b7a3bb00ea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 06:57:08][352397450123264][4385 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-24 06:57:08][352397450123264][4385 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-24 06:57:08][352397450123264][4385 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 07:01:03][351978521507139][1 ms][INFO] === Request start === [2025-08-24 07:01:03][351978521507139][1 ms][DEBUG] START check_scloud [2025-08-24 07:01:03][351978521507139][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 07:01:04][351978521507139][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 14257 15285 24022928 162960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 07:01:04][351978521507139][260 ms][DEBUG] targetPkg: running [2025-08-24 07:01:04][351978521507139][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-24 07:01:04][351978521507139][260 ms][DEBUG] START check_boot_completed [2025-08-24 07:01:04][351978521507139][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 07:01:04][351978521507139][307 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 07:01:04][351978521507139][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 07:01:04][351978521507139][354 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 07:01:04][351978521507139][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 07:01:04][351978521507139][354 ms][DEBUG] rawBody.length=1148 [2025-08-24 07:01:04][351978521507139][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978521507139\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9633\"}'\'' -e'"" [2025-08-24 07:01:04][351978521507139][354 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 07:01:04][351978521507139][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978521507139\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9633\"}'\'' -e'"" [2025-08-24 07:01:08][351978521507139][4650 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0b6fca54-9835-4a03-ae82-c17a8094aa60","id":"QR_0b6fca54-9835-4a03-ae82-c17a8094aa60","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 07:01:08][351978521507139][4806 ms][DEBUG] proc_open done in 4452 ms; code=255; res.len=3343 [2025-08-24 07:01:08][351978521507139][4806 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-08-24 07:01:08][351978521507139][4806 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 07:05:03][355914460180055][1 ms][INFO] === Request start === [2025-08-24 07:05:03][355914460180055][1 ms][DEBUG] START check_scloud [2025-08-24 07:05:03][355914460180055][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 07:05:03][355914460180055][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 14257 15285 24142836 174108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 07:05:03][355914460180055][257 ms][DEBUG] targetPkg: running [2025-08-24 07:05:03][355914460180055][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-24 07:05:03][355914460180055][257 ms][DEBUG] START check_boot_completed [2025-08-24 07:05:03][355914460180055][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 07:05:03][355914460180055][289 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 07:05:03][355914460180055][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 07:05:03][355914460180055][336 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 07:05:03][355914460180055][336 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 07:05:03][355914460180055][336 ms][DEBUG] rawBody.length=1148 [2025-08-24 07:05:03][355914460180055][336 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355914460180055\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3861\"}'\'' -e'"" [2025-08-24 07:05:03][355914460180055][336 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 07:05:03][355914460180055][337 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355914460180055\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3861\"}'\'' -e'"" [2025-08-24 07:05:07][355914460180055][4475 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_08ff531e-149a-47b1-90c8-7feed7f35ab2","id":"QR_08ff531e-149a-47b1-90c8-7feed7f35ab2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 07:05:07][355914460180055][4631 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-24 07:05:07][355914460180055][4631 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-24 07:05:07][355914460180055][4631 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 07:16:03][357450470700150][1 ms][INFO] === Request start === [2025-08-24 07:16:03][357450470700150][1 ms][DEBUG] START check_scloud [2025-08-24 07:16:03][357450470700150][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 07:16:03][357450470700150][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 14257 15285 24240324 185828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 07:16:03][357450470700150][298 ms][DEBUG] targetPkg: running [2025-08-24 07:16:03][357450470700150][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-24 07:16:03][357450470700150][298 ms][DEBUG] START check_boot_completed [2025-08-24 07:16:03][357450470700150][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 07:16:03][357450470700150][344 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 07:16:03][357450470700150][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 07:16:03][357450470700150][422 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 07:16:03][357450470700150][423 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-24 07:16:03][357450470700150][423 ms][DEBUG] START check_internet [2025-08-24 07:16:03][357450470700150][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 07:16:04][357450470700150][1031 ms][DEBUG] SU: done in 609 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.293/201.293/201.293/0.000 ms\n [2025-08-24 07:16:04][357450470700150][1031 ms][DEBUG] check_internet: online [2025-08-24 07:16:04][357450470700150][1032 ms][DEBUG] END check_internet in 609 ms [2025-08-24 07:16:04][357450470700150][1032 ms][DEBUG] rawBody.length=1148 [2025-08-24 07:16:04][357450470700150][1032 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450470700150\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6513\"}'\'' -e'"" [2025-08-24 07:16:04][357450470700150][1032 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 07:16:04][357450470700150][1032 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450470700150\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6513\"}'\'' -e'"" [2025-08-24 07:16:09][357450470700150][5515 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f85486eb-3a24-49d7-b0cf-7d9a8561dfde","id":"QR_f85486eb-3a24-49d7-b0cf-7d9a8561dfde","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 07:16:09][357450470700150][5671 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=3343 [2025-08-24 07:16:09][357450470700150][5671 ms][DEBUG] END runCmdUntilRes#1 in 4639 ms [2025-08-24 07:16:09][357450470700150][5671 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 07:27:03][352677530102523][1 ms][INFO] === Request start === [2025-08-24 07:27:03][352677530102523][1 ms][DEBUG] START check_scloud [2025-08-24 07:27:03][352677530102523][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 07:27:04][352677530102523][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 14257 15285 24403368 140468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 07:27:04][352677530102523][286 ms][DEBUG] targetPkg: running [2025-08-24 07:27:04][352677530102523][286 ms][DEBUG] END check_scloud in 285 ms [2025-08-24 07:27:04][352677530102523][286 ms][DEBUG] START check_boot_completed [2025-08-24 07:27:04][352677530102523][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 07:27:04][352677530102523][317 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 07:27:04][352677530102523][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 07:27:04][352677530102523][364 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 07:27:04][352677530102523][365 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 07:27:04][352677530102523][365 ms][DEBUG] rawBody.length=1148 [2025-08-24 07:27:04][352677530102523][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530102523\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4912\"}'\'' -e'"" [2025-08-24 07:27:04][352677530102523][365 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 07:27:04][352677530102523][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530102523\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4912\"}'\'' -e'"" [2025-08-24 07:27:08][352677530102523][5098 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_59053683-8adc-4fbe-8156-dd43db0c0047","id":"QR_59053683-8adc-4fbe-8156-dd43db0c0047","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 07:27:09][352677530102523][5254 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-08-24 07:27:09][352677530102523][5254 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-08-24 07:27:09][352677530102523][5254 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 07:28:03][351978521254542][0 ms][INFO] === Request start === [2025-08-24 07:28:03][351978521254542][1 ms][DEBUG] START check_scloud [2025-08-24 07:28:03][351978521254542][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 07:28:04][351978521254542][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 14257 15285 24563416 140948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 07:28:04][351978521254542][324 ms][DEBUG] targetPkg: running [2025-08-24 07:28:04][351978521254542][324 ms][DEBUG] END check_scloud in 324 ms [2025-08-24 07:28:04][351978521254542][325 ms][DEBUG] START check_boot_completed [2025-08-24 07:28:04][351978521254542][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 07:28:04][351978521254542][371 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 07:28:04][351978521254542][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 07:28:04][351978521254542][434 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 07:28:04][351978521254542][434 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 07:28:04][351978521254542][434 ms][DEBUG] START check_internet [2025-08-24 07:28:04][351978521254542][434 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 07:28:04][351978521254542][1027 ms][DEBUG] SU: done in 593 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.669/201.669/201.669/0.000 ms\n [2025-08-24 07:28:04][351978521254542][1027 ms][DEBUG] check_internet: online [2025-08-24 07:28:04][351978521254542][1027 ms][DEBUG] END check_internet in 594 ms [2025-08-24 07:28:04][351978521254542][1027 ms][DEBUG] rawBody.length=1148 [2025-08-24 07:28:04][351978521254542][1028 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978521254542\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8255\"}'\'' -e'"" [2025-08-24 07:28:04][351978521254542][1028 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 07:28:04][351978521254542][1028 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978521254542\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8255\"}'\'' -e'"" [2025-08-24 07:28:09][351978521254542][5198 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_837edab7-2556-4163-81f4-3078be501e31","id":"QR_837edab7-2556-4163-81f4-3078be501e31","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 07:28:09][351978521254542][5354 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=3343 [2025-08-24 07:28:09][351978521254542][5354 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-24 07:28:09][351978521254542][5354 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 07:30:04][352288967518718][1 ms][INFO] === Request start === [2025-08-24 07:30:04][352288967518718][1 ms][DEBUG] START check_scloud [2025-08-24 07:30:04][352288967518718][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 07:30:04][352288967518718][307 ms][DEBUG] SU: done in 305 ms; outu0_a118 14257 15285 24718268 151468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 07:30:04][352288967518718][307 ms][DEBUG] targetPkg: running [2025-08-24 07:30:04][352288967518718][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-24 07:30:04][352288967518718][307 ms][DEBUG] START check_boot_completed [2025-08-24 07:30:04][352288967518718][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 07:30:04][352288967518718][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 07:30:04][352288967518718][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 07:30:04][352288967518718][402 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 07:30:04][352288967518718][402 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 07:30:04][352288967518718][402 ms][DEBUG] START check_internet [2025-08-24 07:30:04][352288967518718][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 07:30:05][352288967518718][900 ms][DEBUG] SU: done in 498 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.729/201.729/201.729/0.000 ms\n [2025-08-24 07:30:05][352288967518718][900 ms][DEBUG] check_internet: online [2025-08-24 07:30:05][352288967518718][900 ms][DEBUG] END check_internet in 498 ms [2025-08-24 07:30:05][352288967518718][900 ms][DEBUG] rawBody.length=1148 [2025-08-24 07:30:05][352288967518718][900 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288967518718\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4200\"}'\'' -e'"" [2025-08-24 07:30:05][352288967518718][901 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 07:30:05][352288967518718][901 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288967518718\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4200\"}'\'' -e'"" [2025-08-24 07:30:09][352288967518718][5055 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_469a3364-e909-41a8-9e75-484611baa62b","id":"QR_469a3364-e909-41a8-9e75-484611baa62b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 07:30:09][352288967518718][5211 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-24 07:30:09][352288967518718][5211 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-24 07:30:09][352288967518718][5211 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 07:37:03][352294624915610][1 ms][INFO] === Request start === [2025-08-24 07:37:03][352294624915610][1 ms][DEBUG] START check_scloud [2025-08-24 07:37:03][352294624915610][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 07:37:04][352294624915610][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 14257 15285 24804436 162376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 07:37:04][352294624915610][320 ms][DEBUG] targetPkg: running [2025-08-24 07:37:04][352294624915610][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-24 07:37:04][352294624915610][320 ms][DEBUG] START check_boot_completed [2025-08-24 07:37:04][352294624915610][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 07:37:04][352294624915610][351 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 07:37:04][352294624915610][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 07:37:04][352294624915610][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 07:37:04][352294624915610][398 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 07:37:04][352294624915610][398 ms][DEBUG] rawBody.length=1147 [2025-08-24 07:37:04][352294624915610][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352294624915610\",\"model\":\"SM-P619\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ITV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4312\"}'\'' -e'"" [2025-08-24 07:37:04][352294624915610][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 07:37:04][352294624915610][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352294624915610\",\"model\":\"SM-P619\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ITV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4312\"}'\'' -e'"" [2025-08-24 07:37:08][352294624915610][4522 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_46410bfb-a31a-48d5-a6b0-be0e1bc0639b","id":"QR_46410bfb-a31a-48d5-a6b0-be0e1bc0639b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 07:37:08][352294624915610][4678 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-24 07:37:08][352294624915610][4678 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-24 07:37:08][352294624915610][4678 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 07:37:11][353818874132358][0 ms][INFO] === Request start === [2025-08-24 07:37:11][353818874132358][1 ms][DEBUG] START check_scloud [2025-08-24 07:37:11][353818874132358][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 07:37:11][353818874132358][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 14257 15285 24964456 174264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 07:37:11][353818874132358][316 ms][DEBUG] targetPkg: running [2025-08-24 07:37:11][353818874132358][316 ms][DEBUG] END check_scloud in 316 ms [2025-08-24 07:37:11][353818874132358][317 ms][DEBUG] START check_boot_completed [2025-08-24 07:37:11][353818874132358][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 07:37:11][353818874132358][363 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 07:37:11][353818874132358][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 07:37:11][353818874132358][410 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 07:37:11][353818874132358][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 07:37:11][353818874132358][410 ms][DEBUG] rawBody.length=1148 [2025-08-24 07:37:11][353818874132358][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818874132358\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4989\"}'\'' -e'"" [2025-08-24 07:37:11][353818874132358][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 07:37:11][353818874132358][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818874132358\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4989\"}'\'' -e'"" [2025-08-24 07:37:15][353818874132358][4456 ms][DEBUG] proc_open done in 4046 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 07:37:15][353818874132358][4456 ms][DEBUG] END runCmdUntilRes#1 in 4047 ms [2025-08-24 07:37:15][353818874132358][4456 ms][WARN] Detected error: Process with pid 14257 either refused to load frida-agent, or terminated during injection [2025-08-24 07:37:15][353818874132358][4456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 07:37:15][353818874132358][4597 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 07:37:15][353818874132358][4597 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 07:37:15][353818874132358][4597 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 07:37:15][353818874132358][4722 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 07:37:15][353818874132358][4722 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 07:37:15][353818874132358][4909 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 07:37:17][353818874132358][6924 ms][DEBUG] START check_boot_completed [2025-08-24 07:37:17][353818874132358][6924 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 07:37:18][353818874132358][6971 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 07:37:18][353818874132358][6971 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 07:37:18][353818874132358][7065 ms][DEBUG] SU: done in 94 ms; out [2025-08-24 07:37:18][353818874132358][7065 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-24 07:37:21][353818874132358][10079 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 07:37:21][353818874132358][10080 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818874132358\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4989\"}'\'' -e'"" [2025-08-24 07:37:25][353818874132358][14125 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9728237a-6814-442d-a269-1c4b47e4aacf","id":"QR_9728237a-6814-442d-a269-1c4b47e4aacf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 07:37:25][353818874132358][14282 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-24 07:37:25][353818874132358][14282 ms][DEBUG] END runCmdUntilRes#2 in 4202 ms [2025-08-24 07:37:25][353818874132358][14282 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 07:39:03][351786692336745][0 ms][INFO] === Request start === [2025-08-24 07:39:03][351786692336745][1 ms][DEBUG] START check_scloud [2025-08-24 07:39:03][351786692336745][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 07:39:03][351786692336745][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 18797 15285 23606832 128980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 07:39:03][351786692336745][312 ms][DEBUG] targetPkg: running [2025-08-24 07:39:03][351786692336745][312 ms][DEBUG] END check_scloud in 312 ms [2025-08-24 07:39:03][351786692336745][313 ms][DEBUG] START check_boot_completed [2025-08-24 07:39:03][351786692336745][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 07:39:03][351786692336745][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 07:39:03][351786692336745][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 07:39:03][351786692336745][408 ms][DEBUG] SU: done in 49 ms; out [2025-08-24 07:39:03][351786692336745][408 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 07:39:03][351786692336745][408 ms][DEBUG] rawBody.length=1148 [2025-08-24 07:39:03][351786692336745][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692336745\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1653\"}'\'' -e'"" [2025-08-24 07:39:03][351786692336745][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 07:39:03][351786692336745][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692336745\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1653\"}'\'' -e'"" [2025-08-24 07:39:07][351786692336745][4530 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2b868bb1-b209-4d93-929e-df4d78a4ec73","id":"QR_2b868bb1-b209-4d93-929e-df4d78a4ec73","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 07:39:07][351786692336745][4686 ms][DEBUG] proc_open done in 4278 ms; code=255; res.len=3343 [2025-08-24 07:39:07][351786692336745][4686 ms][DEBUG] END runCmdUntilRes#1 in 4278 ms [2025-08-24 07:39:07][351786692336745][4686 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 07:40:03][352923545455039][1 ms][INFO] === Request start === [2025-08-24 07:40:03][352923545455039][1 ms][DEBUG] START check_scloud [2025-08-24 07:40:03][352923545455039][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 07:40:04][352923545455039][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 18797 15285 23692936 140028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 07:40:04][352923545455039][289 ms][DEBUG] targetPkg: running [2025-08-24 07:40:04][352923545455039][290 ms][DEBUG] END check_scloud in 288 ms [2025-08-24 07:40:04][352923545455039][290 ms][DEBUG] START check_boot_completed [2025-08-24 07:40:04][352923545455039][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 07:40:04][352923545455039][336 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 07:40:04][352923545455039][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 07:40:04][352923545455039][399 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 07:40:04][352923545455039][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 07:40:04][352923545455039][399 ms][DEBUG] START check_internet [2025-08-24 07:40:04][352923545455039][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 07:40:04][352923545455039][883 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.268/202.268/202.268/0.000 ms\n [2025-08-24 07:40:04][352923545455039][883 ms][DEBUG] check_internet: online [2025-08-24 07:40:04][352923545455039][883 ms][DEBUG] END check_internet in 484 ms [2025-08-24 07:40:04][352923545455039][883 ms][DEBUG] rawBody.length=1148 [2025-08-24 07:40:04][352923545455039][883 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923545455039\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7753\"}'\'' -e'"" [2025-08-24 07:40:04][352923545455039][883 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 07:40:04][352923545455039][883 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923545455039\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7753\"}'\'' -e'"" [2025-08-24 07:40:08][352923545455039][5085 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b21d1590-c69d-4bbd-b7e3-5620ad13ab7b","id":"QR_b21d1590-c69d-4bbd-b7e3-5620ad13ab7b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 07:40:08][352923545455039][5241 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3343 [2025-08-24 07:40:08][352923545455039][5241 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-24 07:40:08][352923545455039][5241 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 07:50:03][357435847838957][1 ms][INFO] === Request start === [2025-08-24 07:50:03][357435847838957][1 ms][DEBUG] START check_scloud [2025-08-24 07:50:03][357435847838957][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 07:50:03][357435847838957][354 ms][DEBUG] SU: done in 353 ms; outu0_a118 18797 15285 23828000 151984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 07:50:03][357435847838957][354 ms][DEBUG] targetPkg: running [2025-08-24 07:50:03][357435847838957][354 ms][DEBUG] END check_scloud in 353 ms [2025-08-24 07:50:03][357435847838957][354 ms][DEBUG] START check_boot_completed [2025-08-24 07:50:03][357435847838957][354 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 07:50:03][357435847838957][401 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 07:50:03][357435847838957][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 07:50:04][357435847838957][495 ms][DEBUG] SU: done in 94 ms; out [2025-08-24 07:50:04][357435847838957][495 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-24 07:50:04][357435847838957][495 ms][DEBUG] START check_internet [2025-08-24 07:50:04][357435847838957][495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 07:50:04][357435847838957][979 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.621/201.621/201.621/0.000 ms\n [2025-08-24 07:50:04][357435847838957][979 ms][DEBUG] check_internet: online [2025-08-24 07:50:04][357435847838957][979 ms][DEBUG] END check_internet in 484 ms [2025-08-24 07:50:04][357435847838957][979 ms][DEBUG] rawBody.length=1148 [2025-08-24 07:50:04][357435847838957][979 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435847838957\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5260\"}'\'' -e'"" [2025-08-24 07:50:04][357435847838957][979 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 07:50:04][357435847838957][980 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435847838957\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5260\"}'\'' -e'"" [2025-08-24 07:50:08][357435847838957][5212 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_39a07d4a-5642-41f9-b0e3-61f65401fba9","id":"QR_39a07d4a-5642-41f9-b0e3-61f65401fba9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 07:50:08][357435847838957][5368 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-24 07:50:08][357435847838957][5368 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-24 07:50:08][357435847838957][5368 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 07:52:02][357967972461510][0 ms][INFO] === Request start === [2025-08-24 07:52:02][357967972461510][1 ms][DEBUG] START check_scloud [2025-08-24 07:52:02][357967972461510][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 07:52:03][357967972461510][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 18797 15285 23985936 163408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 07:52:03][357967972461510][316 ms][DEBUG] targetPkg: running [2025-08-24 07:52:03][357967972461510][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-24 07:52:03][357967972461510][316 ms][DEBUG] START check_boot_completed [2025-08-24 07:52:03][357967972461510][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 07:52:03][357967972461510][363 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 07:52:03][357967972461510][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 07:52:03][357967972461510][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 07:52:03][357967972461510][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 07:52:03][357967972461510][409 ms][DEBUG] START check_internet [2025-08-24 07:52:03][357967972461510][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 07:52:03][357967972461510][675 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=169 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 169.536/169.536/169.536/0.000 ms\n [2025-08-24 07:52:03][357967972461510][675 ms][DEBUG] check_internet: online [2025-08-24 07:52:03][357967972461510][675 ms][DEBUG] END check_internet in 266 ms [2025-08-24 07:52:03][357967972461510][675 ms][DEBUG] rawBody.length=1148 [2025-08-24 07:52:03][357967972461510][675 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967972461510\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3075\"}'\'' -e'"" [2025-08-24 07:52:03][357967972461510][675 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 07:52:03][357967972461510][675 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967972461510\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3075\"}'\'' -e'"" [2025-08-24 07:52:07][357967972461510][4643 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c0e81bb1-6d6c-4924-86d7-510ae6454b86","id":"QR_c0e81bb1-6d6c-4924-86d7-510ae6454b86","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 07:52:07][357967972461510][4799 ms][DEBUG] proc_open done in 4124 ms; code=255; res.len=3343 [2025-08-24 07:52:07][357967972461510][4799 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-24 07:52:07][357967972461510][4799 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 07:56:02][352600224028523][1 ms][INFO] === Request start === [2025-08-24 07:56:02][352600224028523][1 ms][DEBUG] START check_scloud [2025-08-24 07:56:02][352600224028523][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 07:56:03][352600224028523][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 18797 15285 24091636 174136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 07:56:03][352600224028523][301 ms][DEBUG] targetPkg: running [2025-08-24 07:56:03][352600224028523][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-24 07:56:03][352600224028523][301 ms][DEBUG] START check_boot_completed [2025-08-24 07:56:03][352600224028523][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 07:56:03][352600224028523][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 07:56:03][352600224028523][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 07:56:03][352600224028523][396 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 07:56:03][352600224028523][396 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 07:56:03][352600224028523][396 ms][DEBUG] START check_internet [2025-08-24 07:56:03][352600224028523][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 07:56:04][352600224028523][1472 ms][DEBUG] SU: done in 1076 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.898/198.898/198.898/0.000 ms\n [2025-08-24 07:56:04][352600224028523][1472 ms][DEBUG] check_internet: online [2025-08-24 07:56:04][352600224028523][1472 ms][DEBUG] END check_internet in 1077 ms [2025-08-24 07:56:04][352600224028523][1472 ms][DEBUG] rawBody.length=1148 [2025-08-24 07:56:04][352600224028523][1472 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600224028523\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9015\"}'\'' -e'"" [2025-08-24 07:56:04][352600224028523][1473 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 07:56:04][352600224028523][1473 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600224028523\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9015\"}'\'' -e'"" [2025-08-24 07:56:08][352600224028523][5987 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d1993a07-795c-4f15-9adc-1057f0f6e7fa","id":"QR_d1993a07-795c-4f15-9adc-1057f0f6e7fa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 07:56:09][352600224028523][6143 ms][DEBUG] proc_open done in 4670 ms; code=255; res.len=3343 [2025-08-24 07:56:09][352600224028523][6143 ms][DEBUG] END runCmdUntilRes#1 in 4670 ms [2025-08-24 07:56:09][352600224028523][6143 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 07:57:03][359021821062141][0 ms][INFO] === Request start === [2025-08-24 07:57:03][359021821062141][1 ms][DEBUG] START check_scloud [2025-08-24 07:57:03][359021821062141][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 07:57:04][359021821062141][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 18797 15285 24211480 185924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 07:57:04][359021821062141][322 ms][DEBUG] targetPkg: running [2025-08-24 07:57:04][359021821062141][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-24 07:57:04][359021821062141][322 ms][DEBUG] START check_boot_completed [2025-08-24 07:57:04][359021821062141][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 07:57:04][359021821062141][369 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 07:57:04][359021821062141][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 07:57:04][359021821062141][431 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 07:57:04][359021821062141][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 07:57:04][359021821062141][431 ms][DEBUG] rawBody.length=1148 [2025-08-24 07:57:04][359021821062141][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359021821062141\",\"model\":\"SM-A725F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1938\"}'\'' -e'"" [2025-08-24 07:57:04][359021821062141][431 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 07:57:04][359021821062141][431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359021821062141\",\"model\":\"SM-A725F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1938\"}'\'' -e'"" [2025-08-24 07:57:08][359021821062141][4539 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_06aa0b43-064e-4e8e-8871-d9b42883db92","id":"QR_06aa0b43-064e-4e8e-8871-d9b42883db92","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 07:57:08][359021821062141][4695 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-24 07:57:08][359021821062141][4695 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-24 07:57:08][359021821062141][4695 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 07:59:02][354255813553361][1 ms][INFO] === Request start === [2025-08-24 07:59:02][354255813553361][1 ms][DEBUG] START check_scloud [2025-08-24 07:59:02][354255813553361][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 07:59:03][354255813553361][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 18797 15285 24374396 196412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 07:59:03][354255813553361][299 ms][DEBUG] targetPkg: running [2025-08-24 07:59:03][354255813553361][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-24 07:59:03][354255813553361][299 ms][DEBUG] START check_boot_completed [2025-08-24 07:59:03][354255813553361][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 07:59:03][354255813553361][346 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 07:59:03][354255813553361][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 07:59:03][354255813553361][408 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 07:59:03][354255813553361][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 07:59:03][354255813553361][409 ms][DEBUG] rawBody.length=1148 [2025-08-24 07:59:03][354255813553361][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255813553361\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KSA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5666\"}'\'' -e'"" [2025-08-24 07:59:03][354255813553361][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 07:59:03][354255813553361][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255813553361\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KSA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5666\"}'\'' -e'"" [2025-08-24 07:59:07][354255813553361][4392 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_07f08709-f28b-4726-bda8-d83a9487e37b","id":"QR_07f08709-f28b-4726-bda8-d83a9487e37b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 07:59:07][354255813553361][4548 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-08-24 07:59:07][354255813553361][4548 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-08-24 07:59:07][354255813553361][4548 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:02:03][351267961259256][1 ms][INFO] === Request start === [2025-08-24 08:02:03][351267961259256][1 ms][DEBUG] START check_scloud [2025-08-24 08:02:03][351267961259256][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:02:04][351267961259256][248 ms][DEBUG] SU: done in 247 ms; outu0_a118 18797 15285 24532348 208588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:02:04][351267961259256][248 ms][DEBUG] targetPkg: running [2025-08-24 08:02:04][351267961259256][248 ms][DEBUG] END check_scloud in 247 ms [2025-08-24 08:02:04][351267961259256][248 ms][DEBUG] START check_boot_completed [2025-08-24 08:02:04][351267961259256][248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:02:04][351267961259256][279 ms][DEBUG] ADB: done in 30 ms; out [2025-08-24 08:02:04][351267961259256][279 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:02:04][351267961259256][326 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 08:02:04][351267961259256][326 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-24 08:02:04][351267961259256][326 ms][DEBUG] START check_internet [2025-08-24 08:02:04][351267961259256][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 08:02:04][351267961259256][826 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.171/203.171/203.171/0.000 ms\n [2025-08-24 08:02:04][351267961259256][826 ms][DEBUG] check_internet: online [2025-08-24 08:02:04][351267961259256][826 ms][DEBUG] END check_internet in 500 ms [2025-08-24 08:02:04][351267961259256][826 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:02:04][351267961259256][826 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267961259256\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9226\"}'\'' -e'"" [2025-08-24 08:02:04][351267961259256][826 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:02:04][351267961259256][826 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267961259256\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9226\"}'\'' -e'"" [2025-08-24 08:02:08][351267961259256][5137 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4631b355-ccc4-43c1-98d9-d971b60b5191","id":"QR_4631b355-ccc4-43c1-98d9-d971b60b5191","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:02:09][351267961259256][5293 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3343 [2025-08-24 08:02:09][351267961259256][5293 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-08-24 08:02:09][351267961259256][5293 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:03:03][351270415167422][0 ms][INFO] === Request start === [2025-08-24 08:03:03][351270415167422][1 ms][DEBUG] START check_scloud [2025-08-24 08:03:03][351270415167422][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:03:03][351270415167422][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 18797 15285 24654308 219644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:03:03][351270415167422][322 ms][DEBUG] targetPkg: running [2025-08-24 08:03:03][351270415167422][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-24 08:03:03][351270415167422][322 ms][DEBUG] START check_boot_completed [2025-08-24 08:03:03][351270415167422][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:03:03][351270415167422][369 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 08:03:03][351270415167422][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:03:03][351270415167422][431 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 08:03:03][351270415167422][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 08:03:03][351270415167422][431 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:03:03][351270415167422][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270415167422\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3046\"}'\'' -e'"" [2025-08-24 08:03:03][351270415167422][431 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:03:03][351270415167422][431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270415167422\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3046\"}'\'' -e'"" [2025-08-24 08:03:08][351270415167422][4774 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5dafb4dd-1934-49e3-9380-940b9b356c26","id":"QR_5dafb4dd-1934-49e3-9380-940b9b356c26","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:03:08][351270415167422][4930 ms][DEBUG] proc_open done in 4499 ms; code=255; res.len=3343 [2025-08-24 08:03:08][351270415167422][4930 ms][DEBUG] END runCmdUntilRes#1 in 4499 ms [2025-08-24 08:03:08][351270415167422][4930 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:03:11][353310805122799][0 ms][INFO] === Request start === [2025-08-24 08:03:11][353310805122799][1 ms][DEBUG] START check_scloud [2025-08-24 08:03:11][353310805122799][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:03:11][353310805122799][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 18797 15285 24780524 231472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:03:11][353310805122799][259 ms][DEBUG] targetPkg: running [2025-08-24 08:03:11][353310805122799][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-24 08:03:11][353310805122799][259 ms][DEBUG] START check_boot_completed [2025-08-24 08:03:11][353310805122799][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:03:11][353310805122799][304 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 08:03:11][353310805122799][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:03:11][353310805122799][351 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 08:03:11][353310805122799][351 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-24 08:03:11][353310805122799][351 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:03:11][353310805122799][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310805122799\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8300\"}'\'' -e'"" [2025-08-24 08:03:11][353310805122799][351 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:03:11][353310805122799][351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310805122799\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8300\"}'\'' -e'"" [2025-08-24 08:03:16][353310805122799][4522 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cedfaa8d-4d0d-4b74-82c3-7913ca0f3ea3","id":"QR_cedfaa8d-4d0d-4b74-82c3-7913ca0f3ea3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:03:16][353310805122799][4678 ms][DEBUG] proc_open done in 4327 ms; code=255; res.len=3343 [2025-08-24 08:03:16][353310805122799][4678 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-24 08:03:16][353310805122799][4678 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:04:02][350178736273137][0 ms][INFO] === Request start === [2025-08-24 08:04:02][350178736273137][1 ms][DEBUG] START check_scloud [2025-08-24 08:04:02][350178736273137][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:04:03][350178736273137][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 18797 15285 24914604 242760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:04:03][350178736273137][311 ms][DEBUG] targetPkg: running [2025-08-24 08:04:03][350178736273137][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-24 08:04:03][350178736273137][311 ms][DEBUG] START check_boot_completed [2025-08-24 08:04:03][350178736273137][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:04:03][350178736273137][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 08:04:03][350178736273137][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:04:03][350178736273137][405 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 08:04:03][350178736273137][406 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 08:04:03][350178736273137][406 ms][DEBUG] START check_internet [2025-08-24 08:04:03][350178736273137][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 08:04:03][350178736273137][701 ms][DEBUG] SU: done in 295 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=171 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 171.147/171.147/171.147/0.000 ms\n [2025-08-24 08:04:03][350178736273137][701 ms][DEBUG] check_internet: online [2025-08-24 08:04:03][350178736273137][701 ms][DEBUG] END check_internet in 295 ms [2025-08-24 08:04:03][350178736273137][701 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:04:03][350178736273137][701 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178736273137\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2909\"}'\'' -e'"" [2025-08-24 08:04:03][350178736273137][701 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:04:03][350178736273137][701 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178736273137\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2909\"}'\'' -e'"" [2025-08-24 08:04:07][350178736273137][4481 ms][DEBUG] proc_open done in 3780 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 08:04:07][350178736273137][4481 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-24 08:04:07][350178736273137][4481 ms][WARN] Detected error: Process with pid 18797 either refused to load frida-agent, or terminated during injection [2025-08-24 08:04:07][350178736273137][4481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 08:04:07][350178736273137][4622 ms][DEBUG] SU: done in 141 ms; out [2025-08-24 08:04:07][350178736273137][4622 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 08:04:07][350178736273137][4622 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 08:04:07][350178736273137][4762 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 08:04:07][350178736273137][4762 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 08:04:07][350178736273137][4919 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 08:04:09][350178736273137][6934 ms][DEBUG] START check_boot_completed [2025-08-24 08:04:09][350178736273137][6934 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:04:09][350178736273137][6981 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 08:04:09][350178736273137][6981 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:04:09][350178736273137][7043 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 08:04:09][350178736273137][7043 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-24 08:04:13][350178736273137][10058 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 08:04:13][350178736273137][10058 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178736273137\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2909\"}'\'' -e'"" [2025-08-24 08:04:16][350178736273137][14010 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9144644a-fc4c-4946-ac28-b082ebb60ca1","id":"QR_9144644a-fc4c-4946-ac28-b082ebb60ca1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:04:17][350178736273137][14167 ms][DEBUG] proc_open done in 4109 ms; code=255; res.len=3343 [2025-08-24 08:04:17][350178736273137][14167 ms][DEBUG] END runCmdUntilRes#2 in 4109 ms [2025-08-24 08:04:17][350178736273137][14167 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:04:19][352288964756642][1 ms][INFO] === Request start === [2025-08-24 08:04:19][352288964756642][1 ms][DEBUG] START check_scloud [2025-08-24 08:04:19][352288964756642][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:04:19][352288964756642][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 20699 15285 23705884 126296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:04:19][352288964756642][252 ms][DEBUG] targetPkg: running [2025-08-24 08:04:19][352288964756642][252 ms][DEBUG] END check_scloud in 251 ms [2025-08-24 08:04:19][352288964756642][252 ms][DEBUG] START check_boot_completed [2025-08-24 08:04:19][352288964756642][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:04:19][352288964756642][299 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 08:04:19][352288964756642][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:04:20][352288964756642][346 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 08:04:20][352288964756642][346 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 08:04:20][352288964756642][346 ms][DEBUG] START check_internet [2025-08-24 08:04:20][352288964756642][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 08:04:20][352288964756642][674 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=211 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 211.897/211.897/211.897/0.000 ms\n [2025-08-24 08:04:20][352288964756642][674 ms][DEBUG] check_internet: online [2025-08-24 08:04:20][352288964756642][674 ms][DEBUG] END check_internet in 328 ms [2025-08-24 08:04:20][352288964756642][674 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:04:20][352288964756642][674 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288964756642\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3396\"}'\'' -e'"" [2025-08-24 08:04:20][352288964756642][674 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:04:20][352288964756642][674 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288964756642\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3396\"}'\'' -e'"" [2025-08-24 08:04:24][352288964756642][4360 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3ffc9e74-c1b3-4ab5-b070-53581359413f","id":"QR_3ffc9e74-c1b3-4ab5-b070-53581359413f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:04:24][352288964756642][4516 ms][DEBUG] proc_open done in 3843 ms; code=255; res.len=3343 [2025-08-24 08:04:24][352288964756642][4517 ms][DEBUG] END runCmdUntilRes#1 in 3843 ms [2025-08-24 08:04:24][352288964756642][4517 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:06:29][355857115139085][1 ms][INFO] === Request start === [2025-08-24 08:06:29][355857115139085][1 ms][DEBUG] START check_scloud [2025-08-24 08:06:29][355857115139085][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:06:29][355857115139085][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 20699 15285 23770348 139676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:06:29][355857115139085][298 ms][DEBUG] targetPkg: running [2025-08-24 08:06:29][355857115139085][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-24 08:06:29][355857115139085][298 ms][DEBUG] START check_boot_completed [2025-08-24 08:06:29][355857115139085][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:06:29][355857115139085][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 08:06:29][355857115139085][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:06:29][355857115139085][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 08:06:29][355857115139085][377 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 08:06:29][355857115139085][377 ms][DEBUG] START check_internet [2025-08-24 08:06:29][355857115139085][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 08:06:30][355857115139085][690 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=196 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 196.445/196.445/196.445/0.000 ms\n [2025-08-24 08:06:30][355857115139085][690 ms][DEBUG] check_internet: online [2025-08-24 08:06:30][355857115139085][690 ms][DEBUG] END check_internet in 312 ms [2025-08-24 08:06:30][355857115139085][690 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:06:30][355857115139085][690 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857115139085\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4707\"}'\'' -e'"" [2025-08-24 08:06:30][355857115139085][690 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:06:30][355857115139085][690 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857115139085\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4707\"}'\'' -e'"" [2025-08-24 08:06:33][355857115139085][4579 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 08:06:34][355857115139085][4735 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=107 [2025-08-24 08:06:34][355857115139085][4735 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-08-24 08:06:34][355857115139085][4735 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 08:06:34][][0 ms][INFO] === Request start === [2025-08-24 08:06:34][][1 ms][DEBUG] START check_scloud [2025-08-24 08:06:34][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:06:34][][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 20699 15285 23922036 151436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:06:34][][308 ms][DEBUG] targetPkg: running [2025-08-24 08:06:34][][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-24 08:06:34][][309 ms][DEBUG] START check_boot_completed [2025-08-24 08:06:34][][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:06:34][][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 08:06:34][][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:06:34][][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 08:06:34][][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 08:06:34][][402 ms][DEBUG] START check_internet [2025-08-24 08:06:34][][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 08:06:35][][636 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=136 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 136.372/136.372/136.372/0.000 ms\n [2025-08-24 08:06:35][][636 ms][DEBUG] check_internet: online [2025-08-24 08:06:35][][636 ms][DEBUG] END check_internet in 235 ms [2025-08-24 08:06:35][][636 ms][DEBUG] rawBody.length=1129 [2025-08-24 08:06:35][][637 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CN815N3BR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9585\"}'\'' -e'"" [2025-08-24 08:06:35][][637 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:06:35][][637 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CN815N3BR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9585\"}'\'' -e'"" [2025-08-24 08:06:38][][4057 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 08:06:38][][4213 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=107 [2025-08-24 08:06:38][][4213 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-08-24 08:06:38][][4213 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 08:06:41][355857115139085][0 ms][INFO] === Request start === [2025-08-24 08:06:41][355857115139085][1 ms][DEBUG] START check_scloud [2025-08-24 08:06:41][355857115139085][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:06:41][355857115139085][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 20699 15285 24072700 162188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:06:41][355857115139085][315 ms][DEBUG] targetPkg: running [2025-08-24 08:06:41][355857115139085][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-24 08:06:41][355857115139085][315 ms][DEBUG] START check_boot_completed [2025-08-24 08:06:41][355857115139085][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:06:41][355857115139085][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 08:06:41][355857115139085][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:06:41][355857115139085][424 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 08:06:41][355857115139085][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 08:06:41][355857115139085][424 ms][DEBUG] START check_internet [2025-08-24 08:06:41][355857115139085][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 08:06:41][355857115139085][705 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=151 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 151.553/151.553/151.553/0.000 ms\n [2025-08-24 08:06:41][355857115139085][705 ms][DEBUG] check_internet: online [2025-08-24 08:06:41][355857115139085][705 ms][DEBUG] END check_internet in 281 ms [2025-08-24 08:06:41][355857115139085][705 ms][DEBUG] rawBody.length=1149 [2025-08-24 08:06:41][355857115139085][706 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857115139085\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6458\"}'\'' -e'"" [2025-08-24 08:06:41][355857115139085][706 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:06:41][355857115139085][706 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857115139085\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6458\"}'\'' -e'"" [2025-08-24 08:06:47][355857115139085][6688 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_824c05f2-45e0-4b24-af33-43a172b13fcb","id":"QR_824c05f2-45e0-4b24-af33-43a172b13fcb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:06:47][355857115139085][6844 ms][DEBUG] proc_open done in 6138 ms; code=255; res.len=3343 [2025-08-24 08:06:47][355857115139085][6844 ms][DEBUG] END runCmdUntilRes#1 in 6139 ms [2025-08-24 08:06:47][355857115139085][6844 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:07:03][352342774464283][0 ms][INFO] === Request start === [2025-08-24 08:07:03][352342774464283][1 ms][DEBUG] START check_scloud [2025-08-24 08:07:03][352342774464283][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:07:03][352342774464283][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 20699 15285 24172248 173340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:07:03][352342774464283][308 ms][DEBUG] targetPkg: running [2025-08-24 08:07:03][352342774464283][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-24 08:07:03][352342774464283][308 ms][DEBUG] START check_boot_completed [2025-08-24 08:07:03][352342774464283][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:07:03][352342774464283][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 08:07:03][352342774464283][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:07:03][352342774464283][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 08:07:03][352342774464283][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 08:07:03][352342774464283][386 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:07:03][352342774464283][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352342774464283\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3191\"}'\'' -e'"" [2025-08-24 08:07:03][352342774464283][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:07:03][352342774464283][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352342774464283\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3191\"}'\'' -e'"" [2025-08-24 08:07:08][352342774464283][4541 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_02f42ecf-c213-4a57-a3fa-09df188ee77a","id":"QR_02f42ecf-c213-4a57-a3fa-09df188ee77a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:07:08][352342774464283][4697 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-24 08:07:08][352342774464283][4697 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-24 08:07:08][352342774464283][4697 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:08:03][350961873768443][1 ms][INFO] === Request start === [2025-08-24 08:08:03][350961873768443][1 ms][DEBUG] START check_scloud [2025-08-24 08:08:03][350961873768443][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:08:03][350961873768443][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 20699 15285 24334040 185148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:08:03][350961873768443][299 ms][DEBUG] targetPkg: running [2025-08-24 08:08:03][350961873768443][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-24 08:08:03][350961873768443][299 ms][DEBUG] START check_boot_completed [2025-08-24 08:08:03][350961873768443][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:08:03][350961873768443][344 ms][DEBUG] ADB: done in 44 ms; out [2025-08-24 08:08:03][350961873768443][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:08:03][350961873768443][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 08:08:03][350961873768443][391 ms][DEBUG] END check_boot_completed in 91 ms [2025-08-24 08:08:03][350961873768443][391 ms][DEBUG] START check_internet [2025-08-24 08:08:03][350961873768443][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 08:08:03][350961873768443][859 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.629/202.629/202.629/0.000 ms\n [2025-08-24 08:08:03][350961873768443][859 ms][DEBUG] check_internet: online [2025-08-24 08:08:03][350961873768443][860 ms][DEBUG] END check_internet in 469 ms [2025-08-24 08:08:03][350961873768443][860 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:08:03][350961873768443][860 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350961873768443\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4933\"}'\'' -e'"" [2025-08-24 08:08:03][350961873768443][860 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:08:03][350961873768443][860 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350961873768443\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4933\"}'\'' -e'"" [2025-08-24 08:08:08][350961873768443][5124 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3c092faf-fb50-40d1-bc00-790fb6311d48","id":"QR_3c092faf-fb50-40d1-bc00-790fb6311d48","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:08:08][350961873768443][5280 ms][DEBUG] proc_open done in 4420 ms; code=255; res.len=3343 [2025-08-24 08:08:08][350961873768443][5280 ms][DEBUG] END runCmdUntilRes#1 in 4420 ms [2025-08-24 08:08:08][350961873768443][5280 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:08:10][352665186930701][0 ms][INFO] === Request start === [2025-08-24 08:08:10][352665186930701][1 ms][DEBUG] START check_scloud [2025-08-24 08:08:10][352665186930701][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:08:11][352665186930701][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 20699 15285 24497120 196144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:08:11][352665186930701][288 ms][DEBUG] targetPkg: running [2025-08-24 08:08:11][352665186930701][288 ms][DEBUG] END check_scloud in 288 ms [2025-08-24 08:08:11][352665186930701][288 ms][DEBUG] START check_boot_completed [2025-08-24 08:08:11][352665186930701][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:08:11][352665186930701][319 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 08:08:11][352665186930701][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:08:11][352665186930701][382 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 08:08:11][352665186930701][382 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 08:08:11][352665186930701][382 ms][DEBUG] START check_internet [2025-08-24 08:08:11][352665186930701][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 08:08:11][352665186930701][741 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=231 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 231.773/231.773/231.773/0.000 ms\n [2025-08-24 08:08:11][352665186930701][742 ms][DEBUG] check_internet: online [2025-08-24 08:08:11][352665186930701][742 ms][DEBUG] END check_internet in 359 ms [2025-08-24 08:08:11][352665186930701][742 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:08:11][352665186930701][742 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665186930701\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4846\"}'\'' -e'"" [2025-08-24 08:08:11][352665186930701][742 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:08:11][352665186930701][742 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665186930701\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4846\"}'\'' -e'"" [2025-08-24 08:08:15][352665186930701][4522 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_33cf91b0-f69f-4290-a249-6e6e92608b73","id":"QR_33cf91b0-f69f-4290-a249-6e6e92608b73","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:08:15][352665186930701][4678 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-24 08:08:15][352665186930701][4678 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-24 08:08:15][352665186930701][4678 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:08:18][353994850963908][0 ms][INFO] === Request start === [2025-08-24 08:08:18][353994850963908][1 ms][DEBUG] START check_scloud [2025-08-24 08:08:18][353994850963908][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:08:18][353994850963908][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 20699 15285 24641768 208012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:08:18][353994850963908][319 ms][DEBUG] targetPkg: running [2025-08-24 08:08:18][353994850963908][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-24 08:08:18][353994850963908][319 ms][DEBUG] START check_boot_completed [2025-08-24 08:08:18][353994850963908][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:08:18][353994850963908][366 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 08:08:18][353994850963908][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:08:18][353994850963908][412 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 08:08:18][353994850963908][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 08:08:18][353994850963908][412 ms][DEBUG] START check_internet [2025-08-24 08:08:18][353994850963908][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 08:08:18][353994850963908][662 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=151 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 151.328/151.328/151.328/0.000 ms\n [2025-08-24 08:08:18][353994850963908][662 ms][DEBUG] check_internet: online [2025-08-24 08:08:18][353994850963908][662 ms][DEBUG] END check_internet in 250 ms [2025-08-24 08:08:18][353994850963908][662 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:08:18][353994850963908][662 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353994850963908\",\"model\":\"SM-M346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8074\"}'\'' -e'"" [2025-08-24 08:08:18][353994850963908][662 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:08:18][353994850963908][662 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353994850963908\",\"model\":\"SM-M346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8074\"}'\'' -e'"" [2025-08-24 08:08:22][353994850963908][4411 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1d111dfb-328a-460f-9a4d-c271e12ab453","id":"QR_1d111dfb-328a-460f-9a4d-c271e12ab453","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:08:22][353994850963908][4568 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-24 08:08:22][353994850963908][4568 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-24 08:08:22][353994850963908][4568 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:08:25][355744471355283][1 ms][INFO] === Request start === [2025-08-24 08:08:25][355744471355283][1 ms][DEBUG] START check_scloud [2025-08-24 08:08:25][355744471355283][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:08:25][355744471355283][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 20699 15285 24783820 219092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:08:25][355744471355283][296 ms][DEBUG] targetPkg: running [2025-08-24 08:08:25][355744471355283][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-24 08:08:25][355744471355283][296 ms][DEBUG] START check_boot_completed [2025-08-24 08:08:25][355744471355283][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:08:25][355744471355283][342 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 08:08:25][355744471355283][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:08:25][355744471355283][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 08:08:25][355744471355283][389 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 08:08:25][355744471355283][389 ms][DEBUG] START check_internet [2025-08-24 08:08:25][355744471355283][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 08:08:25][355744471355283][764 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=247 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 247.961/247.961/247.961/0.000 ms\n [2025-08-24 08:08:25][355744471355283][764 ms][DEBUG] check_internet: online [2025-08-24 08:08:25][355744471355283][764 ms][DEBUG] END check_internet in 375 ms [2025-08-24 08:08:25][355744471355283][765 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:08:25][355744471355283][765 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355744471355283\",\"model\":\"SM-E556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1717\"}'\'' -e'"" [2025-08-24 08:08:25][355744471355283][765 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:08:25][355744471355283][765 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355744471355283\",\"model\":\"SM-E556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1717\"}'\'' -e'"" [2025-08-24 08:08:29][355744471355283][4513 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_18bfbcfd-2bd1-4f28-829e-c2e6daa82d0e","id":"QR_18bfbcfd-2bd1-4f28-829e-c2e6daa82d0e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:08:29][355744471355283][4669 ms][DEBUG] proc_open done in 3904 ms; code=255; res.len=3343 [2025-08-24 08:08:29][355744471355283][4669 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-24 08:08:29][355744471355283][4670 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:08:32][357962507686244][0 ms][INFO] === Request start === [2025-08-24 08:08:32][357962507686244][1 ms][DEBUG] START check_scloud [2025-08-24 08:08:32][357962507686244][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:08:32][357962507686244][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 20699 15285 24913968 230804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:08:32][357962507686244][301 ms][DEBUG] targetPkg: running [2025-08-24 08:08:32][357962507686244][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-24 08:08:32][357962507686244][301 ms][DEBUG] START check_boot_completed [2025-08-24 08:08:32][357962507686244][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:08:32][357962507686244][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 08:08:32][357962507686244][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:08:32][357962507686244][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 08:08:32][357962507686244][394 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 08:08:32][357962507686244][394 ms][DEBUG] START check_internet [2025-08-24 08:08:32][357962507686244][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 08:08:42][357962507686244][10501 ms][DEBUG] SU: done in 10107 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n\n--- google.com ping statistics ---\n1 packets transmitted, 0 received, 100% packet loss, time 0ms\n\n [2025-08-24 08:08:42][357962507686244][10501 ms][WARN] check_internet: offline [2025-08-24 08:08:42][357962507686244][10501 ms][DEBUG] END check_internet in 10107 ms [2025-08-24 08:09:03][357962507686244][0 ms][INFO] === Request start === [2025-08-24 08:09:03][357962507686244][1 ms][DEBUG] START check_scloud [2025-08-24 08:09:03][357962507686244][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:09:04][357962507686244][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 20699 15285 24881128 231220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:09:04][357962507686244][318 ms][DEBUG] targetPkg: running [2025-08-24 08:09:04][357962507686244][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-24 08:09:04][357962507686244][318 ms][DEBUG] START check_boot_completed [2025-08-24 08:09:04][357962507686244][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:09:04][357962507686244][365 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 08:09:04][357962507686244][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:09:04][357962507686244][412 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 08:09:04][357962507686244][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 08:09:04][357962507686244][412 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:09:04][357962507686244][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507686244\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6370\"}'\'' -e'"" [2025-08-24 08:09:04][357962507686244][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:09:04][357962507686244][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507686244\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6370\"}'\'' -e'"" [2025-08-24 08:09:08][357962507686244][4301 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9dd0c74-25f1-488c-a631-cc94e25c72ec","id":"QR_d9dd0c74-25f1-488c-a631-cc94e25c72ec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:09:08][357962507686244][4457 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-08-24 08:09:08][357962507686244][4457 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-08-24 08:09:08][357962507686244][4458 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:09:10][357866605384729][0 ms][INFO] === Request start === [2025-08-24 08:09:10][357866605384729][1 ms][DEBUG] START check_scloud [2025-08-24 08:09:10][357866605384729][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:09:11][357866605384729][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 20699 15285 25003248 243344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:09:11][357866605384729][311 ms][DEBUG] targetPkg: running [2025-08-24 08:09:11][357866605384729][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-24 08:09:11][357866605384729][312 ms][DEBUG] START check_boot_completed [2025-08-24 08:09:11][357866605384729][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:09:11][357866605384729][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 08:09:11][357866605384729][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:09:11][357866605384729][421 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 08:09:11][357866605384729][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 08:09:11][357866605384729][421 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:09:11][357866605384729][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866605384729\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9218\"}'\'' -e'"" [2025-08-24 08:09:11][357866605384729][421 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:09:11][357866605384729][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866605384729\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9218\"}'\'' -e'"" [2025-08-24 08:09:14][357866605384729][4076 ms][DEBUG] proc_open done in 3655 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 08:09:14][357866605384729][4076 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-24 08:09:14][357866605384729][4076 ms][WARN] Detected error: Process with pid 20699 either refused to load frida-agent, or terminated during injection [2025-08-24 08:09:14][357866605384729][4076 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 08:09:14][357866605384729][4232 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 08:09:14][357866605384729][4232 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 08:09:14][357866605384729][4232 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 08:09:15][357866605384729][4358 ms][DEBUG] SU: done in 126 ms; out [2025-08-24 08:09:15][357866605384729][4359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 08:09:15][357866605384729][4514 ms][DEBUG] SU: done in 155 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 08:09:17][357866605384729][6528 ms][DEBUG] START check_boot_completed [2025-08-24 08:09:17][357866605384729][6529 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:09:17][357866605384729][6576 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 08:09:17][357866605384729][6576 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:09:17][357866605384729][6669 ms][DEBUG] SU: done in 94 ms; out [2025-08-24 08:09:17][357866605384729][6669 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-24 08:09:20][357866605384729][9684 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 08:09:20][357866605384729][9684 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357866605384729\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9218\"}'\'' -e'"" [2025-08-24 08:09:24][357866605384729][13792 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_69159be2-1d1a-466d-8069-fad370fcf543","id":"QR_69159be2-1d1a-466d-8069-fad370fcf543","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:09:24][357866605384729][13949 ms][DEBUG] proc_open done in 4265 ms; code=255; res.len=3343 [2025-08-24 08:09:24][357866605384729][13949 ms][DEBUG] END runCmdUntilRes#2 in 4265 ms [2025-08-24 08:09:24][357866605384729][13949 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:13:02][358615318006056][1 ms][INFO] === Request start === [2025-08-24 08:13:02][358615318006056][1 ms][DEBUG] START check_scloud [2025-08-24 08:13:02][358615318006056][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:13:03][358615318006056][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 22062 15285 23641544 129356 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:13:03][358615318006056][301 ms][DEBUG] targetPkg: running [2025-08-24 08:13:03][358615318006056][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-24 08:13:03][358615318006056][301 ms][DEBUG] START check_boot_completed [2025-08-24 08:13:03][358615318006056][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:13:03][358615318006056][332 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 08:13:03][358615318006056][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:13:03][358615318006056][379 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 08:13:03][358615318006056][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 08:13:03][358615318006056][379 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:13:03][358615318006056][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615318006056\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1794\"}'\'' -e'"" [2025-08-24 08:13:03][358615318006056][379 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:13:03][358615318006056][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615318006056\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1794\"}'\'' -e'"" [2025-08-24 08:13:07][358615318006056][4503 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_028f8033-5657-4962-a752-3941ddac577f","id":"QR_028f8033-5657-4962-a752-3941ddac577f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:13:07][358615318006056][4659 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-24 08:13:07][358615318006056][4660 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-24 08:13:07][358615318006056][4660 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:16:03][359461654854661][1 ms][INFO] === Request start === [2025-08-24 08:16:03][359461654854661][1 ms][DEBUG] START check_scloud [2025-08-24 08:16:03][359461654854661][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:16:03][359461654854661][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 22062 15285 23787144 140384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:16:03][359461654854661][254 ms][DEBUG] targetPkg: running [2025-08-24 08:16:03][359461654854661][254 ms][DEBUG] END check_scloud in 253 ms [2025-08-24 08:16:03][359461654854661][254 ms][DEBUG] START check_boot_completed [2025-08-24 08:16:03][359461654854661][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:16:04][359461654854661][301 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 08:16:04][359461654854661][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:16:04][359461654854661][347 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 08:16:04][359461654854661][348 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 08:16:04][359461654854661][348 ms][DEBUG] START check_internet [2025-08-24 08:16:04][359461654854661][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 08:16:04][359461654854661][911 ms][DEBUG] SU: done in 563 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.237/201.237/201.237/0.000 ms\n [2025-08-24 08:16:04][359461654854661][911 ms][DEBUG] check_internet: online [2025-08-24 08:16:04][359461654854661][911 ms][DEBUG] END check_internet in 564 ms [2025-08-24 08:16:04][359461654854661][911 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:16:04][359461654854661][911 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359461654854661\",\"model\":\"SM-A525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1968\"}'\'' -e'"" [2025-08-24 08:16:04][359461654854661][911 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:16:04][359461654854661][911 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359461654854661\",\"model\":\"SM-A525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1968\"}'\'' -e'"" [2025-08-24 08:16:13][359461654854661][10158 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3a0de2c5-2b00-4377-aa1d-b2a0bfdab00b","id":"QR_3a0de2c5-2b00-4377-aa1d-b2a0bfdab00b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:16:14][359461654854661][10314 ms][DEBUG] proc_open done in 9402 ms; code=255; res.len=3343 [2025-08-24 08:16:14][359461654854661][10314 ms][DEBUG] END runCmdUntilRes#1 in 9403 ms [2025-08-24 08:16:14][359461654854661][10314 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:16:16][352350279609534][0 ms][INFO] === Request start === [2025-08-24 08:16:16][352350279609534][1 ms][DEBUG] START check_scloud [2025-08-24 08:16:16][352350279609534][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:16:16][352350279609534][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 22062 15285 23931536 151652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:16:16][352350279609534][291 ms][DEBUG] targetPkg: running [2025-08-24 08:16:16][352350279609534][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-24 08:16:16][352350279609534][291 ms][DEBUG] START check_boot_completed [2025-08-24 08:16:16][352350279609534][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:16:16][352350279609534][338 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 08:16:16][352350279609534][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:16:16][352350279609534][400 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 08:16:16][352350279609534][400 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 08:16:16][352350279609534][400 ms][DEBUG] START check_internet [2025-08-24 08:16:16][352350279609534][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 08:16:17][352350279609534][775 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=242 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 242.749/242.749/242.749/0.000 ms\n [2025-08-24 08:16:17][352350279609534][775 ms][DEBUG] check_internet: online [2025-08-24 08:16:17][352350279609534][775 ms][DEBUG] END check_internet in 375 ms [2025-08-24 08:16:17][352350279609534][775 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:16:17][352350279609534][775 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350279609534\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5023\"}'\'' -e'"" [2025-08-24 08:16:17][352350279609534][775 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:16:17][352350279609534][775 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350279609534\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5023\"}'\'' -e'"" [2025-08-24 08:16:18][352350279609534][1837 ms][DEBUG] proc_open done in 1062 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-24 08:16:18][352350279609534][1837 ms][DEBUG] END runCmdUntilRes#1 in 1062 ms [2025-08-24 08:16:18][352350279609534][1837 ms][WARN] Detected error: Process not found [2025-08-24 08:16:18][352350279609534][1838 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 08:16:18][352350279609534][2118 ms][DEBUG] SU: done in 281 ms; out [2025-08-24 08:16:18][352350279609534][2118 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 08:16:18][352350279609534][2118 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 08:16:18][352350279609534][2400 ms][DEBUG] SU: done in 281 ms; out [2025-08-24 08:16:18][352350279609534][2400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 08:16:19][352350279609534][2571 ms][DEBUG] SU: done in 172 ms; out [2025-08-24 08:16:21][352350279609534][4586 ms][DEBUG] START check_boot_completed [2025-08-24 08:16:21][352350279609534][4586 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:16:21][352350279609534][4633 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 08:16:21][352350279609534][4634 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:16:21][352350279609534][4696 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 08:16:21][352350279609534][4696 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 08:16:24][352350279609534][7711 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 08:16:24][352350279609534][7711 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350279609534\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5023\"}'\'' -e'"" [2025-08-24 08:16:25][352350279609534][9242 ms][DEBUG] proc_open done in 1531 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-24 08:16:25][352350279609534][9242 ms][DEBUG] END runCmdUntilRes#2 in 1531 ms [2025-08-24 08:16:25][352350279609534][9242 ms][WARN] Detected error 2; Reboot the device [2025-08-24 08:16:25][352350279609534][9242 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-24 08:16:26][352350279609534][9866 ms][DEBUG] SU: done in 624 ms; out [2025-08-24 08:17:03][352350279609534][0 ms][INFO] === Request start === [2025-08-24 08:17:03][352350279609534][1 ms][DEBUG] START check_scloud [2025-08-24 08:17:03][352350279609534][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:17:03][352350279609534][51 ms][DEBUG] SU: done in 50 ms; out [2025-08-24 08:17:03][352350279609534][51 ms][WARN] targetPkg: not running, restarting [2025-08-24 08:17:03][352350279609534][51 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 08:17:03][352350279609534][97 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 08:17:03][352350279609534][97 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 08:17:03][352350279609534][128 ms][DEBUG] SU: done in 31 ms; out [2025-08-24 08:17:05][352350279609534][2144 ms][DEBUG] END check_scloud in 2143 ms [2025-08-24 08:17:05][352350279609534][2144 ms][DEBUG] START check_boot_completed [2025-08-24 08:17:05][352350279609534][2144 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:17:26][352350279609534][23506 ms][DEBUG] ADB: done in 21362 ms; out [2025-08-24 08:17:26][352350279609534][23506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:17:26][352350279609534][23600 ms][DEBUG] SU: done in 94 ms; out [2025-08-24 08:17:26][352350279609534][23600 ms][DEBUG] END check_boot_completed in 21456 ms [2025-08-24 08:17:26][352350279609534][23600 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:17:26][352350279609534][23600 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350279609534\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1079\"}'\'' -e'"" [2025-08-24 08:17:26][352350279609534][23600 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:17:26][352350279609534][23600 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350279609534\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1079\"}'\'' -e'"" [2025-08-24 08:17:29][352350279609534][26427 ms][DEBUG] proc_open done in 2827 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-24 08:17:29][352350279609534][26427 ms][DEBUG] END runCmdUntilRes#1 in 2827 ms [2025-08-24 08:17:29][352350279609534][26428 ms][WARN] Detected error: Process not found [2025-08-24 08:17:29][352350279609534][26428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 08:17:29][352350279609534][26583 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 08:17:29][352350279609534][26584 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 08:17:29][352350279609534][26584 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 08:17:30][352350279609534][26740 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 08:17:30][352350279609534][26740 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 08:17:30][352350279609534][27005 ms][DEBUG] SU: done in 265 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 08:17:32][352350279609534][29007 ms][DEBUG] START check_boot_completed [2025-08-24 08:17:32][352350279609534][29007 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:17:33][352350279609534][30069 ms][DEBUG] ADB: done in 1062 ms; out [2025-08-24 08:17:33][352350279609534][30069 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:17:33][352350279609534][30132 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 08:17:33][352350279609534][30132 ms][DEBUG] END check_boot_completed in 1125 ms [2025-08-24 08:17:36][352350279609534][33146 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 08:17:36][352350279609534][33147 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350279609534\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1079\"}'\'' -e'"" [2025-08-24 08:17:42][352350279609534][38817 ms][DEBUG] proc_open done in 5671 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-24 08:17:42][352350279609534][38818 ms][DEBUG] END runCmdUntilRes#2 in 5671 ms [2025-08-24 08:17:42][352350279609534][38818 ms][WARN] Detected error 2; Reboot the device [2025-08-24 08:17:42][352350279609534][38818 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-24 08:18:03][352350279609534][0 ms][INFO] === Request start === [2025-08-24 08:18:03][352350279609534][1 ms][DEBUG] START check_scloud [2025-08-24 08:18:03][352350279609534][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:18:03][352350279609534][44 ms][DEBUG] SU: done in 44 ms; out [2025-08-24 08:18:03][352350279609534][44 ms][WARN] targetPkg: not running, restarting [2025-08-24 08:18:03][352350279609534][45 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 08:18:03][352350279609534][76 ms][DEBUG] SU: done in 31 ms; out [2025-08-24 08:18:03][352350279609534][76 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 08:18:03][352350279609534][107 ms][DEBUG] SU: done in 31 ms; out [2025-08-24 08:18:05][352350279609534][2122 ms][DEBUG] END check_scloud in 2121 ms [2025-08-24 08:18:05][352350279609534][2122 ms][DEBUG] START check_boot_completed [2025-08-24 08:18:05][352350279609534][2122 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:18:42][352350279609534][39735 ms][DEBUG] ADB: done in 37613 ms; out [2025-08-24 08:18:42][352350279609534][39735 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:18:42][352350279609534][39813 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 08:18:42][352350279609534][39813 ms][DEBUG] END check_boot_completed in 37691 ms [2025-08-24 08:18:42][352350279609534][39814 ms][DEBUG] START check_internet [2025-08-24 08:18:42][352350279609534][39814 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 08:19:03][352350279609534][1 ms][INFO] === Request start === [2025-08-24 08:19:03][352350279609534][1 ms][DEBUG] START check_scloud [2025-08-24 08:19:03][352350279609534][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:19:04][352350279609534][371 ms][DEBUG] SU: done in 370 ms; out [2025-08-24 08:19:04][352350279609534][372 ms][WARN] targetPkg: not running, restarting [2025-08-24 08:19:04][352350279609534][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 08:19:04][352350279609534][528 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 08:19:04][352350279609534][528 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 08:19:04][352350279609534][746 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 08:19:06][352350279609534][2761 ms][DEBUG] END check_scloud in 2760 ms [2025-08-24 08:19:06][352350279609534][2761 ms][DEBUG] START check_boot_completed [2025-08-24 08:19:06][352350279609534][2761 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:19:06][352350279609534][2808 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 08:19:06][352350279609534][2808 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:19:06][352350279609534][2886 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 08:19:06][352350279609534][2887 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-24 08:19:06][352350279609534][2887 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:19:06][352350279609534][2887 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350279609534\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2367\"}'\'' -e'"" [2025-08-24 08:19:06][352350279609534][2887 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:19:06][352350279609534][2887 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350279609534\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2367\"}'\'' -e'"" [2025-08-24 08:19:13][352350279609534][9182 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bdda7f6f-2645-40dd-9dae-fd456f2fefb1","id":"QR_bdda7f6f-2645-40dd-9dae-fd456f2fefb1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:19:13][352350279609534][9338 ms][DEBUG] proc_open done in 6451 ms; code=255; res.len=3343 [2025-08-24 08:19:13][352350279609534][9338 ms][DEBUG] END runCmdUntilRes#1 in 6451 ms [2025-08-24 08:19:13][352350279609534][9338 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:19:15][350011601063004][0 ms][INFO] === Request start === [2025-08-24 08:19:15][350011601063004][1 ms][DEBUG] START check_scloud [2025-08-24 08:19:15][350011601063004][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:19:15][350011601063004][353 ms][DEBUG] SU: done in 353 ms; outu0_a118 9758 4971 23693856 106340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:19:15][350011601063004][353 ms][DEBUG] targetPkg: running [2025-08-24 08:19:15][350011601063004][353 ms][DEBUG] END check_scloud in 353 ms [2025-08-24 08:19:15][350011601063004][354 ms][DEBUG] START check_boot_completed [2025-08-24 08:19:15][350011601063004][354 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:19:15][350011601063004][400 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 08:19:15][350011601063004][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:19:16][350011601063004][463 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 08:19:16][350011601063004][463 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 08:19:16][350011601063004][463 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:19:16][350011601063004][463 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350011601063004\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4732\"}'\'' -e'"" [2025-08-24 08:19:16][350011601063004][463 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:19:16][350011601063004][463 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350011601063004\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4732\"}'\'' -e'"" [2025-08-24 08:19:20][350011601063004][5383 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4b5c3b20-09ea-49e7-a8c5-df6071b638bb","id":"QR_4b5c3b20-09ea-49e7-a8c5-df6071b638bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:19:21][350011601063004][5539 ms][DEBUG] proc_open done in 5076 ms; code=255; res.len=3343 [2025-08-24 08:19:21][350011601063004][5540 ms][DEBUG] END runCmdUntilRes#1 in 5077 ms [2025-08-24 08:19:21][350011601063004][5540 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:19:23][353235522114201][0 ms][INFO] === Request start === [2025-08-24 08:19:23][353235522114201][1 ms][DEBUG] START check_scloud [2025-08-24 08:19:23][353235522114201][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:19:23][353235522114201][376 ms][DEBUG] SU: done in 375 ms; out [2025-08-24 08:19:23][353235522114201][376 ms][WARN] targetPkg: not running, restarting [2025-08-24 08:19:23][353235522114201][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 08:19:24][353235522114201][517 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 08:19:24][353235522114201][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 08:19:24][353235522114201][751 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 08:19:26][353235522114201][2766 ms][DEBUG] END check_scloud in 2765 ms [2025-08-24 08:19:26][353235522114201][2766 ms][DEBUG] START check_boot_completed [2025-08-24 08:19:26][353235522114201][2766 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:19:26][353235522114201][2813 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 08:19:26][353235522114201][2813 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:19:26][353235522114201][2875 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 08:19:26][353235522114201][2875 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 08:19:26][353235522114201][2875 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:19:26][353235522114201][2875 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353235522114201\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4598\"}'\'' -e'"" [2025-08-24 08:19:26][353235522114201][2875 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:19:26][353235522114201][2875 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353235522114201\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4598\"}'\'' -e'"" [2025-08-24 08:19:31][353235522114201][7640 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4a16a6af-892d-46b6-a0f7-0c973cb64144","id":"QR_4a16a6af-892d-46b6-a0f7-0c973cb64144","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:19:31][353235522114201][7796 ms][DEBUG] proc_open done in 4921 ms; code=255; res.len=3343 [2025-08-24 08:19:31][353235522114201][7796 ms][DEBUG] END runCmdUntilRes#1 in 4921 ms [2025-08-24 08:19:31][353235522114201][7796 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:19:35][359448670329760][0 ms][INFO] === Request start === [2025-08-24 08:19:35][359448670329760][1 ms][DEBUG] START check_scloud [2025-08-24 08:19:35][359448670329760][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:19:35][359448670329760][361 ms][DEBUG] SU: done in 360 ms; outu0_a118 11941 4971 23772220 112064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:19:35][359448670329760][361 ms][DEBUG] targetPkg: running [2025-08-24 08:19:35][359448670329760][361 ms][DEBUG] END check_scloud in 360 ms [2025-08-24 08:19:35][359448670329760][361 ms][DEBUG] START check_boot_completed [2025-08-24 08:19:35][359448670329760][361 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:19:35][359448670329760][408 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 08:19:35][359448670329760][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:19:35][359448670329760][470 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 08:19:35][359448670329760][470 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 08:19:35][359448670329760][470 ms][DEBUG] rawBody.length=1149 [2025-08-24 08:19:35][359448670329760][470 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359448670329760\",\"model\":\"SM-S926U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4534\"}'\'' -e'"" [2025-08-24 08:19:35][359448670329760][470 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:19:35][359448670329760][470 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359448670329760\",\"model\":\"SM-S926U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4534\"}'\'' -e'"" [2025-08-24 08:19:41][359448670329760][5969 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e00b61f2-9320-45d9-9195-1f9643fb1cb7","id":"QR_e00b61f2-9320-45d9-9195-1f9643fb1cb7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:19:41][359448670329760][6125 ms][DEBUG] proc_open done in 5655 ms; code=255; res.len=3343 [2025-08-24 08:19:41][359448670329760][6125 ms][DEBUG] END runCmdUntilRes#1 in 5655 ms [2025-08-24 08:19:41][359448670329760][6125 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:20:03][357658703042469][0 ms][INFO] === Request start === [2025-08-24 08:20:03][357658703042469][1 ms][DEBUG] START check_scloud [2025-08-24 08:20:03][357658703042469][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:20:03][357658703042469][491 ms][DEBUG] SU: done in 490 ms; outu0_a118 11941 4971 23831448 74456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:20:03][357658703042469][491 ms][DEBUG] targetPkg: running [2025-08-24 08:20:03][357658703042469][491 ms][DEBUG] END check_scloud in 490 ms [2025-08-24 08:20:03][357658703042469][491 ms][DEBUG] START check_boot_completed [2025-08-24 08:20:03][357658703042469][491 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:20:03][357658703042469][522 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 08:20:03][357658703042469][522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:20:03][357658703042469][569 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 08:20:03][357658703042469][569 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 08:20:03][357658703042469][569 ms][DEBUG] START check_internet [2025-08-24 08:20:03][357658703042469][569 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 08:20:04][357658703042469][929 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=127 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 127.495/127.495/127.495/0.000 ms\n [2025-08-24 08:20:04][357658703042469][929 ms][DEBUG] check_internet: online [2025-08-24 08:20:04][357658703042469][929 ms][DEBUG] END check_internet in 360 ms [2025-08-24 08:20:04][357658703042469][929 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:20:04][357658703042469][929 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357658703042469\",\"model\":\"SM-F9560\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"BRI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8209\"}'\'' -e'"" [2025-08-24 08:20:04][357658703042469][929 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:20:04][357658703042469][929 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357658703042469\",\"model\":\"SM-F9560\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"BRI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8209\"}'\'' -e'"" [2025-08-24 08:20:08][357658703042469][5068 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_21200925-4df6-48a1-8778-f1ef7455eaac","id":"QR_21200925-4df6-48a1-8778-f1ef7455eaac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:20:08][357658703042469][5224 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-24 08:20:08][357658703042469][5224 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-24 08:20:08][357658703042469][5224 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:27:29][351786693315300][1 ms][INFO] === Request start === [2025-08-24 08:27:29][351786693315300][1 ms][DEBUG] START check_scloud [2025-08-24 08:27:29][351786693315300][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:27:30][351786693315300][287 ms][DEBUG] SU: done in 285 ms; outu0_a118 11941 4971 23920548 89996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:27:30][351786693315300][287 ms][DEBUG] targetPkg: running [2025-08-24 08:27:30][351786693315300][287 ms][DEBUG] END check_scloud in 285 ms [2025-08-24 08:27:30][351786693315300][287 ms][DEBUG] START check_boot_completed [2025-08-24 08:27:30][351786693315300][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:27:30][351786693315300][318 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 08:27:30][351786693315300][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:27:30][351786693315300][365 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 08:27:30][351786693315300][365 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 08:27:30][351786693315300][365 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:27:30][351786693315300][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693315300\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6335\"}'\'' -e'"" [2025-08-24 08:27:30][351786693315300][366 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:27:30][351786693315300][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693315300\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6335\"}'\'' -e'"" [2025-08-24 08:27:34][351786693315300][4364 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 08:27:34][351786693315300][4520 ms][DEBUG] proc_open done in 4154 ms; code=255; res.len=107 [2025-08-24 08:27:34][351786693315300][4520 ms][DEBUG] END runCmdUntilRes#1 in 4154 ms [2025-08-24 08:27:34][351786693315300][4520 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 08:27:34][][0 ms][INFO] === Request start === [2025-08-24 08:27:34][][1 ms][DEBUG] START check_scloud [2025-08-24 08:27:34][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:27:34][][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 11941 4971 24090936 101476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:27:34][][322 ms][DEBUG] targetPkg: running [2025-08-24 08:27:34][][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-24 08:27:34][][322 ms][DEBUG] START check_boot_completed [2025-08-24 08:27:34][][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:27:34][][368 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 08:27:34][][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:27:35][][417 ms][DEBUG] SU: done in 49 ms; out [2025-08-24 08:27:35][][417 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 08:27:35][][417 ms][DEBUG] rawBody.length=1129 [2025-08-24 08:27:35][][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W10L7DEM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5103\"}'\'' -e'"" [2025-08-24 08:27:35][][417 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:27:35][][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W10L7DEM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5103\"}'\'' -e'"" [2025-08-24 08:27:38][][3836 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 08:27:38][][3993 ms][DEBUG] proc_open done in 3575 ms; code=255; res.len=107 [2025-08-24 08:27:38][][3993 ms][DEBUG] END runCmdUntilRes#1 in 3575 ms [2025-08-24 08:27:38][][3993 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 08:27:41][351786693315300][0 ms][INFO] === Request start === [2025-08-24 08:27:41][351786693315300][1 ms][DEBUG] START check_scloud [2025-08-24 08:27:41][351786693315300][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:27:41][351786693315300][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 11941 4971 24247872 107316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:27:41][351786693315300][282 ms][DEBUG] targetPkg: running [2025-08-24 08:27:41][351786693315300][282 ms][DEBUG] END check_scloud in 282 ms [2025-08-24 08:27:41][351786693315300][282 ms][DEBUG] START check_boot_completed [2025-08-24 08:27:41][351786693315300][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:27:41][351786693315300][329 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 08:27:41][351786693315300][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:27:41][351786693315300][407 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 08:27:41][351786693315300][407 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-24 08:27:41][351786693315300][407 ms][DEBUG] rawBody.length=1149 [2025-08-24 08:27:41][351786693315300][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693315300\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9216\"}'\'' -e'"" [2025-08-24 08:27:41][351786693315300][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:27:41][351786693315300][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693315300\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9216\"}'\'' -e'"" [2025-08-24 08:27:46][351786693315300][5687 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b2776ba-e558-489d-b527-59f70ff7acb0","id":"QR_8b2776ba-e558-489d-b527-59f70ff7acb0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:27:46][351786693315300][5843 ms][DEBUG] proc_open done in 5436 ms; code=255; res.len=3343 [2025-08-24 08:27:46][351786693315300][5843 ms][DEBUG] END runCmdUntilRes#1 in 5436 ms [2025-08-24 08:27:46][351786693315300][5843 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:35:03][353344113302991][1 ms][INFO] === Request start === [2025-08-24 08:35:03][353344113302991][1 ms][DEBUG] START check_scloud [2025-08-24 08:35:03][353344113302991][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:35:04][353344113302991][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 11941 4971 24344208 116456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:35:04][353344113302991][280 ms][DEBUG] targetPkg: running [2025-08-24 08:35:04][353344113302991][280 ms][DEBUG] END check_scloud in 279 ms [2025-08-24 08:35:04][353344113302991][280 ms][DEBUG] START check_boot_completed [2025-08-24 08:35:04][353344113302991][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:35:04][353344113302991][311 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 08:35:04][353344113302991][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:35:04][353344113302991][358 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 08:35:04][353344113302991][358 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 08:35:04][353344113302991][358 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:35:04][353344113302991][358 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353344113302991\",\"model\":\"SM-G985F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9934\"}'\'' -e'"" [2025-08-24 08:35:04][353344113302991][358 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:35:04][353344113302991][358 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353344113302991\",\"model\":\"SM-G985F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9934\"}'\'' -e'"" [2025-08-24 08:35:08][353344113302991][4466 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1bd78db7-1fb1-4d17-bdba-336d186007b7","id":"QR_1bd78db7-1fb1-4d17-bdba-336d186007b7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:35:08][353344113302991][4622 ms][DEBUG] proc_open done in 4265 ms; code=255; res.len=3343 [2025-08-24 08:35:08][353344113302991][4622 ms][DEBUG] END runCmdUntilRes#1 in 4265 ms [2025-08-24 08:35:08][353344113302991][4622 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:35:10][350320362595892][0 ms][INFO] === Request start === [2025-08-24 08:35:10][350320362595892][1 ms][DEBUG] START check_scloud [2025-08-24 08:35:10][350320362595892][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:35:11][350320362595892][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 11941 4971 24498084 127188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:35:11][350320362595892][290 ms][DEBUG] targetPkg: running [2025-08-24 08:35:11][350320362595892][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-24 08:35:11][350320362595892][290 ms][DEBUG] START check_boot_completed [2025-08-24 08:35:11][350320362595892][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:35:11][350320362595892][336 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 08:35:11][350320362595892][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:35:11][350320362595892][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 08:35:11][350320362595892][383 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 08:35:11][350320362595892][383 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:35:11][350320362595892][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320362595892\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5748\"}'\'' -e'"" [2025-08-24 08:35:11][350320362595892][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:35:11][350320362595892][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320362595892\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5748\"}'\'' -e'"" [2025-08-24 08:35:14][350320362595892][3991 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_db565ff6-4837-4c08-a29c-43d22f8a04b3","id":"QR_db565ff6-4837-4c08-a29c-43d22f8a04b3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:35:15][350320362595892][4148 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-08-24 08:35:15][350320362595892][4148 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-08-24 08:35:15][350320362595892][4148 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:39:03][357040731913302][1 ms][INFO] === Request start === [2025-08-24 08:39:03][357040731913302][1 ms][DEBUG] START check_scloud [2025-08-24 08:39:03][357040731913302][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:39:04][357040731913302][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 11941 4971 24611940 110348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:39:04][357040731913302][321 ms][DEBUG] targetPkg: running [2025-08-24 08:39:04][357040731913302][321 ms][DEBUG] END check_scloud in 320 ms [2025-08-24 08:39:04][357040731913302][321 ms][DEBUG] START check_boot_completed [2025-08-24 08:39:04][357040731913302][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:39:04][357040731913302][367 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 08:39:04][357040731913302][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:39:04][357040731913302][414 ms][DEBUG] SU: done in 46 ms; out [2025-08-24 08:39:04][357040731913302][414 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 08:39:04][357040731913302][414 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:39:04][357040731913302][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040731913302\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5559\"}'\'' -e'"" [2025-08-24 08:39:04][357040731913302][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:39:04][357040731913302][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040731913302\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5559\"}'\'' -e'"" [2025-08-24 08:39:08][357040731913302][4850 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6dd7bf7c-6a80-4c13-b0e5-94ef92837cb3","id":"QR_6dd7bf7c-6a80-4c13-b0e5-94ef92837cb3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:39:08][357040731913302][5006 ms][DEBUG] proc_open done in 4593 ms; code=255; res.len=3343 [2025-08-24 08:39:08][357040731913302][5006 ms][DEBUG] END runCmdUntilRes#1 in 4593 ms [2025-08-24 08:39:08][357040731913302][5007 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:41:02][356414817928347][0 ms][INFO] === Request start === [2025-08-24 08:41:02][356414817928347][1 ms][DEBUG] START check_scloud [2025-08-24 08:41:02][356414817928347][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:41:03][356414817928347][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 11941 4971 24715464 113688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:41:03][356414817928347][307 ms][DEBUG] targetPkg: running [2025-08-24 08:41:03][356414817928347][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-24 08:41:03][356414817928347][307 ms][DEBUG] START check_boot_completed [2025-08-24 08:41:03][356414817928347][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:41:03][356414817928347][352 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 08:41:03][356414817928347][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:41:03][356414817928347][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 08:41:03][356414817928347][399 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-24 08:41:03][356414817928347][399 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:41:03][356414817928347][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414817928347\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6656\"}'\'' -e'"" [2025-08-24 08:41:03][356414817928347][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:41:03][356414817928347][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414817928347\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6656\"}'\'' -e'"" [2025-08-24 08:41:07][356414817928347][4648 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b3d5ca6d-00a4-4631-90f3-ae25f3b47a24","id":"QR_b3d5ca6d-00a4-4631-90f3-ae25f3b47a24","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:41:07][356414817928347][4804 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-08-24 08:41:07][356414817928347][4804 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-24 08:41:07][356414817928347][4804 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:43:02][352288962604802][1 ms][INFO] === Request start === [2025-08-24 08:43:02][352288962604802][1 ms][DEBUG] START check_scloud [2025-08-24 08:43:02][352288962604802][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:43:03][352288962604802][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 11941 4971 24859176 125604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:43:03][352288962604802][296 ms][DEBUG] targetPkg: running [2025-08-24 08:43:03][352288962604802][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-24 08:43:03][352288962604802][296 ms][DEBUG] START check_boot_completed [2025-08-24 08:43:03][352288962604802][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:43:03][352288962604802][343 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 08:43:03][352288962604802][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:43:03][352288962604802][391 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 08:43:03][352288962604802][391 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 08:43:03][352288962604802][391 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:43:03][352288962604802][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288962604802\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8527\"}'\'' -e'"" [2025-08-24 08:43:03][352288962604802][391 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:43:03][352288962604802][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288962604802\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8527\"}'\'' -e'"" [2025-08-24 08:43:07][352288962604802][4420 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_72208c7d-4727-496f-89da-0601eec74620","id":"QR_72208c7d-4727-496f-89da-0601eec74620","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:43:07][352288962604802][4576 ms][DEBUG] proc_open done in 4185 ms; code=255; res.len=3343 [2025-08-24 08:43:07][352288962604802][4576 ms][DEBUG] END runCmdUntilRes#1 in 4185 ms [2025-08-24 08:43:07][352288962604802][4576 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:44:03][352600227785178][0 ms][INFO] === Request start === [2025-08-24 08:44:03][352600227785178][1 ms][DEBUG] START check_scloud [2025-08-24 08:44:03][352600227785178][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:44:03][352600227785178][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 11941 4971 24985356 136596 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:44:03][352600227785178][301 ms][DEBUG] targetPkg: running [2025-08-24 08:44:03][352600227785178][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-24 08:44:03][352600227785178][301 ms][DEBUG] START check_boot_completed [2025-08-24 08:44:03][352600227785178][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:44:03][352600227785178][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 08:44:03][352600227785178][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:44:03][352600227785178][410 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 08:44:03][352600227785178][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 08:44:03][352600227785178][410 ms][DEBUG] START check_internet [2025-08-24 08:44:03][352600227785178][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 08:44:03][352600227785178][863 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.580/201.580/201.580/0.000 ms\n [2025-08-24 08:44:03][352600227785178][863 ms][DEBUG] check_internet: online [2025-08-24 08:44:03][352600227785178][863 ms][DEBUG] END check_internet in 453 ms [2025-08-24 08:44:03][352600227785178][863 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:44:03][352600227785178][863 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227785178\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MDA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4910\"}'\'' -e'"" [2025-08-24 08:44:03][352600227785178][863 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:44:03][352600227785178][863 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227785178\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MDA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4910\"}'\'' -e'"" [2025-08-24 08:44:08][352600227785178][5284 ms][DEBUG] proc_open done in 4421 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 08:44:08][352600227785178][5284 ms][DEBUG] END runCmdUntilRes#1 in 4421 ms [2025-08-24 08:44:08][352600227785178][5284 ms][WARN] Detected error: Process with pid 11941 either refused to load frida-agent, or terminated during injection [2025-08-24 08:44:08][352600227785178][5284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 08:44:08][352600227785178][5425 ms][DEBUG] SU: done in 141 ms; out [2025-08-24 08:44:08][352600227785178][5425 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 08:44:08][352600227785178][5425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 08:44:08][352600227785178][5565 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 08:44:08][352600227785178][5565 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 08:44:08][352600227785178][5784 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 08:44:10][352600227785178][7799 ms][DEBUG] START check_boot_completed [2025-08-24 08:44:10][352600227785178][7799 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:44:10][352600227785178][7846 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 08:44:10][352600227785178][7846 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:44:10][352600227785178][7893 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 08:44:10][352600227785178][7893 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 08:44:13][352600227785178][10907 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 08:44:13][352600227785178][10908 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227785178\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MDA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4910\"}'\'' -e'"" [2025-08-24 08:44:18][352600227785178][15219 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8e384bdf-c5d7-429e-b1a5-8cf4da498531","id":"QR_8e384bdf-c5d7-429e-b1a5-8cf4da498531","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:44:18][352600227785178][15375 ms][DEBUG] proc_open done in 4468 ms; code=255; res.len=3343 [2025-08-24 08:44:18][352600227785178][15375 ms][DEBUG] END runCmdUntilRes#2 in 4468 ms [2025-08-24 08:44:18][352600227785178][15375 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:45:03][357260753141299][1 ms][INFO] === Request start === [2025-08-24 08:45:03][357260753141299][1 ms][DEBUG] START check_scloud [2025-08-24 08:45:03][357260753141299][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:45:03][357260753141299][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 19650 4971 23597332 126936 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:45:03][357260753141299][312 ms][DEBUG] targetPkg: running [2025-08-24 08:45:03][357260753141299][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-24 08:45:03][357260753141299][312 ms][DEBUG] START check_boot_completed [2025-08-24 08:45:03][357260753141299][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:45:03][357260753141299][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 08:45:03][357260753141299][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:45:03][357260753141299][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 08:45:03][357260753141299][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 08:45:03][357260753141299][405 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:45:03][357260753141299][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357260753141299\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2368\"}'\'' -e'"" [2025-08-24 08:45:03][357260753141299][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:45:03][357260753141299][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357260753141299\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MYM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2368\"}'\'' -e'"" [2025-08-24 08:45:07][357260753141299][4076 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7a9e7184-b59a-44d5-a32a-1b83778133e7","id":"QR_7a9e7184-b59a-44d5-a32a-1b83778133e7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:45:07][357260753141299][4233 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=3343 [2025-08-24 08:45:07][357260753141299][4233 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-24 08:45:07][357260753141299][4233 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:48:03][353762110981048][1 ms][INFO] === Request start === [2025-08-24 08:48:03][353762110981048][1 ms][DEBUG] START check_scloud [2025-08-24 08:48:03][353762110981048][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:48:03][353762110981048][273 ms][DEBUG] SU: done in 271 ms; outu0_a118 19650 4971 23708936 137924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:48:03][353762110981048][273 ms][DEBUG] targetPkg: running [2025-08-24 08:48:03][353762110981048][273 ms][DEBUG] END check_scloud in 272 ms [2025-08-24 08:48:03][353762110981048][273 ms][DEBUG] START check_boot_completed [2025-08-24 08:48:03][353762110981048][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:48:04][353762110981048][304 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 08:48:04][353762110981048][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:48:04][353762110981048][351 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 08:48:04][353762110981048][351 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 08:48:04][353762110981048][351 ms][DEBUG] START check_internet [2025-08-24 08:48:04][353762110981048][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 08:48:04][353762110981048][851 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.134/202.134/202.134/0.000 ms\n [2025-08-24 08:48:04][353762110981048][851 ms][DEBUG] check_internet: online [2025-08-24 08:48:04][353762110981048][851 ms][DEBUG] END check_internet in 500 ms [2025-08-24 08:48:04][353762110981048][851 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:48:04][353762110981048][851 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353762110981048\",\"model\":\"SM-N971N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9635\"}'\'' -e'"" [2025-08-24 08:48:04][353762110981048][851 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:48:04][353762110981048][851 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353762110981048\",\"model\":\"SM-N971N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9635\"}'\'' -e'"" [2025-08-24 08:48:08][353762110981048][4506 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d8c7fe5d-8b24-4fe7-8dab-22bd22330367","id":"QR_d8c7fe5d-8b24-4fe7-8dab-22bd22330367","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:48:08][353762110981048][4662 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-24 08:48:08][353762110981048][4662 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-24 08:48:08][353762110981048][4662 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:53:05][350731692237742][1 ms][INFO] === Request start === [2025-08-24 08:53:05][350731692237742][1 ms][DEBUG] START check_scloud [2025-08-24 08:53:05][350731692237742][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:53:05][350731692237742][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 19650 4971 23826860 150408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:53:05][350731692237742][307 ms][DEBUG] targetPkg: running [2025-08-24 08:53:05][350731692237742][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-24 08:53:05][350731692237742][307 ms][DEBUG] START check_boot_completed [2025-08-24 08:53:05][350731692237742][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:53:05][350731692237742][338 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 08:53:05][350731692237742][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:53:05][350731692237742][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 08:53:05][350731692237742][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 08:53:05][350731692237742][385 ms][DEBUG] rawBody.length=1149 [2025-08-24 08:53:05][350731692237742][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731692237742\",\"model\":\"SM-F731B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7526\"}'\'' -e'"" [2025-08-24 08:53:05][350731692237742][385 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:53:05][350731692237742][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731692237742\",\"model\":\"SM-F731B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7526\"}'\'' -e'"" [2025-08-24 08:53:11][350731692237742][5712 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_003511f6-150d-4b80-b00b-9a1b976e0ed5","id":"QR_003511f6-150d-4b80-b00b-9a1b976e0ed5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:53:11][350731692237742][5868 ms][DEBUG] proc_open done in 5483 ms; code=255; res.len=3343 [2025-08-24 08:53:11][350731692237742][5868 ms][DEBUG] END runCmdUntilRes#1 in 5483 ms [2025-08-24 08:53:11][350731692237742][5868 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 08:59:03][350263230175820][1 ms][INFO] === Request start === [2025-08-24 08:59:03][350263230175820][1 ms][DEBUG] START check_scloud [2025-08-24 08:59:03][350263230175820][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 08:59:03][350263230175820][292 ms][DEBUG] SU: done in 290 ms; outu0_a118 19650 4971 23974444 145532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 08:59:03][350263230175820][292 ms][DEBUG] targetPkg: running [2025-08-24 08:59:03][350263230175820][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-24 08:59:03][350263230175820][292 ms][DEBUG] START check_boot_completed [2025-08-24 08:59:03][350263230175820][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 08:59:03][350263230175820][338 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 08:59:03][350263230175820][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 08:59:03][350263230175820][401 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 08:59:03][350263230175820][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 08:59:03][350263230175820][401 ms][DEBUG] rawBody.length=1148 [2025-08-24 08:59:03][350263230175820][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350263230175820\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1049\"}'\'' -e'"" [2025-08-24 08:59:03][350263230175820][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 08:59:03][350263230175820][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350263230175820\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1049\"}'\'' -e'"" [2025-08-24 08:59:07][350263230175820][4540 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58890c4c-e7e6-4b14-8a8c-9143dfe80c15","id":"QR_58890c4c-e7e6-4b14-8a8c-9143dfe80c15","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 08:59:07][350263230175820][4697 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-24 08:59:07][350263230175820][4697 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-24 08:59:07][350263230175820][4697 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:00:03][350013884653923][0 ms][INFO] === Request start === [2025-08-24 09:00:03][350013884653923][1 ms][DEBUG] START check_scloud [2025-08-24 09:00:03][350013884653923][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:00:04][350013884653923][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 19650 4971 24108496 139136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:00:04][350013884653923][273 ms][DEBUG] targetPkg: running [2025-08-24 09:00:04][350013884653923][273 ms][DEBUG] END check_scloud in 272 ms [2025-08-24 09:00:04][350013884653923][273 ms][DEBUG] START check_boot_completed [2025-08-24 09:00:04][350013884653923][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:00:04][350013884653923][304 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 09:00:04][350013884653923][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:00:04][350013884653923][351 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 09:00:04][350013884653923][351 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 09:00:04][350013884653923][351 ms][DEBUG] START check_internet [2025-08-24 09:00:04][350013884653923][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 09:00:04][350013884653923][775 ms][DEBUG] SU: done in 424 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.759/201.759/201.759/0.000 ms\n [2025-08-24 09:00:04][350013884653923][775 ms][DEBUG] check_internet: online [2025-08-24 09:00:04][350013884653923][775 ms][DEBUG] END check_internet in 424 ms [2025-08-24 09:00:04][350013884653923][775 ms][DEBUG] rawBody.length=1148 [2025-08-24 09:00:04][350013884653923][775 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884653923\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2117\"}'\'' -e'"" [2025-08-24 09:00:04][350013884653923][775 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:00:04][350013884653923][775 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884653923\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2117\"}'\'' -e'"" [2025-08-24 09:00:08][350013884653923][4819 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5aaad17d-c97e-4fb3-b838-aeebf2e60e74","id":"QR_5aaad17d-c97e-4fb3-b838-aeebf2e60e74","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:00:08][350013884653923][4975 ms][DEBUG] proc_open done in 4199 ms; code=255; res.len=3343 [2025-08-24 09:00:08][350013884653923][4975 ms][DEBUG] END runCmdUntilRes#1 in 4200 ms [2025-08-24 09:00:08][350013884653923][4975 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:03:02][357967970318944][1 ms][INFO] === Request start === [2025-08-24 09:03:02][357967970318944][1 ms][DEBUG] START check_scloud [2025-08-24 09:03:02][357967970318944][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:03:03][357967970318944][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 19650 4971 24224308 150796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:03:03][357967970318944][309 ms][DEBUG] targetPkg: running [2025-08-24 09:03:03][357967970318944][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-24 09:03:03][357967970318944][309 ms][DEBUG] START check_boot_completed [2025-08-24 09:03:03][357967970318944][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:03:03][357967970318944][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 09:03:03][357967970318944][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:03:03][357967970318944][389 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 09:03:03][357967970318944][389 ms][DEBUG] END check_boot_completed in 80 ms [2025-08-24 09:03:03][357967970318944][389 ms][DEBUG] rawBody.length=1148 [2025-08-24 09:03:03][357967970318944][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967970318944\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7912\"}'\'' -e'"" [2025-08-24 09:03:03][357967970318944][389 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:03:03][357967970318944][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967970318944\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7912\"}'\'' -e'"" [2025-08-24 09:03:07][357967970318944][4339 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_62ebe6a9-0eb4-4f45-9e23-2697a0163fe6","id":"QR_62ebe6a9-0eb4-4f45-9e23-2697a0163fe6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:03:07][357967970318944][4496 ms][DEBUG] proc_open done in 4107 ms; code=255; res.len=3343 [2025-08-24 09:03:07][357967970318944][4496 ms][DEBUG] END runCmdUntilRes#1 in 4107 ms [2025-08-24 09:03:07][357967970318944][4496 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:07:03][358438735554644][1 ms][INFO] === Request start === [2025-08-24 09:07:03][358438735554644][1 ms][DEBUG] START check_scloud [2025-08-24 09:07:03][358438735554644][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:07:04][358438735554644][309 ms][DEBUG] SU: done in 307 ms; outu0_a118 19650 4971 24385176 161640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:07:04][358438735554644][309 ms][DEBUG] targetPkg: running [2025-08-24 09:07:04][358438735554644][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-24 09:07:04][358438735554644][309 ms][DEBUG] START check_boot_completed [2025-08-24 09:07:04][358438735554644][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:07:04][358438735554644][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 09:07:04][358438735554644][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:07:04][358438735554644][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 09:07:04][358438735554644][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 09:07:04][358438735554644][387 ms][DEBUG] rawBody.length=1148 [2025-08-24 09:07:04][358438735554644][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438735554644\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6597\"}'\'' -e'"" [2025-08-24 09:07:04][358438735554644][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:07:04][358438735554644][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438735554644\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6597\"}'\'' -e'"" [2025-08-24 09:07:08][358438735554644][4386 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_13055cd6-07a0-4cdb-92ac-9a1c3d1484f4","id":"QR_13055cd6-07a0-4cdb-92ac-9a1c3d1484f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:07:08][358438735554644][4542 ms][DEBUG] proc_open done in 4154 ms; code=255; res.len=3343 [2025-08-24 09:07:08][358438735554644][4542 ms][DEBUG] END runCmdUntilRes#1 in 4154 ms [2025-08-24 09:07:08][358438735554644][4542 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:08:03][356973941284935][0 ms][INFO] === Request start === [2025-08-24 09:08:03][356973941284935][1 ms][DEBUG] START check_scloud [2025-08-24 09:08:03][356973941284935][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:08:03][356973941284935][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 19650 4971 24518580 173548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:08:03][356973941284935][295 ms][DEBUG] targetPkg: running [2025-08-24 09:08:03][356973941284935][295 ms][DEBUG] END check_scloud in 295 ms [2025-08-24 09:08:03][356973941284935][295 ms][DEBUG] START check_boot_completed [2025-08-24 09:08:03][356973941284935][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:08:04][356973941284935][342 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 09:08:04][356973941284935][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:08:04][356973941284935][390 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 09:08:04][356973941284935][390 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 09:08:04][356973941284935][390 ms][DEBUG] START check_internet [2025-08-24 09:08:04][356973941284935][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 09:08:04][356973941284935][936 ms][DEBUG] SU: done in 546 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.248/201.248/201.248/0.000 ms\n [2025-08-24 09:08:04][356973941284935][936 ms][DEBUG] check_internet: online [2025-08-24 09:08:04][356973941284935][936 ms][DEBUG] END check_internet in 546 ms [2025-08-24 09:08:04][356973941284935][936 ms][DEBUG] rawBody.length=1148 [2025-08-24 09:08:04][356973941284935][936 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356973941284935\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3093\"}'\'' -e'"" [2025-08-24 09:08:04][356973941284935][936 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:08:04][356973941284935][936 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356973941284935\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3093\"}'\'' -e'"" [2025-08-24 09:08:08][356973941284935][4966 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_024e4fa7-a0f6-4586-951c-cae12656a6f6","id":"QR_024e4fa7-a0f6-4586-951c-cae12656a6f6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:08:08][356973941284935][5122 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-24 09:08:08][356973941284935][5122 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-24 09:08:08][356973941284935][5122 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:09:03][351240642552357][1 ms][INFO] === Request start === [2025-08-24 09:09:03][351240642552357][1 ms][DEBUG] START check_scloud [2025-08-24 09:09:03][351240642552357][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:09:03][351240642552357][294 ms][DEBUG] SU: done in 292 ms; outu0_a118 19650 4971 24691864 184156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:09:03][351240642552357][294 ms][DEBUG] targetPkg: running [2025-08-24 09:09:03][351240642552357][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-24 09:09:03][351240642552357][294 ms][DEBUG] START check_boot_completed [2025-08-24 09:09:03][351240642552357][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:09:03][351240642552357][341 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 09:09:03][351240642552357][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:09:04][351240642552357][387 ms][DEBUG] SU: done in 46 ms; out [2025-08-24 09:09:04][351240642552357][387 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 09:09:04][351240642552357][387 ms][DEBUG] rawBody.length=1148 [2025-08-24 09:09:04][351240642552357][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642552357\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9649\"}'\'' -e'"" [2025-08-24 09:09:04][351240642552357][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:09:04][351240642552357][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642552357\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9649\"}'\'' -e'"" [2025-08-24 09:09:07][351240642552357][4355 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dc420446-df58-42cf-99c6-1d9cb641557f","id":"QR_dc420446-df58-42cf-99c6-1d9cb641557f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:09:08][351240642552357][4511 ms][DEBUG] proc_open done in 4124 ms; code=255; res.len=3343 [2025-08-24 09:09:08][351240642552357][4511 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-24 09:09:08][351240642552357][4511 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:12:03][353310800233898][1 ms][INFO] === Request start === [2025-08-24 09:12:03][353310800233898][1 ms][DEBUG] START check_scloud [2025-08-24 09:12:03][353310800233898][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:12:03][353310800233898][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 19650 4971 24834428 196380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:12:03][353310800233898][287 ms][DEBUG] targetPkg: running [2025-08-24 09:12:03][353310800233898][287 ms][DEBUG] END check_scloud in 286 ms [2025-08-24 09:12:03][353310800233898][287 ms][DEBUG] START check_boot_completed [2025-08-24 09:12:03][353310800233898][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:12:03][353310800233898][334 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 09:12:03][353310800233898][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:12:03][353310800233898][396 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 09:12:03][353310800233898][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 09:12:03][353310800233898][397 ms][DEBUG] START check_internet [2025-08-24 09:12:03][353310800233898][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 09:12:04][353310800233898][881 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.326/201.326/201.326/0.000 ms\n [2025-08-24 09:12:04][353310800233898][881 ms][DEBUG] check_internet: online [2025-08-24 09:12:04][353310800233898][881 ms][DEBUG] END check_internet in 484 ms [2025-08-24 09:12:04][353310800233898][881 ms][DEBUG] rawBody.length=1148 [2025-08-24 09:12:04][353310800233898][881 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310800233898\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4026\"}'\'' -e'"" [2025-08-24 09:12:04][353310800233898][881 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:12:04][353310800233898][881 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310800233898\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4026\"}'\'' -e'"" [2025-08-24 09:12:08][353310800233898][4880 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6e1430d2-441a-48cb-9551-a91b85f7ea8e","id":"QR_6e1430d2-441a-48cb-9551-a91b85f7ea8e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:12:08][353310800233898][5036 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-24 09:12:08][353310800233898][5036 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-24 09:12:08][353310800233898][5036 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:15:03][352677530758159][1 ms][INFO] === Request start === [2025-08-24 09:15:03][352677530758159][1 ms][DEBUG] START check_scloud [2025-08-24 09:15:03][352677530758159][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:15:04][352677530758159][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 19650 4971 24968804 207196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:15:04][352677530758159][304 ms][DEBUG] targetPkg: running [2025-08-24 09:15:04][352677530758159][304 ms][DEBUG] END check_scloud in 302 ms [2025-08-24 09:15:04][352677530758159][304 ms][DEBUG] START check_boot_completed [2025-08-24 09:15:04][352677530758159][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:15:04][352677530758159][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 09:15:04][352677530758159][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:15:04][352677530758159][398 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 09:15:04][352677530758159][398 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 09:15:04][352677530758159][398 ms][DEBUG] rawBody.length=1148 [2025-08-24 09:15:04][352677530758159][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530758159\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1833\"}'\'' -e'"" [2025-08-24 09:15:04][352677530758159][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:15:04][352677530758159][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530758159\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1833\"}'\'' -e'"" [2025-08-24 09:15:08][352677530758159][4287 ms][DEBUG] proc_open done in 3888 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 09:15:08][352677530758159][4287 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-24 09:15:08][352677530758159][4287 ms][WARN] Detected error: Process with pid 19650 either refused to load frida-agent, or terminated during injection [2025-08-24 09:15:08][352677530758159][4287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 09:15:08][352677530758159][4427 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 09:15:08][352677530758159][4427 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 09:15:08][352677530758159][4427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 09:15:08][352677530758159][4537 ms][DEBUG] SU: done in 109 ms; out [2025-08-24 09:15:08][352677530758159][4537 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 09:15:08][352677530758159][4740 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 09:15:10][352677530758159][6755 ms][DEBUG] START check_boot_completed [2025-08-24 09:15:10][352677530758159][6755 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:15:10][352677530758159][6802 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 09:15:10][352677530758159][6802 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:15:10][352677530758159][6849 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 09:15:10][352677530758159][6849 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 09:15:13][352677530758159][9863 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 09:15:13][352677530758159][9864 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530758159\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1833\"}'\'' -e'"" [2025-08-24 09:15:17][352677530758159][13753 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3913566b-111b-4f6d-86e1-bc3ad0db113f","id":"QR_3913566b-111b-4f6d-86e1-bc3ad0db113f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:15:17][352677530758159][13910 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-08-24 09:15:17][352677530758159][13910 ms][DEBUG] END runCmdUntilRes#2 in 4046 ms [2025-08-24 09:15:17][352677530758159][13910 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:18:03][350637543072065][1 ms][INFO] === Request start === [2025-08-24 09:18:03][350637543072065][1 ms][DEBUG] START check_scloud [2025-08-24 09:18:03][350637543072065][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:18:03][350637543072065][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 22309 4971 23590088 126024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:18:03][350637543072065][306 ms][DEBUG] targetPkg: running [2025-08-24 09:18:03][350637543072065][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-24 09:18:03][350637543072065][306 ms][DEBUG] START check_boot_completed [2025-08-24 09:18:03][350637543072065][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:18:03][350637543072065][337 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 09:18:03][350637543072065][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:18:03][350637543072065][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 09:18:03][350637543072065][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 09:18:03][350637543072065][384 ms][DEBUG] START check_internet [2025-08-24 09:18:03][350637543072065][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 09:18:03][350637543072065][821 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.195/201.195/201.195/0.000 ms\n [2025-08-24 09:18:03][350637543072065][821 ms][DEBUG] check_internet: online [2025-08-24 09:18:03][350637543072065][821 ms][DEBUG] END check_internet in 438 ms [2025-08-24 09:18:03][350637543072065][822 ms][DEBUG] rawBody.length=1148 [2025-08-24 09:18:03][350637543072065][822 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637543072065\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2428\"}'\'' -e'"" [2025-08-24 09:18:03][350637543072065][822 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:18:03][350637543072065][822 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637543072065\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2428\"}'\'' -e'"" [2025-08-24 09:18:08][350637543072065][5054 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5995500c-32c5-4f97-9f8f-f88bac90e9a0","id":"QR_5995500c-32c5-4f97-9f8f-f88bac90e9a0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:18:08][350637543072065][5211 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-24 09:18:08][350637543072065][5211 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-24 09:18:08][350637543072065][5211 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:21:03][357962504098302][1 ms][INFO] === Request start === [2025-08-24 09:21:03][357962504098302][1 ms][DEBUG] START check_scloud [2025-08-24 09:21:03][357962504098302][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:21:03][357962504098302][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 22309 4971 23746924 136832 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:21:03][357962504098302][297 ms][DEBUG] targetPkg: running [2025-08-24 09:21:03][357962504098302][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-24 09:21:03][357962504098302][297 ms][DEBUG] START check_boot_completed [2025-08-24 09:21:03][357962504098302][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:21:03][357962504098302][343 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 09:21:03][357962504098302][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:21:03][357962504098302][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 09:21:03][357962504098302][390 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 09:21:03][357962504098302][390 ms][DEBUG] rawBody.length=1148 [2025-08-24 09:21:03][357962504098302][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962504098302\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7309\"}'\'' -e'"" [2025-08-24 09:21:03][357962504098302][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:21:03][357962504098302][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962504098302\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7309\"}'\'' -e'"" [2025-08-24 09:21:08][357962504098302][4545 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0b1040c-bcb6-4bba-b20b-c6b103954eb0","id":"QR_b0b1040c-bcb6-4bba-b20b-c6b103954eb0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:21:08][357962504098302][4701 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-24 09:21:08][357962504098302][4701 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-24 09:21:08][357962504098302][4702 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:29:03][351240640217318][1 ms][INFO] === Request start === [2025-08-24 09:29:03][351240640217318][1 ms][DEBUG] START check_scloud [2025-08-24 09:29:03][351240640217318][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:29:04][351240640217318][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 22309 4971 23903520 146236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:29:04][351240640217318][263 ms][DEBUG] targetPkg: running [2025-08-24 09:29:04][351240640217318][263 ms][DEBUG] END check_scloud in 262 ms [2025-08-24 09:29:04][351240640217318][263 ms][DEBUG] START check_boot_completed [2025-08-24 09:29:04][351240640217318][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:29:04][351240640217318][310 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 09:29:04][351240640217318][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:29:04][351240640217318][372 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 09:29:04][351240640217318][372 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 09:29:04][351240640217318][372 ms][DEBUG] rawBody.length=1148 [2025-08-24 09:29:04][351240640217318][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640217318\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1863\"}'\'' -e'"" [2025-08-24 09:29:04][351240640217318][372 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:29:04][351240640217318][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240640217318\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1863\"}'\'' -e'"" [2025-08-24 09:29:08][351240640217318][4402 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4324d23a-4f59-4f82-8604-c58fc3bb4292","id":"QR_4324d23a-4f59-4f82-8604-c58fc3bb4292","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:29:08][351240640217318][4558 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-24 09:29:08][351240640217318][4558 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-24 09:29:08][351240640217318][4559 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:33:03][351272336925987][1 ms][INFO] === Request start === [2025-08-24 09:33:03][351272336925987][1 ms][DEBUG] START check_scloud [2025-08-24 09:33:03][351272336925987][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:33:03][351272336925987][334 ms][DEBUG] SU: done in 333 ms; outu0_a118 22309 4971 24026640 88376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:33:03][351272336925987][334 ms][DEBUG] targetPkg: running [2025-08-24 09:33:03][351272336925987][334 ms][DEBUG] END check_scloud in 333 ms [2025-08-24 09:33:03][351272336925987][334 ms][DEBUG] START check_boot_completed [2025-08-24 09:33:03][351272336925987][334 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:33:03][351272336925987][381 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 09:33:03][351272336925987][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:33:03][351272336925987][443 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 09:33:03][351272336925987][443 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 09:33:03][351272336925987][443 ms][DEBUG] rawBody.length=1148 [2025-08-24 09:33:03][351272336925987][443 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272336925987\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2728\"}'\'' -e'"" [2025-08-24 09:33:03][351272336925987][444 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:33:03][351272336925987][444 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272336925987\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2728\"}'\'' -e'"" [2025-08-24 09:33:08][351272336925987][4989 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a320009c-cc91-4c61-829e-061e908a7a72","id":"QR_a320009c-cc91-4c61-829e-061e908a7a72","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:33:08][351272336925987][5145 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-08-24 09:33:08][351272336925987][5145 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-08-24 09:33:08][351272336925987][5145 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:34:03][357967973945578][0 ms][INFO] === Request start === [2025-08-24 09:34:03][357967973945578][1 ms][DEBUG] START check_scloud [2025-08-24 09:34:03][357967973945578][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:34:04][357967973945578][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 22309 4971 24162868 101620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:34:04][357967973945578][257 ms][DEBUG] targetPkg: running [2025-08-24 09:34:04][357967973945578][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-24 09:34:04][357967973945578][257 ms][DEBUG] START check_boot_completed [2025-08-24 09:34:04][357967973945578][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:34:04][357967973945578][304 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 09:34:04][357967973945578][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:34:04][357967973945578][382 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 09:34:04][357967973945578][382 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-24 09:34:04][357967973945578][382 ms][DEBUG] START check_internet [2025-08-24 09:34:04][357967973945578][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 09:34:04][357967973945578][850 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.818/202.818/202.818/0.000 ms\n [2025-08-24 09:34:04][357967973945578][850 ms][DEBUG] check_internet: online [2025-08-24 09:34:04][357967973945578][851 ms][DEBUG] END check_internet in 469 ms [2025-08-24 09:34:04][357967973945578][851 ms][DEBUG] rawBody.length=1148 [2025-08-24 09:34:04][357967973945578][851 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967973945578\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6998\"}'\'' -e'"" [2025-08-24 09:34:04][357967973945578][851 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:34:04][357967973945578][851 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967973945578\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6998\"}'\'' -e'"" [2025-08-24 09:34:09][357967973945578][5287 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9a63e230-cfe1-4f0e-b5ff-899f3b61e937","id":"QR_9a63e230-cfe1-4f0e-b5ff-899f3b61e937","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:34:09][357967973945578][5443 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-08-24 09:34:09][357967973945578][5443 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-08-24 09:34:09][357967973945578][5443 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:36:03][358104902112737][1 ms][INFO] === Request start === [2025-08-24 09:36:03][358104902112737][1 ms][DEBUG] START check_scloud [2025-08-24 09:36:03][358104902112737][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:36:03][358104902112737][314 ms][DEBUG] SU: done in 312 ms; outu0_a118 22309 4971 24280728 103884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:36:03][358104902112737][314 ms][DEBUG] targetPkg: running [2025-08-24 09:36:03][358104902112737][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-24 09:36:03][358104902112737][314 ms][DEBUG] START check_boot_completed [2025-08-24 09:36:03][358104902112737][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:36:03][358104902112737][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 09:36:03][358104902112737][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:36:03][358104902112737][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 09:36:03][358104902112737][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 09:36:03][358104902112737][407 ms][DEBUG] START check_internet [2025-08-24 09:36:03][358104902112737][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 09:36:04][358104902112737][704 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=187 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 187.290/187.290/187.290/0.000 ms\n [2025-08-24 09:36:04][358104902112737][704 ms][DEBUG] check_internet: online [2025-08-24 09:36:04][358104902112737][704 ms][DEBUG] END check_internet in 297 ms [2025-08-24 09:36:04][358104902112737][704 ms][DEBUG] rawBody.length=1148 [2025-08-24 09:36:04][358104902112737][704 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902112737\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3682\"}'\'' -e'"" [2025-08-24 09:36:04][358104902112737][704 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:36:04][358104902112737][704 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902112737\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3682\"}'\'' -e'"" [2025-08-24 09:36:08][358104902112737][4781 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cea3e3e0-304f-441e-a45b-cf00fe5de39f","id":"QR_cea3e3e0-304f-441e-a45b-cf00fe5de39f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:36:08][358104902112737][4937 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-24 09:36:08][358104902112737][4937 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-24 09:36:08][358104902112737][4937 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:36:10][350287316306884][0 ms][INFO] === Request start === [2025-08-24 09:36:10][350287316306884][1 ms][DEBUG] START check_scloud [2025-08-24 09:36:10][350287316306884][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:36:11][350287316306884][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 22309 4971 24453920 114860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:36:11][350287316306884][315 ms][DEBUG] targetPkg: running [2025-08-24 09:36:11][350287316306884][315 ms][DEBUG] END check_scloud in 315 ms [2025-08-24 09:36:11][350287316306884][315 ms][DEBUG] START check_boot_completed [2025-08-24 09:36:11][350287316306884][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:36:11][350287316306884][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 09:36:11][350287316306884][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:36:11][350287316306884][425 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 09:36:11][350287316306884][426 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-24 09:36:11][350287316306884][426 ms][DEBUG] START check_internet [2025-08-24 09:36:11][350287316306884][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 09:36:11][350287316306884][690 ms][DEBUG] SU: done in 264 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=138 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 138.807/138.807/138.807/0.000 ms\n [2025-08-24 09:36:11][350287316306884][690 ms][DEBUG] check_internet: online [2025-08-24 09:36:11][350287316306884][690 ms][DEBUG] END check_internet in 265 ms [2025-08-24 09:36:11][350287316306884][690 ms][DEBUG] rawBody.length=1148 [2025-08-24 09:36:11][350287316306884][690 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287316306884\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6829\"}'\'' -e'"" [2025-08-24 09:36:11][350287316306884][691 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:36:11][350287316306884][691 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287316306884\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6829\"}'\'' -e'"" [2025-08-24 09:36:15][350287316306884][4361 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d3882e36-7270-4a1a-b649-ba0823d26c5c","id":"QR_d3882e36-7270-4a1a-b649-ba0823d26c5c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:36:15][350287316306884][4517 ms][DEBUG] proc_open done in 3826 ms; code=255; res.len=3343 [2025-08-24 09:36:15][350287316306884][4517 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-24 09:36:15][350287316306884][4517 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:37:03][353684144960519][0 ms][INFO] === Request start === [2025-08-24 09:37:03][353684144960519][1 ms][DEBUG] START check_scloud [2025-08-24 09:37:03][353684144960519][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:37:03][353684144960519][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 22309 4971 24590176 126832 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:37:03][353684144960519][312 ms][DEBUG] targetPkg: running [2025-08-24 09:37:03][353684144960519][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-24 09:37:03][353684144960519][312 ms][DEBUG] START check_boot_completed [2025-08-24 09:37:03][353684144960519][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:37:03][353684144960519][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 09:37:03][353684144960519][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:37:03][353684144960519][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 09:37:03][353684144960519][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 09:37:03][353684144960519][405 ms][DEBUG] rawBody.length=1148 [2025-08-24 09:37:03][353684144960519][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684144960519\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6630\"}'\'' -e'"" [2025-08-24 09:37:03][353684144960519][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:37:03][353684144960519][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684144960519\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6630\"}'\'' -e'"" [2025-08-24 09:37:12][353684144960519][9388 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c64a5ca2-5df1-421d-b139-dbc42efc5f19","id":"QR_c64a5ca2-5df1-421d-b139-dbc42efc5f19","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:37:12][353684144960519][9544 ms][DEBUG] proc_open done in 9138 ms; code=255; res.len=3343 [2025-08-24 09:37:12][353684144960519][9544 ms][DEBUG] END runCmdUntilRes#1 in 9138 ms [2025-08-24 09:37:12][353684144960519][9544 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:42:03][353310804100440][1 ms][INFO] === Request start === [2025-08-24 09:42:03][353310804100440][1 ms][DEBUG] START check_scloud [2025-08-24 09:42:03][353310804100440][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:42:03][353310804100440][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 22309 4971 24693764 137688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:42:03][353310804100440][299 ms][DEBUG] targetPkg: running [2025-08-24 09:42:03][353310804100440][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-24 09:42:03][353310804100440][299 ms][DEBUG] START check_boot_completed [2025-08-24 09:42:03][353310804100440][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:42:03][353310804100440][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 09:42:03][353310804100440][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:42:03][353310804100440][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 09:42:03][353310804100440][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 09:42:03][353310804100440][377 ms][DEBUG] START check_internet [2025-08-24 09:42:03][353310804100440][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 09:42:04][353310804100440][830 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.507/202.507/202.507/0.000 ms\n [2025-08-24 09:42:04][353310804100440][830 ms][DEBUG] check_internet: online [2025-08-24 09:42:04][353310804100440][830 ms][DEBUG] END check_internet in 453 ms [2025-08-24 09:42:04][353310804100440][830 ms][DEBUG] rawBody.length=1148 [2025-08-24 09:42:04][353310804100440][830 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804100440\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8666\"}'\'' -e'"" [2025-08-24 09:42:04][353310804100440][830 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:42:04][353310804100440][830 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804100440\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8666\"}'\'' -e'"" [2025-08-24 09:42:08][353310804100440][4860 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ecd41df-a21d-4787-9fc4-f81314e75512","id":"QR_5ecd41df-a21d-4787-9fc4-f81314e75512","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:42:08][353310804100440][5016 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-24 09:42:08][353310804100440][5016 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-24 09:42:08][353310804100440][5016 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:42:10][354569110601909][0 ms][INFO] === Request start === [2025-08-24 09:42:10][354569110601909][1 ms][DEBUG] START check_scloud [2025-08-24 09:42:10][354569110601909][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:42:11][354569110601909][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 22309 4971 24815756 149468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:42:11][354569110601909][270 ms][DEBUG] targetPkg: running [2025-08-24 09:42:11][354569110601909][270 ms][DEBUG] END check_scloud in 270 ms [2025-08-24 09:42:11][354569110601909][270 ms][DEBUG] START check_boot_completed [2025-08-24 09:42:11][354569110601909][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:42:11][354569110601909][317 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 09:42:11][354569110601909][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:42:11][354569110601909][364 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 09:42:11][354569110601909][364 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 09:42:11][354569110601909][364 ms][DEBUG] START check_internet [2025-08-24 09:42:11][354569110601909][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 09:42:11][354569110601909][645 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=174 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 174.516/174.516/174.516/0.000 ms\n [2025-08-24 09:42:11][354569110601909][645 ms][DEBUG] check_internet: online [2025-08-24 09:42:11][354569110601909][645 ms][DEBUG] END check_internet in 281 ms [2025-08-24 09:42:11][354569110601909][645 ms][DEBUG] rawBody.length=1148 [2025-08-24 09:42:11][354569110601909][645 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354569110601909\",\"model\":\"SM-G988B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TSE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9427\"}'\'' -e'"" [2025-08-24 09:42:11][354569110601909][645 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:42:11][354569110601909][645 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354569110601909\",\"model\":\"SM-G988B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TSE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9427\"}'\'' -e'"" [2025-08-24 09:42:15][354569110601909][4300 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bc82cbfa-b985-4b5f-9eed-1a0d0f581458","id":"QR_bc82cbfa-b985-4b5f-9eed-1a0d0f581458","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:42:15][354569110601909][4456 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-24 09:42:15][354569110601909][4456 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-24 09:42:15][354569110601909][4456 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:43:03][352677532176137][0 ms][INFO] === Request start === [2025-08-24 09:43:03][352677532176137][1 ms][DEBUG] START check_scloud [2025-08-24 09:43:03][352677532176137][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:43:03][352677532176137][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 22309 4971 24969420 160152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:43:03][352677532176137][313 ms][DEBUG] targetPkg: running [2025-08-24 09:43:03][352677532176137][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-24 09:43:03][352677532176137][313 ms][DEBUG] START check_boot_completed [2025-08-24 09:43:03][352677532176137][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:43:03][352677532176137][344 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 09:43:03][352677532176137][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:43:03][352677532176137][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 09:43:03][352677532176137][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 09:43:03][352677532176137][391 ms][DEBUG] rawBody.length=1148 [2025-08-24 09:43:03][352677532176137][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532176137\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9503\"}'\'' -e'"" [2025-08-24 09:43:03][352677532176137][391 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:43:03][352677532176137][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532176137\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9503\"}'\'' -e'"" [2025-08-24 09:43:07][352677532176137][4437 ms][DEBUG] proc_open done in 4046 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 09:43:07][352677532176137][4437 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-08-24 09:43:07][352677532176137][4437 ms][WARN] Detected error: Process with pid 22309 either refused to load frida-agent, or terminated during injection [2025-08-24 09:43:07][352677532176137][4437 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 09:43:07][352677532176137][4593 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 09:43:07][352677532176137][4593 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 09:43:07][352677532176137][4593 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 09:43:07][352677532176137][4733 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 09:43:07][352677532176137][4734 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 09:43:11][352677532176137][8576 ms][DEBUG] SU: done in 3843 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\ncmd: Failure calling service activity: Broken pipe (32)\n [2025-08-24 09:43:13][352677532176137][10591 ms][DEBUG] START check_boot_completed [2025-08-24 09:43:13][352677532176137][10591 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:43:13][352677532176137][10638 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 09:43:13][352677532176137][10638 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:43:13][352677532176137][10685 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 09:43:13][352677532176137][10685 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 09:43:16][352677532176137][13700 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 09:43:16][352677532176137][13700 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532176137\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9503\"}'\'' -e'"" [2025-08-24 09:43:18][352677532176137][15668 ms][DEBUG] proc_open done in 1968 ms (timeout); code=4; out.len=0 err.len=72 [2025-08-24 09:43:18][352677532176137][15669 ms][DEBUG] END runCmdUntilRes#2 in 1969 ms [2025-08-24 09:43:18][352677532176137][15669 ms][ERROR] NO RESULT; code=124 outCannot read properties of undefined (reading 'getRunningAppProcesses') errCannot read properties of undefined (reading 'getRunningAppProcesses')\r\n [2025-08-24 09:44:03][352677532176137][0 ms][INFO] === Request start === [2025-08-24 09:44:03][352677532176137][1 ms][DEBUG] START check_scloud [2025-08-24 09:44:03][352677532176137][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:44:04][352677532176137][425 ms][DEBUG] SU: done in 424 ms; out [2025-08-24 09:44:04][352677532176137][425 ms][WARN] targetPkg: not running, restarting [2025-08-24 09:44:04][352677532176137][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 09:44:04][352677532176137][566 ms][DEBUG] SU: done in 141 ms; out [2025-08-24 09:44:04][352677532176137][566 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 09:44:04][352677532176137][786 ms][DEBUG] SU: done in 220 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 09:44:06][352677532176137][2800 ms][DEBUG] END check_scloud in 2799 ms [2025-08-24 09:44:06][352677532176137][2800 ms][DEBUG] START check_boot_completed [2025-08-24 09:44:06][352677532176137][2800 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:44:06][352677532176137][2846 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 09:44:06][352677532176137][2847 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:44:06][352677532176137][2893 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 09:44:06][352677532176137][2893 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 09:44:06][352677532176137][2893 ms][DEBUG] START check_internet [2025-08-24 09:44:06][352677532176137][2893 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 09:44:07][352677532176137][3284 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=134 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 134.367/134.367/134.367/0.000 ms\n [2025-08-24 09:44:07][352677532176137][3284 ms][DEBUG] check_internet: online [2025-08-24 09:44:07][352677532176137][3284 ms][DEBUG] END check_internet in 391 ms [2025-08-24 09:44:07][352677532176137][3284 ms][DEBUG] rawBody.length=1148 [2025-08-24 09:44:07][352677532176137][3284 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532176137\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1770\"}'\'' -e'"" [2025-08-24 09:44:07][352677532176137][3284 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:44:07][352677532176137][3284 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532176137\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1770\"}'\'' -e'"" [2025-08-24 09:44:13][352677532176137][9157 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b60e99fb-45d7-4e78-995d-6c1de39957b3","id":"QR_b60e99fb-45d7-4e78-995d-6c1de39957b3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:44:13][352677532176137][9314 ms][DEBUG] proc_open done in 6029 ms; code=255; res.len=3343 [2025-08-24 09:44:13][352677532176137][9314 ms][DEBUG] END runCmdUntilRes#1 in 6029 ms [2025-08-24 09:44:13][352677532176137][9314 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:46:03][358385396855457][1 ms][INFO] === Request start === [2025-08-24 09:46:03][358385396855457][1 ms][DEBUG] START check_scloud [2025-08-24 09:46:03][358385396855457][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:46:04][358385396855457][331 ms][DEBUG] SU: done in 330 ms; outu0_a118 31169 26573 23543860 69064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:46:04][358385396855457][331 ms][DEBUG] targetPkg: running [2025-08-24 09:46:04][358385396855457][331 ms][DEBUG] END check_scloud in 330 ms [2025-08-24 09:46:04][358385396855457][331 ms][DEBUG] START check_boot_completed [2025-08-24 09:46:04][358385396855457][331 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:46:04][358385396855457][378 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 09:46:04][358385396855457][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:46:04][358385396855457][440 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 09:46:04][358385396855457][441 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 09:46:04][358385396855457][441 ms][DEBUG] START check_internet [2025-08-24 09:46:04][358385396855457][441 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 09:46:04][358385396855457][722 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=138 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 138.431/138.431/138.431/0.000 ms\n [2025-08-24 09:46:04][358385396855457][722 ms][DEBUG] check_internet: online [2025-08-24 09:46:04][358385396855457][722 ms][DEBUG] END check_internet in 281 ms [2025-08-24 09:46:04][358385396855457][722 ms][DEBUG] rawBody.length=1148 [2025-08-24 09:46:04][358385396855457][722 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385396855457\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7109\"}'\'' -e'"" [2025-08-24 09:46:04][358385396855457][722 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:46:04][358385396855457][722 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385396855457\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7109\"}'\'' -e'"" [2025-08-24 09:46:08][358385396855457][5236 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_82bf6c06-4340-48d8-9ded-60c3d72349c6","id":"QR_82bf6c06-4340-48d8-9ded-60c3d72349c6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:46:09][358385396855457][5392 ms][DEBUG] proc_open done in 4670 ms; code=255; res.len=3343 [2025-08-24 09:46:09][358385396855457][5392 ms][DEBUG] END runCmdUntilRes#1 in 4670 ms [2025-08-24 09:46:09][358385396855457][5392 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:49:03][352677532197000][1 ms][INFO] === Request start === [2025-08-24 09:49:03][352677532197000][1 ms][DEBUG] START check_scloud [2025-08-24 09:49:03][352677532197000][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:49:04][352677532197000][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 31169 26573 23664716 89764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:49:04][352677532197000][250 ms][DEBUG] targetPkg: running [2025-08-24 09:49:04][352677532197000][250 ms][DEBUG] END check_scloud in 248 ms [2025-08-24 09:49:04][352677532197000][250 ms][DEBUG] START check_boot_completed [2025-08-24 09:49:04][352677532197000][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:49:04][352677532197000][296 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 09:49:04][352677532197000][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:49:04][352677532197000][342 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 09:49:04][352677532197000][343 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 09:49:04][352677532197000][343 ms][DEBUG] rawBody.length=1148 [2025-08-24 09:49:04][352677532197000][343 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532197000\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5343\"}'\'' -e'"" [2025-08-24 09:49:04][352677532197000][343 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:49:04][352677532197000][343 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532197000\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5343\"}'\'' -e'"" [2025-08-24 09:49:08][352677532197000][4591 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_74f11a78-1d02-4430-8fa3-bbf0d47e3231","id":"QR_74f11a78-1d02-4430-8fa3-bbf0d47e3231","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:49:08][352677532197000][4747 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-08-24 09:49:08][352677532197000][4748 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-24 09:49:08][352677532197000][4748 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:52:03][357712351056907][1 ms][INFO] === Request start === [2025-08-24 09:52:03][357712351056907][1 ms][DEBUG] START check_scloud [2025-08-24 09:52:03][357712351056907][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:52:03][357712351056907][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 31169 26573 23776432 102144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:52:03][357712351056907][301 ms][DEBUG] targetPkg: running [2025-08-24 09:52:03][357712351056907][302 ms][DEBUG] END check_scloud in 300 ms [2025-08-24 09:52:03][357712351056907][302 ms][DEBUG] START check_boot_completed [2025-08-24 09:52:03][357712351056907][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:52:03][357712351056907][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 09:52:03][357712351056907][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:52:03][357712351056907][396 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 09:52:03][357712351056907][396 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 09:52:03][357712351056907][396 ms][DEBUG] START check_internet [2025-08-24 09:52:03][357712351056907][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 09:52:04][357712351056907][864 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.976/202.976/202.976/0.000 ms\n [2025-08-24 09:52:04][357712351056907][864 ms][DEBUG] check_internet: online [2025-08-24 09:52:04][357712351056907][864 ms][DEBUG] END check_internet in 468 ms [2025-08-24 09:52:04][357712351056907][864 ms][DEBUG] rawBody.length=1148 [2025-08-24 09:52:04][357712351056907][864 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712351056907\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2600\"}'\'' -e'"" [2025-08-24 09:52:04][357712351056907][864 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:52:04][357712351056907][864 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712351056907\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2600\"}'\'' -e'"" [2025-08-24 09:52:08][357712351056907][5159 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_45bef74c-c38f-4c85-97ce-f0f979a013a9","id":"QR_45bef74c-c38f-4c85-97ce-f0f979a013a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:52:08][357712351056907][5315 ms][DEBUG] proc_open done in 4451 ms; code=255; res.len=3343 [2025-08-24 09:52:08][357712351056907][5315 ms][DEBUG] END runCmdUntilRes#1 in 4451 ms [2025-08-24 09:52:08][357712351056907][5315 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:53:03][350565120584949][0 ms][INFO] === Request start === [2025-08-24 09:53:03][350565120584949][1 ms][DEBUG] START check_scloud [2025-08-24 09:53:03][350565120584949][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:53:03][350565120584949][330 ms][DEBUG] SU: done in 329 ms; outu0_a118 31169 26573 23912724 113644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:53:03][350565120584949][330 ms][DEBUG] targetPkg: running [2025-08-24 09:53:03][350565120584949][330 ms][DEBUG] END check_scloud in 329 ms [2025-08-24 09:53:03][350565120584949][330 ms][DEBUG] START check_boot_completed [2025-08-24 09:53:03][350565120584949][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:53:03][350565120584949][361 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 09:53:03][350565120584949][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:53:03][350565120584949][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 09:53:03][350565120584949][408 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 09:53:03][350565120584949][408 ms][DEBUG] rawBody.length=1148 [2025-08-24 09:53:03][350565120584949][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350565120584949\",\"model\":\"SM-M225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8030\"}'\'' -e'"" [2025-08-24 09:53:03][350565120584949][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:53:03][350565120584949][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350565120584949\",\"model\":\"SM-M225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8030\"}'\'' -e'"" [2025-08-24 09:53:07][350565120584949][4267 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8e2a69f8-a3f6-47cf-9b93-3b756fbfff2c","id":"QR_8e2a69f8-a3f6-47cf-9b93-3b756fbfff2c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:53:07][350565120584949][4423 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-24 09:53:07][350565120584949][4423 ms][DEBUG] END runCmdUntilRes#1 in 4015 ms [2025-08-24 09:53:07][350565120584949][4423 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:55:07][354747958664763][1 ms][INFO] === Request start === [2025-08-24 09:55:07][354747958664763][1 ms][DEBUG] START check_scloud [2025-08-24 09:55:07][354747958664763][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:55:07][354747958664763][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 31169 26573 24069624 122080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:55:07][354747958664763][294 ms][DEBUG] targetPkg: running [2025-08-24 09:55:07][354747958664763][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-24 09:55:07][354747958664763][294 ms][DEBUG] START check_boot_completed [2025-08-24 09:55:07][354747958664763][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:55:07][354747958664763][341 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 09:55:07][354747958664763][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:55:07][354747958664763][388 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 09:55:07][354747958664763][388 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 09:55:07][354747958664763][388 ms][DEBUG] rawBody.length=1149 [2025-08-24 09:55:07][354747958664763][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747958664763\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5559\"}'\'' -e'"" [2025-08-24 09:55:07][354747958664763][388 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:55:07][354747958664763][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747958664763\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5559\"}'\'' -e'"" [2025-08-24 09:55:14][354747958664763][7573 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d0e081f8-a6b2-4c2f-bc0a-73530f8eacd7","id":"QR_d0e081f8-a6b2-4c2f-bc0a-73530f8eacd7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:55:14][354747958664763][7730 ms][DEBUG] proc_open done in 7341 ms; code=255; res.len=3343 [2025-08-24 09:55:14][354747958664763][7730 ms][DEBUG] END runCmdUntilRes#1 in 7342 ms [2025-08-24 09:55:14][354747958664763][7730 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 09:59:06][352233116226656][1 ms][INFO] === Request start === [2025-08-24 09:59:06][352233116226656][1 ms][DEBUG] START check_scloud [2025-08-24 09:59:06][352233116226656][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 09:59:06][352233116226656][298 ms][DEBUG] SU: done in 296 ms; outu0_a118 31169 26573 24181340 132616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 09:59:06][352233116226656][298 ms][DEBUG] targetPkg: running [2025-08-24 09:59:06][352233116226656][298 ms][DEBUG] END check_scloud in 296 ms [2025-08-24 09:59:06][352233116226656][298 ms][DEBUG] START check_boot_completed [2025-08-24 09:59:06][352233116226656][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 09:59:06][352233116226656][329 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 09:59:06][352233116226656][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 09:59:06][352233116226656][376 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 09:59:06][352233116226656][376 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 09:59:06][352233116226656][376 ms][DEBUG] rawBody.length=1159 [2025-08-24 09:59:06][352233116226656][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352233116226656\",\"model\":\"SM-P610\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52RA08TN6J\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1201\"}'\'' -e'"" [2025-08-24 09:59:06][352233116226656][376 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 09:59:06][352233116226656][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352233116226656\",\"model\":\"SM-P610\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52RA08TN6J\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1201\"}'\'' -e'"" [2025-08-24 09:59:11][352233116226656][5812 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fda641d9-cbce-4243-bf90-35cdad6fb7fc","id":"QR_fda641d9-cbce-4243-bf90-35cdad6fb7fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 09:59:12][352233116226656][5968 ms][DEBUG] proc_open done in 5592 ms; code=255; res.len=3343 [2025-08-24 09:59:12][352233116226656][5968 ms][DEBUG] END runCmdUntilRes#1 in 5592 ms [2025-08-24 09:59:12][352233116226656][5968 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:00:03][350876470949859][0 ms][INFO] === Request start === [2025-08-24 10:00:03][350876470949859][1 ms][DEBUG] START check_scloud [2025-08-24 10:00:03][350876470949859][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:00:04][350876470949859][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 31169 26573 24338048 143064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:00:04][350876470949859][298 ms][DEBUG] targetPkg: running [2025-08-24 10:00:04][350876470949859][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-24 10:00:04][350876470949859][298 ms][DEBUG] START check_boot_completed [2025-08-24 10:00:04][350876470949859][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:00:04][350876470949859][345 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 10:00:04][350876470949859][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:00:04][350876470949859][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 10:00:04][350876470949859][392 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 10:00:04][350876470949859][392 ms][DEBUG] START check_internet [2025-08-24 10:00:04][350876470949859][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 10:00:04][350876470949859][860 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.094/203.094/203.094/0.000 ms\n [2025-08-24 10:00:04][350876470949859][860 ms][DEBUG] check_internet: online [2025-08-24 10:00:04][350876470949859][860 ms][DEBUG] END check_internet in 469 ms [2025-08-24 10:00:04][350876470949859][860 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:00:04][350876470949859][860 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350876470949859\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5659\"}'\'' -e'"" [2025-08-24 10:00:04][350876470949859][860 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:00:04][350876470949859][860 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350876470949859\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5659\"}'\'' -e'"" [2025-08-24 10:00:08][350876470949859][5094 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6ad1c37c-f8b8-4b7a-9406-15cabe516938","id":"QR_6ad1c37c-f8b8-4b7a-9406-15cabe516938","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:00:09][350876470949859][5250 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-24 10:00:09][350876470949859][5250 ms][DEBUG] END runCmdUntilRes#1 in 4390 ms [2025-08-24 10:00:09][350876470949859][5250 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:03:03][357674436297080][1 ms][INFO] === Request start === [2025-08-24 10:03:03][357674436297080][1 ms][DEBUG] START check_scloud [2025-08-24 10:03:03][357674436297080][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:03:03][357674436297080][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 31169 26573 24480484 146632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:03:03][357674436297080][313 ms][DEBUG] targetPkg: running [2025-08-24 10:03:03][357674436297080][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-24 10:03:03][357674436297080][313 ms][DEBUG] START check_boot_completed [2025-08-24 10:03:03][357674436297080][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:03:03][357674436297080][344 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 10:03:03][357674436297080][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:03:03][357674436297080][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 10:03:03][357674436297080][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 10:03:03][357674436297080][391 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:03:03][357674436297080][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674436297080\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5511\"}'\'' -e'"" [2025-08-24 10:03:03][357674436297080][391 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:03:03][357674436297080][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674436297080\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5511\"}'\'' -e'"" [2025-08-24 10:03:07][357674436297080][4499 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_18dd4354-2c89-4f19-aa97-ee22f94f2a0e","id":"QR_18dd4354-2c89-4f19-aa97-ee22f94f2a0e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:03:07][357674436297080][4655 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-24 10:03:07][357674436297080][4655 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-24 10:03:07][357674436297080][4655 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:03:10][353842196316028][0 ms][INFO] === Request start === [2025-08-24 10:03:10][353842196316028][1 ms][DEBUG] START check_scloud [2025-08-24 10:03:10][353842196316028][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:03:10][353842196316028][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 31169 26573 24635372 150584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:03:10][353842196316028][319 ms][DEBUG] targetPkg: running [2025-08-24 10:03:10][353842196316028][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-24 10:03:10][353842196316028][319 ms][DEBUG] START check_boot_completed [2025-08-24 10:03:10][353842196316028][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:03:10][353842196316028][365 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 10:03:10][353842196316028][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:03:10][353842196316028][412 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 10:03:10][353842196316028][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 10:03:10][353842196316028][412 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:03:10][353842196316028][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353842196316028\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7823\"}'\'' -e'"" [2025-08-24 10:03:10][353842196316028][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:03:10][353842196316028][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353842196316028\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7823\"}'\'' -e'"" [2025-08-24 10:03:14][353842196316028][4146 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_47a3d511-4252-4f29-8661-790409f1eac6","id":"QR_47a3d511-4252-4f29-8661-790409f1eac6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:03:14][353842196316028][4302 ms][DEBUG] proc_open done in 3890 ms; code=255; res.len=3343 [2025-08-24 10:03:14][353842196316028][4302 ms][DEBUG] END runCmdUntilRes#1 in 3890 ms [2025-08-24 10:03:14][353842196316028][4302 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:04:03][351285623460070][0 ms][INFO] === Request start === [2025-08-24 10:04:03][351285623460070][1 ms][DEBUG] START check_scloud [2025-08-24 10:04:03][351285623460070][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:04:03][351285623460070][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 31169 26573 24765420 155736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:04:03][351285623460070][267 ms][DEBUG] targetPkg: running [2025-08-24 10:04:03][351285623460070][267 ms][DEBUG] END check_scloud in 266 ms [2025-08-24 10:04:03][351285623460070][267 ms][DEBUG] START check_boot_completed [2025-08-24 10:04:03][351285623460070][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:04:03][351285623460070][313 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 10:04:03][351285623460070][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:04:03][351285623460070][376 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 10:04:03][351285623460070][376 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 10:04:03][351285623460070][376 ms][DEBUG] START check_internet [2025-08-24 10:04:03][351285623460070][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 10:04:04][351285623460070][860 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.013/203.013/203.013/0.000 ms\n [2025-08-24 10:04:04][351285623460070][860 ms][DEBUG] check_internet: online [2025-08-24 10:04:04][351285623460070][860 ms][DEBUG] END check_internet in 485 ms [2025-08-24 10:04:04][351285623460070][860 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:04:04][351285623460070][860 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285623460070\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7396\"}'\'' -e'"" [2025-08-24 10:04:04][351285623460070][860 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:04:04][351285623460070][861 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285623460070\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7396\"}'\'' -e'"" [2025-08-24 10:04:08][351285623460070][4656 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c5ad52f5-fee3-4c05-8912-dabb6402b9fb","id":"QR_c5ad52f5-fee3-4c05-8912-dabb6402b9fb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:04:08][351285623460070][4812 ms][DEBUG] proc_open done in 3951 ms; code=255; res.len=3343 [2025-08-24 10:04:08][351285623460070][4812 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-24 10:04:08][351285623460070][4812 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:10:03][351964889316701][1 ms][INFO] === Request start === [2025-08-24 10:10:03][351964889316701][1 ms][DEBUG] START check_scloud [2025-08-24 10:10:03][351964889316701][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:10:03][351964889316701][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 31169 26573 24899796 160932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:10:03][351964889316701][264 ms][DEBUG] targetPkg: running [2025-08-24 10:10:03][351964889316701][264 ms][DEBUG] END check_scloud in 263 ms [2025-08-24 10:10:03][351964889316701][264 ms][DEBUG] START check_boot_completed [2025-08-24 10:10:03][351964889316701][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:10:03][351964889316701][295 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 10:10:03][351964889316701][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:10:03][351964889316701][343 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 10:10:03][351964889316701][343 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 10:10:03][351964889316701][343 ms][DEBUG] START check_internet [2025-08-24 10:10:03][351964889316701][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 10:10:04][351964889316701][936 ms][DEBUG] SU: done in 593 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.959/202.959/202.959/0.000 ms\n [2025-08-24 10:10:04][351964889316701][936 ms][DEBUG] check_internet: online [2025-08-24 10:10:04][351964889316701][936 ms][DEBUG] END check_internet in 593 ms [2025-08-24 10:10:04][351964889316701][936 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:10:04][351964889316701][936 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351964889316701\",\"model\":\"SM-A217F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6464\"}'\'' -e'"" [2025-08-24 10:10:04][351964889316701][936 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:10:04][351964889316701][937 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351964889316701\",\"model\":\"SM-A217F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6464\"}'\'' -e'"" [2025-08-24 10:10:08][351964889316701][5310 ms][DEBUG] proc_open done in 4373 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 10:10:08][351964889316701][5310 ms][DEBUG] END runCmdUntilRes#1 in 4373 ms [2025-08-24 10:10:08][351964889316701][5310 ms][WARN] Detected error: Process with pid 31169 either refused to load frida-agent, or terminated during injection [2025-08-24 10:10:08][351964889316701][5310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 10:10:08][351964889316701][5451 ms][DEBUG] SU: done in 141 ms; out [2025-08-24 10:10:08][351964889316701][5451 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 10:10:08][351964889316701][5451 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 10:10:08][351964889316701][5576 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 10:10:08][351964889316701][5576 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 10:10:09][351964889316701][5810 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 10:10:11][351964889316701][7825 ms][DEBUG] START check_boot_completed [2025-08-24 10:10:11][351964889316701][7825 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:10:11][351964889316701][7872 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 10:10:11][351964889316701][7872 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:10:11][351964889316701][7919 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 10:10:11][351964889316701][7919 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 10:10:14][351964889316701][10934 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 10:10:14][351964889316701][10934 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351964889316701\",\"model\":\"SM-A217F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6464\"}'\'' -e'"" [2025-08-24 10:10:18][351964889316701][14995 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3d677b4e-7d75-4ab2-b7ec-c45b0c77f836","id":"QR_3d677b4e-7d75-4ab2-b7ec-c45b0c77f836","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:10:18][351964889316701][15151 ms][DEBUG] proc_open done in 4218 ms; code=255; res.len=3343 [2025-08-24 10:10:18][351964889316701][15152 ms][DEBUG] END runCmdUntilRes#2 in 4218 ms [2025-08-24 10:10:18][351964889316701][15152 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:15:03][357962505346189][1 ms][INFO] === Request start === [2025-08-24 10:15:03][357962505346189][1 ms][DEBUG] START check_scloud [2025-08-24 10:15:03][357962505346189][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:15:04][357962505346189][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 7662 26573 23464452 126940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:15:04][357962505346189][264 ms][DEBUG] targetPkg: running [2025-08-24 10:15:04][357962505346189][264 ms][DEBUG] END check_scloud in 263 ms [2025-08-24 10:15:04][357962505346189][264 ms][DEBUG] START check_boot_completed [2025-08-24 10:15:04][357962505346189][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:15:04][357962505346189][311 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 10:15:04][357962505346189][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:15:04][357962505346189][358 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 10:15:04][357962505346189][358 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 10:15:04][357962505346189][358 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:15:04][357962505346189][358 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505346189\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2593\"}'\'' -e'"" [2025-08-24 10:15:04][357962505346189][358 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:15:04][357962505346189][358 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505346189\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2593\"}'\'' -e'"" [2025-08-24 10:15:08][357962505346189][4419 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7c8f9e36-72fe-4bf4-b29f-8460b1640f80","id":"QR_7c8f9e36-72fe-4bf4-b29f-8460b1640f80","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:15:08][357962505346189][4576 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-24 10:15:08][357962505346189][4576 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-24 10:15:08][357962505346189][4576 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:15:10][352469855484425][0 ms][INFO] === Request start === [2025-08-24 10:15:10][352469855484425][1 ms][DEBUG] START check_scloud [2025-08-24 10:15:10][352469855484425][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:15:11][352469855484425][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 7662 26573 23606924 137864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:15:11][352469855484425][311 ms][DEBUG] targetPkg: running [2025-08-24 10:15:11][352469855484425][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-24 10:15:11][352469855484425][311 ms][DEBUG] START check_boot_completed [2025-08-24 10:15:11][352469855484425][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:15:11][352469855484425][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 10:15:11][352469855484425][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:15:11][352469855484425][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 10:15:11][352469855484425][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 10:15:11][352469855484425][404 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:15:11][352469855484425][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469855484425\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6687\"}'\'' -e'"" [2025-08-24 10:15:11][352469855484425][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:15:11][352469855484425][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469855484425\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6687\"}'\'' -e'"" [2025-08-24 10:15:15][352469855484425][4216 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_26d561d1-1a84-4c44-88e0-c0acc4e2ee43","id":"QR_26d561d1-1a84-4c44-88e0-c0acc4e2ee43","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:15:15][352469855484425][4372 ms][DEBUG] proc_open done in 3968 ms; code=255; res.len=3343 [2025-08-24 10:15:15][352469855484425][4372 ms][DEBUG] END runCmdUntilRes#1 in 3968 ms [2025-08-24 10:15:15][352469855484425][4372 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:16:02][353684144763996][0 ms][INFO] === Request start === [2025-08-24 10:16:02][353684144763996][1 ms][DEBUG] START check_scloud [2025-08-24 10:16:02][353684144763996][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:16:03][353684144763996][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 7662 26573 23704332 149792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:16:03][353684144763996][302 ms][DEBUG] targetPkg: running [2025-08-24 10:16:03][353684144763996][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-24 10:16:03][353684144763996][302 ms][DEBUG] START check_boot_completed [2025-08-24 10:16:03][353684144763996][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:16:03][353684144763996][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 10:16:03][353684144763996][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:16:03][353684144763996][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 10:16:03][353684144763996][396 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 10:16:03][353684144763996][396 ms][DEBUG] START check_internet [2025-08-24 10:16:03][353684144763996][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 10:16:03][353684144763996][833 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.746/199.746/199.746/0.000 ms\n [2025-08-24 10:16:03][353684144763996][833 ms][DEBUG] check_internet: online [2025-08-24 10:16:03][353684144763996][833 ms][DEBUG] END check_internet in 437 ms [2025-08-24 10:16:03][353684144763996][833 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:16:03][353684144763996][834 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684144763996\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7364\"}'\'' -e'"" [2025-08-24 10:16:03][353684144763996][834 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:16:03][353684144763996][834 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684144763996\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7364\"}'\'' -e'"" [2025-08-24 10:16:07][353684144763996][4941 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_66ef9493-cf62-4bf0-8691-15daffeaecd0","id":"QR_66ef9493-cf62-4bf0-8691-15daffeaecd0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:16:08][353684144763996][5098 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-24 10:16:08][353684144763996][5098 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-24 10:16:08][353684144763996][5098 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:17:03][351910571677249][0 ms][INFO] === Request start === [2025-08-24 10:17:03][351910571677249][1 ms][DEBUG] START check_scloud [2025-08-24 10:17:03][351910571677249][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:17:03][351910571677249][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 7662 26573 23848944 161048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:17:03][351910571677249][314 ms][DEBUG] targetPkg: running [2025-08-24 10:17:03][351910571677249][314 ms][DEBUG] END check_scloud in 314 ms [2025-08-24 10:17:03][351910571677249][314 ms][DEBUG] START check_boot_completed [2025-08-24 10:17:03][351910571677249][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:17:03][351910571677249][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 10:17:03][351910571677249][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:17:03][351910571677249][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 10:17:03][351910571677249][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 10:17:03][351910571677249][408 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:17:03][351910571677249][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351910571677249\",\"model\":\"SM-A415F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4707\"}'\'' -e'"" [2025-08-24 10:17:03][351910571677249][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:17:03][351910571677249][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351910571677249\",\"model\":\"SM-A415F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4707\"}'\'' -e'"" [2025-08-24 10:17:07][351910571677249][4532 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67cb9059-33a9-447f-a3d8-b02142a8a9fc","id":"QR_67cb9059-33a9-447f-a3d8-b02142a8a9fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:17:07][351910571677249][4688 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-24 10:17:07][351910571677249][4688 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-24 10:17:07][351910571677249][4688 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:18:05][350799511065487][1 ms][INFO] === Request start === [2025-08-24 10:18:05][350799511065487][1 ms][DEBUG] START check_scloud [2025-08-24 10:18:05][350799511065487][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:18:05][350799511065487][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 7662 26573 24003156 171788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:18:05][350799511065487][312 ms][DEBUG] targetPkg: running [2025-08-24 10:18:05][350799511065487][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-24 10:18:05][350799511065487][312 ms][DEBUG] START check_boot_completed [2025-08-24 10:18:05][350799511065487][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:18:05][350799511065487][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 10:18:05][350799511065487][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:18:05][350799511065487][406 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 10:18:05][350799511065487][406 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 10:18:05][350799511065487][406 ms][DEBUG] START check_internet [2025-08-24 10:18:05][350799511065487][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 10:18:06][350799511065487][921 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.394/202.394/202.394/0.000 ms\n [2025-08-24 10:18:06][350799511065487][921 ms][DEBUG] check_internet: online [2025-08-24 10:18:06][350799511065487][921 ms][DEBUG] END check_internet in 515 ms [2025-08-24 10:18:06][350799511065487][921 ms][DEBUG] rawBody.length=1149 [2025-08-24 10:18:06][350799511065487][921 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350799511065487\",\"model\":\"SM-G990U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5727\"}'\'' -e'"" [2025-08-24 10:18:06][350799511065487][921 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:18:06][350799511065487][921 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350799511065487\",\"model\":\"SM-G990U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5727\"}'\'' -e'"" [2025-08-24 10:18:13][350799511065487][7919 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1aea1eec-01f5-4de0-84a1-2dfd2e835dd1","id":"QR_1aea1eec-01f5-4de0-84a1-2dfd2e835dd1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:18:13][350799511065487][8075 ms][DEBUG] proc_open done in 7154 ms; code=255; res.len=3343 [2025-08-24 10:18:13][350799511065487][8075 ms][DEBUG] END runCmdUntilRes#1 in 7154 ms [2025-08-24 10:18:13][350799511065487][8075 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:19:04][353881489514808][0 ms][INFO] === Request start === [2025-08-24 10:19:04][353881489514808][1 ms][DEBUG] START check_scloud [2025-08-24 10:19:04][353881489514808][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:19:05][353881489514808][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 7662 26573 24149624 183632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:19:05][353881489514808][306 ms][DEBUG] targetPkg: running [2025-08-24 10:19:05][353881489514808][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-24 10:19:05][353881489514808][307 ms][DEBUG] START check_boot_completed [2025-08-24 10:19:05][353881489514808][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:19:05][353881489514808][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 10:19:05][353881489514808][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:19:05][353881489514808][416 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 10:19:05][353881489514808][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 10:19:05][353881489514808][416 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:19:05][353881489514808][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881489514808\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4705\"}'\'' -e'"" [2025-08-24 10:19:05][353881489514808][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:19:05][353881489514808][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881489514808\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4705\"}'\'' -e'"" [2025-08-24 10:19:09][353881489514808][4165 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 10:19:09][353881489514808][4321 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=107 [2025-08-24 10:19:09][353881489514808][4321 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-24 10:19:09][353881489514808][4321 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 10:19:09][][0 ms][INFO] === Request start === [2025-08-24 10:19:09][][1 ms][DEBUG] START check_scloud [2025-08-24 10:19:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:19:09][][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 7662 26573 24290048 194572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:19:09][][291 ms][DEBUG] targetPkg: running [2025-08-24 10:19:09][][291 ms][DEBUG] END check_scloud in 291 ms [2025-08-24 10:19:09][][291 ms][DEBUG] START check_boot_completed [2025-08-24 10:19:09][][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:19:09][][338 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 10:19:09][][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:19:09][][400 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 10:19:09][][400 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 10:19:09][][400 ms][DEBUG] rawBody.length=1129 [2025-08-24 10:19:09][][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCTB1Q6CCA\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6216\"}'\'' -e'"" [2025-08-24 10:19:09][][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:19:09][][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCTB1Q6CCA\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6216\"}'\'' -e'"" [2025-08-24 10:19:13][][3868 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 10:19:13][][4024 ms][DEBUG] proc_open done in 3624 ms; code=255; res.len=107 [2025-08-24 10:19:13][][4024 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-08-24 10:19:13][][4024 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 10:19:15][353881489514808][0 ms][INFO] === Request start === [2025-08-24 10:19:15][353881489514808][1 ms][DEBUG] START check_scloud [2025-08-24 10:19:15][353881489514808][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:19:16][353881489514808][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 7662 26573 24456072 206268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:19:16][353881489514808][302 ms][DEBUG] targetPkg: running [2025-08-24 10:19:16][353881489514808][302 ms][DEBUG] END check_scloud in 302 ms [2025-08-24 10:19:16][353881489514808][302 ms][DEBUG] START check_boot_completed [2025-08-24 10:19:16][353881489514808][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:19:16][353881489514808][349 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 10:19:16][353881489514808][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:19:16][353881489514808][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 10:19:16][353881489514808][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 10:19:16][353881489514808][412 ms][DEBUG] rawBody.length=1149 [2025-08-24 10:19:16][353881489514808][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881489514808\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8270\"}'\'' -e'"" [2025-08-24 10:19:16][353881489514808][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:19:16][353881489514808][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881489514808\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8270\"}'\'' -e'"" [2025-08-24 10:19:21][353881489514808][5504 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2060d43d-45d3-4969-a011-a0c6af2b5ee2","id":"QR_2060d43d-45d3-4969-a011-a0c6af2b5ee2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:19:21][353881489514808][5660 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-08-24 10:19:21][353881489514808][5660 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-08-24 10:19:21][353881489514808][5660 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:20:03][356414817248308][0 ms][INFO] === Request start === [2025-08-24 10:20:03][356414817248308][1 ms][DEBUG] START check_scloud [2025-08-24 10:20:03][356414817248308][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:20:03][356414817248308][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 7662 26573 24547300 217448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:20:03][356414817248308][260 ms][DEBUG] targetPkg: running [2025-08-24 10:20:03][356414817248308][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-24 10:20:03][356414817248308][260 ms][DEBUG] START check_boot_completed [2025-08-24 10:20:03][356414817248308][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:20:03][356414817248308][307 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 10:20:03][356414817248308][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:20:03][356414817248308][353 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 10:20:03][356414817248308][353 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 10:20:03][356414817248308][353 ms][DEBUG] START check_internet [2025-08-24 10:20:03][356414817248308][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 10:20:03][356414817248308][619 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=151 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 151.603/151.603/151.603/0.000 ms\n [2025-08-24 10:20:03][356414817248308][619 ms][DEBUG] check_internet: online [2025-08-24 10:20:03][356414817248308][619 ms][DEBUG] END check_internet in 266 ms [2025-08-24 10:20:03][356414817248308][619 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:20:03][356414817248308][620 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414817248308\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8286\"}'\'' -e'"" [2025-08-24 10:20:03][356414817248308][620 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:20:03][356414817248308][620 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414817248308\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8286\"}'\'' -e'"" [2025-08-24 10:20:07][356414817248308][4680 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9f2dbfd2-1ac5-42ec-b27e-7fb40cf916ac","id":"QR_9f2dbfd2-1ac5-42ec-b27e-7fb40cf916ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:20:08][356414817248308][4837 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-24 10:20:08][356414817248308][4837 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-24 10:20:08][356414817248308][4837 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:21:03][357962503190308][1 ms][INFO] === Request start === [2025-08-24 10:21:03][357962503190308][1 ms][DEBUG] START check_scloud [2025-08-24 10:21:03][357962503190308][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:21:03][357962503190308][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 7662 26573 24693960 226788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:21:03][357962503190308][306 ms][DEBUG] targetPkg: running [2025-08-24 10:21:03][357962503190308][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-24 10:21:03][357962503190308][307 ms][DEBUG] START check_boot_completed [2025-08-24 10:21:03][357962503190308][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:21:03][357962503190308][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 10:21:03][357962503190308][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:21:03][357962503190308][402 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 10:21:03][357962503190308][402 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 10:21:03][357962503190308][402 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:21:03][357962503190308][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962503190308\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7619\"}'\'' -e'"" [2025-08-24 10:21:03][357962503190308][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:21:03][357962503190308][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962503190308\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7619\"}'\'' -e'"" [2025-08-24 10:21:07][357962503190308][4539 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d1b8efc6-3fe5-4c7b-81d4-d1bbea3c99f7","id":"QR_d1b8efc6-3fe5-4c7b-81d4-d1bbea3c99f7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:21:07][357962503190308][4696 ms][DEBUG] proc_open done in 4294 ms; code=255; res.len=3343 [2025-08-24 10:21:07][357962503190308][4696 ms][DEBUG] END runCmdUntilRes#1 in 4294 ms [2025-08-24 10:21:07][357962503190308][4696 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:24:05][350545461835886][1 ms][INFO] === Request start === [2025-08-24 10:24:05][350545461835886][1 ms][DEBUG] START check_scloud [2025-08-24 10:24:05][350545461835886][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:24:05][350545461835886][316 ms][DEBUG] SU: done in 314 ms; outu0_a118 7662 26573 24838576 223528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:24:05][350545461835886][316 ms][DEBUG] targetPkg: running [2025-08-24 10:24:05][350545461835886][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-24 10:24:05][350545461835886][316 ms][DEBUG] START check_boot_completed [2025-08-24 10:24:05][350545461835886][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:24:05][350545461835886][347 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 10:24:05][350545461835886][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:24:05][350545461835886][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 10:24:05][350545461835886][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 10:24:05][350545461835886][394 ms][DEBUG] START check_internet [2025-08-24 10:24:05][350545461835886][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 10:24:06][350545461835886][816 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.783/201.783/201.783/0.000 ms\n [2025-08-24 10:24:06][350545461835886][816 ms][DEBUG] check_internet: online [2025-08-24 10:24:06][350545461835886][816 ms][DEBUG] END check_internet in 421 ms [2025-08-24 10:24:06][350545461835886][816 ms][DEBUG] rawBody.length=1158 [2025-08-24 10:24:06][350545461835886][816 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545461835886\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52T60EW3DR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7711\"}'\'' -e'"" [2025-08-24 10:24:06][350545461835886][816 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:24:06][350545461835886][816 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545461835886\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52T60EW3DR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7711\"}'\'' -e'"" [2025-08-24 10:24:09][350545461835886][4752 ms][DEBUG] proc_open done in 3937 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-24 10:24:09][350545461835886][4753 ms][DEBUG] END runCmdUntilRes#1 in 3937 ms [2025-08-24 10:24:09][350545461835886][4753 ms][WARN] Detected error: Process with pid 7662 either refused to load frida-agent, or terminated during injection [2025-08-24 10:24:09][350545461835886][4753 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 10:24:10][350545461835886][4893 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 10:24:10][350545461835886][4893 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 10:24:10][350545461835886][4893 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 10:24:10][350545461835886][5018 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 10:24:10][350545461835886][5018 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 10:24:10][350545461835886][5190 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 10:24:12][350545461835886][7205 ms][DEBUG] START check_boot_completed [2025-08-24 10:24:12][350545461835886][7205 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:24:12][350545461835886][7252 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 10:24:12][350545461835886][7252 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:24:12][350545461835886][7299 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 10:24:12][350545461835886][7299 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 10:24:15][350545461835886][10313 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 10:24:15][350545461835886][10313 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545461835886\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52T60EW3DR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7711\"}'\'' -e'"" [2025-08-24 10:24:19][350545461835886][14187 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6ad75a6e-85de-4c39-887d-ce769835446d","id":"QR_6ad75a6e-85de-4c39-887d-ce769835446d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:24:19][350545461835886][14344 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-24 10:24:19][350545461835886][14344 ms][DEBUG] END runCmdUntilRes#2 in 4031 ms [2025-08-24 10:24:19][350545461835886][14344 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:26:03][350637545703113][0 ms][INFO] === Request start === [2025-08-24 10:26:03][350637545703113][1 ms][DEBUG] START check_scloud [2025-08-24 10:26:03][350637545703113][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:26:03][350637545703113][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 9542 26573 23505076 127260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:26:03][350637545703113][276 ms][DEBUG] targetPkg: running [2025-08-24 10:26:03][350637545703113][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-24 10:26:03][350637545703113][276 ms][DEBUG] START check_boot_completed [2025-08-24 10:26:03][350637545703113][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:26:03][350637545703113][322 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 10:26:03][350637545703113][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:26:03][350637545703113][369 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 10:26:03][350637545703113][369 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 10:26:03][350637545703113][369 ms][DEBUG] START check_internet [2025-08-24 10:26:03][350637545703113][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 10:26:03][350637545703113][775 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=258 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 258.264/258.264/258.264/0.000 ms\n [2025-08-24 10:26:03][350637545703113][776 ms][DEBUG] check_internet: online [2025-08-24 10:26:03][350637545703113][776 ms][DEBUG] END check_internet in 406 ms [2025-08-24 10:26:03][350637545703113][776 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:26:03][350637545703113][776 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637545703113\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"S08\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5565\"}'\'' -e'"" [2025-08-24 10:26:03][350637545703113][776 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:26:03][350637545703113][776 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637545703113\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"S08\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5565\"}'\'' -e'"" [2025-08-24 10:26:08][350637545703113][4977 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_069e1372-b712-46c2-b9e9-d1dfb020f6dc","id":"QR_069e1372-b712-46c2-b9e9-d1dfb020f6dc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:26:08][350637545703113][5134 ms][DEBUG] proc_open done in 4357 ms; code=255; res.len=3343 [2025-08-24 10:26:08][350637545703113][5134 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-24 10:26:08][350637545703113][5134 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:27:03][352308822916061][1 ms][INFO] === Request start === [2025-08-24 10:27:03][352308822916061][1 ms][DEBUG] START check_scloud [2025-08-24 10:27:03][352308822916061][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:27:03][352308822916061][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 9542 26573 23640268 138496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:27:03][352308822916061][309 ms][DEBUG] targetPkg: running [2025-08-24 10:27:03][352308822916061][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-24 10:27:03][352308822916061][310 ms][DEBUG] START check_boot_completed [2025-08-24 10:27:03][352308822916061][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:27:03][352308822916061][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 10:27:03][352308822916061][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:27:03][352308822916061][405 ms][DEBUG] SU: done in 49 ms; out [2025-08-24 10:27:03][352308822916061][405 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 10:27:03][352308822916061][405 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:27:03][352308822916061][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352308822916061\",\"model\":\"SM-A426N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1615\"}'\'' -e'"" [2025-08-24 10:27:03][352308822916061][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:27:03][352308822916061][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352308822916061\",\"model\":\"SM-A426N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1615\"}'\'' -e'"" [2025-08-24 10:27:07][352308822916061][4183 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_640a561f-7acf-47e4-a1fe-5556f6611266","id":"QR_640a561f-7acf-47e4-a1fe-5556f6611266","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:27:07][352308822916061][4339 ms][DEBUG] proc_open done in 3934 ms; code=255; res.len=3343 [2025-08-24 10:27:07][352308822916061][4339 ms][DEBUG] END runCmdUntilRes#1 in 3934 ms [2025-08-24 10:27:07][352308822916061][4339 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:28:04][352042191344650][0 ms][INFO] === Request start === [2025-08-24 10:28:04][352042191344650][1 ms][DEBUG] START check_scloud [2025-08-24 10:28:04][352042191344650][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:28:05][352042191344650][298 ms][DEBUG] SU: done in 298 ms; outu0_a118 9542 26573 23778608 150688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:28:05][352042191344650][298 ms][DEBUG] targetPkg: running [2025-08-24 10:28:05][352042191344650][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-24 10:28:05][352042191344650][299 ms][DEBUG] START check_boot_completed [2025-08-24 10:28:05][352042191344650][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:28:05][352042191344650][345 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 10:28:05][352042191344650][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:28:05][352042191344650][408 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 10:28:05][352042191344650][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 10:28:05][352042191344650][408 ms][DEBUG] START check_internet [2025-08-24 10:28:05][352042191344650][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 10:28:05][352042191344650][814 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=280 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 280.766/280.766/280.766/0.000 ms\n [2025-08-24 10:28:05][352042191344650][815 ms][DEBUG] check_internet: online [2025-08-24 10:28:05][352042191344650][815 ms][DEBUG] END check_internet in 407 ms [2025-08-24 10:28:05][352042191344650][815 ms][DEBUG] rawBody.length=1149 [2025-08-24 10:28:05][352042191344650][815 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042191344650\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7418\"}'\'' -e'"" [2025-08-24 10:28:05][352042191344650][815 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:28:05][352042191344650][815 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042191344650\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7418\"}'\'' -e'"" [2025-08-24 10:28:11][352042191344650][6984 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67fb921b-00b5-47f4-a10d-4842dd1d2984","id":"QR_67fb921b-00b5-47f4-a10d-4842dd1d2984","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:28:12][352042191344650][7140 ms][DEBUG] proc_open done in 6325 ms; code=255; res.len=3343 [2025-08-24 10:28:12][352042191344650][7140 ms][DEBUG] END runCmdUntilRes#1 in 6326 ms [2025-08-24 10:28:12][352042191344650][7141 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:35:03][358024391328844][1 ms][INFO] === Request start === [2025-08-24 10:35:03][358024391328844][1 ms][DEBUG] START check_scloud [2025-08-24 10:35:03][358024391328844][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:35:03][358024391328844][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 9542 26573 23927140 162028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:35:03][358024391328844][307 ms][DEBUG] targetPkg: running [2025-08-24 10:35:03][358024391328844][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-24 10:35:03][358024391328844][307 ms][DEBUG] START check_boot_completed [2025-08-24 10:35:03][358024391328844][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:35:03][358024391328844][338 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 10:35:03][358024391328844][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:35:03][358024391328844][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 10:35:03][358024391328844][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 10:35:03][358024391328844][385 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:35:03][358024391328844][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358024391328844\",\"model\":\"SM-A125F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2456\"}'\'' -e'"" [2025-08-24 10:35:03][358024391328844][385 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:35:03][358024391328844][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358024391328844\",\"model\":\"SM-A125F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2456\"}'\'' -e'"" [2025-08-24 10:35:07][358024391328844][4338 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1cb48b42-7fc4-4727-ab62-97c59a8bbb92","id":"QR_1cb48b42-7fc4-4727-ab62-97c59a8bbb92","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:35:07][358024391328844][4494 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-24 10:35:07][358024391328844][4494 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-24 10:35:07][358024391328844][4494 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:35:10][350178734570575][0 ms][INFO] === Request start === [2025-08-24 10:35:10][350178734570575][1 ms][DEBUG] START check_scloud [2025-08-24 10:35:10][350178734570575][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:35:10][350178734570575][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 9542 26573 24074936 172748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:35:10][350178734570575][314 ms][DEBUG] targetPkg: running [2025-08-24 10:35:10][350178734570575][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-24 10:35:10][350178734570575][314 ms][DEBUG] START check_boot_completed [2025-08-24 10:35:10][350178734570575][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:35:10][350178734570575][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 10:35:10][350178734570575][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:35:10][350178734570575][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 10:35:10][350178734570575][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 10:35:10][350178734570575][407 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:35:10][350178734570575][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178734570575\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5006\"}'\'' -e'"" [2025-08-24 10:35:10][350178734570575][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:35:10][350178734570575][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178734570575\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5006\"}'\'' -e'"" [2025-08-24 10:35:14][350178734570575][4219 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e53f75aa-e708-43f8-bb22-c0661be13668","id":"QR_e53f75aa-e708-43f8-bb22-c0661be13668","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:35:14][350178734570575][4375 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-24 10:35:14][350178734570575][4375 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-24 10:35:14][350178734570575][4375 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:37:03][357042142512533][0 ms][INFO] === Request start === [2025-08-24 10:37:03][357042142512533][1 ms][DEBUG] START check_scloud [2025-08-24 10:37:03][357042142512533][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:37:03][357042142512533][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 9542 26573 24164216 184788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:37:03][357042142512533][292 ms][DEBUG] targetPkg: running [2025-08-24 10:37:03][357042142512533][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-24 10:37:03][357042142512533][292 ms][DEBUG] START check_boot_completed [2025-08-24 10:37:03][357042142512533][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:37:03][357042142512533][323 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 10:37:03][357042142512533][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:37:03][357042142512533][370 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 10:37:03][357042142512533][370 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 10:37:03][357042142512533][370 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:37:03][357042142512533][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042142512533\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6631\"}'\'' -e'"" [2025-08-24 10:37:03][357042142512533][370 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:37:03][357042142512533][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042142512533\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6631\"}'\'' -e'"" [2025-08-24 10:37:07][357042142512533][4525 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6dfeb386-6616-4b91-97fa-fd79a3842a9b","id":"QR_6dfeb386-6616-4b91-97fa-fd79a3842a9b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:37:07][357042142512533][4681 ms][DEBUG] proc_open done in 4310 ms; code=255; res.len=3343 [2025-08-24 10:37:07][357042142512533][4681 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-24 10:37:07][357042142512533][4681 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:38:03][352665189829389][1 ms][INFO] === Request start === [2025-08-24 10:38:03][352665189829389][1 ms][DEBUG] START check_scloud [2025-08-24 10:38:03][352665189829389][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:38:04][352665189829389][297 ms][DEBUG] SU: done in 295 ms; outu0_a118 9542 26573 24314908 195424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:38:04][352665189829389][297 ms][DEBUG] targetPkg: running [2025-08-24 10:38:04][352665189829389][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-24 10:38:04][352665189829389][297 ms][DEBUG] START check_boot_completed [2025-08-24 10:38:04][352665189829389][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:38:04][352665189829389][343 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 10:38:04][352665189829389][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:38:04][352665189829389][406 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 10:38:04][352665189829389][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 10:38:04][352665189829389][406 ms][DEBUG] START check_internet [2025-08-24 10:38:04][352665189829389][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 10:38:04][352665189829389][844 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.012/201.012/201.012/0.000 ms\n [2025-08-24 10:38:04][352665189829389][844 ms][DEBUG] check_internet: online [2025-08-24 10:38:04][352665189829389][844 ms][DEBUG] END check_internet in 438 ms [2025-08-24 10:38:04][352665189829389][844 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:38:04][352665189829389][844 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665189829389\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8862\"}'\'' -e'"" [2025-08-24 10:38:04][352665189829389][844 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:38:04][352665189829389][844 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665189829389\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8862\"}'\'' -e'"" [2025-08-24 10:38:08][352665189829389][5108 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf16f046-0cc7-4898-9990-d620d474fa43","id":"QR_cf16f046-0cc7-4898-9990-d620d474fa43","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:38:09][352665189829389][5264 ms][DEBUG] proc_open done in 4420 ms; code=255; res.len=3343 [2025-08-24 10:38:09][352665189829389][5264 ms][DEBUG] END runCmdUntilRes#1 in 4420 ms [2025-08-24 10:38:09][352665189829389][5264 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:40:03][354529383222643][0 ms][INFO] === Request start === [2025-08-24 10:40:03][354529383222643][1 ms][DEBUG] START check_scloud [2025-08-24 10:40:03][354529383222643][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:40:03][354529383222643][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 9542 26573 24457344 207552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:40:03][354529383222643][293 ms][DEBUG] targetPkg: running [2025-08-24 10:40:03][354529383222643][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-24 10:40:03][354529383222643][294 ms][DEBUG] START check_boot_completed [2025-08-24 10:40:03][354529383222643][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:40:03][354529383222643][339 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 10:40:03][354529383222643][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:40:03][354529383222643][402 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 10:40:03][354529383222643][402 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-24 10:40:03][354529383222643][402 ms][DEBUG] START check_internet [2025-08-24 10:40:03][354529383222643][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 10:40:04][354529383222643][917 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.209/201.209/201.209/0.000 ms\n [2025-08-24 10:40:04][354529383222643][918 ms][DEBUG] check_internet: online [2025-08-24 10:40:04][354529383222643][918 ms][DEBUG] END check_internet in 516 ms [2025-08-24 10:40:04][354529383222643][918 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:40:04][354529383222643][918 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529383222643\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6633\"}'\'' -e'"" [2025-08-24 10:40:04][354529383222643][918 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:40:04][354529383222643][918 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529383222643\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6633\"}'\'' -e'"" [2025-08-24 10:40:08][354529383222643][5166 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c7582153-ba53-4096-84ac-ea5f2e0434fc","id":"QR_c7582153-ba53-4096-84ac-ea5f2e0434fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:40:08][354529383222643][5322 ms][DEBUG] proc_open done in 4404 ms; code=255; res.len=3343 [2025-08-24 10:40:08][354529383222643][5322 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-24 10:40:08][354529383222643][5322 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:42:03][355798870210697][1 ms][INFO] === Request start === [2025-08-24 10:42:03][355798870210697][1 ms][DEBUG] START check_scloud [2025-08-24 10:42:03][355798870210697][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:42:03][355798870210697][262 ms][DEBUG] SU: done in 260 ms; outu0_a118 9542 26573 24591716 218556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:42:03][355798870210697][262 ms][DEBUG] targetPkg: running [2025-08-24 10:42:03][355798870210697][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-24 10:42:03][355798870210697][262 ms][DEBUG] START check_boot_completed [2025-08-24 10:42:03][355798870210697][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:42:03][355798870210697][306 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 10:42:03][355798870210697][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:42:03][355798870210697][353 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 10:42:03][355798870210697][353 ms][DEBUG] END check_boot_completed in 91 ms [2025-08-24 10:42:03][355798870210697][353 ms][DEBUG] START check_internet [2025-08-24 10:42:03][355798870210697][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 10:42:03][355798870210697][666 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=214 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 214.948/214.948/214.948/0.000 ms\n [2025-08-24 10:42:03][355798870210697][666 ms][DEBUG] check_internet: online [2025-08-24 10:42:03][355798870210697][666 ms][DEBUG] END check_internet in 313 ms [2025-08-24 10:42:03][355798870210697][666 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:42:03][355798870210697][666 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355798870210697\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7233\"}'\'' -e'"" [2025-08-24 10:42:03][355798870210697][666 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:42:03][355798870210697][666 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355798870210697\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7233\"}'\'' -e'"" [2025-08-24 10:42:08][355798870210697][4883 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7625a50f-b1c8-49af-ad77-1c1313a60360","id":"QR_7625a50f-b1c8-49af-ad77-1c1313a60360","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:42:08][355798870210697][5040 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3343 [2025-08-24 10:42:08][355798870210697][5040 ms][DEBUG] END runCmdUntilRes#1 in 4373 ms [2025-08-24 10:42:08][355798870210697][5040 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:43:03][351642480332810][0 ms][INFO] === Request start === [2025-08-24 10:43:03][351642480332810][1 ms][DEBUG] START check_scloud [2025-08-24 10:43:03][351642480332810][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:43:04][351642480332810][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 9542 26573 24699464 230496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:43:04][351642480332810][325 ms][DEBUG] targetPkg: running [2025-08-24 10:43:04][351642480332810][325 ms][DEBUG] END check_scloud in 324 ms [2025-08-24 10:43:04][351642480332810][325 ms][DEBUG] START check_boot_completed [2025-08-24 10:43:04][351642480332810][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:43:04][351642480332810][371 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 10:43:04][351642480332810][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:43:04][351642480332810][419 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 10:43:04][351642480332810][419 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 10:43:04][351642480332810][419 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:43:04][351642480332810][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642480332810\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2786\"}'\'' -e'"" [2025-08-24 10:43:04][351642480332810][419 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:43:04][351642480332810][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642480332810\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2786\"}'\'' -e'"" [2025-08-24 10:43:08][351642480332810][4714 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e2584c6b-edaf-46b3-a054-55dc1f5ea6fd","id":"QR_e2584c6b-edaf-46b3-a054-55dc1f5ea6fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:43:08][351642480332810][4870 ms][DEBUG] proc_open done in 4451 ms; code=255; res.len=3343 [2025-08-24 10:43:08][351642480332810][4870 ms][DEBUG] END runCmdUntilRes#1 in 4451 ms [2025-08-24 10:43:08][351642480332810][4870 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:44:03][351681591774890][0 ms][INFO] === Request start === [2025-08-24 10:44:03][351681591774890][1 ms][DEBUG] START check_scloud [2025-08-24 10:44:03][351681591774890][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:44:03][351681591774890][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 9542 26573 24805168 241176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:44:03][351681591774890][309 ms][DEBUG] targetPkg: running [2025-08-24 10:44:03][351681591774890][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-24 10:44:03][351681591774890][309 ms][DEBUG] START check_boot_completed [2025-08-24 10:44:03][351681591774890][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:44:03][351681591774890][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 10:44:03][351681591774890][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:44:03][351681591774890][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 10:44:03][351681591774890][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 10:44:03][351681591774890][418 ms][DEBUG] START check_internet [2025-08-24 10:44:03][351681591774890][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 10:44:04][351681591774890][871 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=181 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 181.921/181.921/181.921/0.000 ms\n [2025-08-24 10:44:04][351681591774890][871 ms][DEBUG] check_internet: online [2025-08-24 10:44:04][351681591774890][871 ms][DEBUG] END check_internet in 453 ms [2025-08-24 10:44:04][351681591774890][871 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:44:04][351681591774890][871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681591774890\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4917\"}'\'' -e'"" [2025-08-24 10:44:04][351681591774890][871 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:44:04][351681591774890][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681591774890\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4917\"}'\'' -e'"" [2025-08-24 10:44:08][351681591774890][4870 ms][DEBUG] proc_open done in 3998 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-24 10:44:08][351681591774890][4870 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-24 10:44:08][351681591774890][4870 ms][WARN] Detected error: Process with pid 9542 either refused to load frida-agent, or terminated during injection [2025-08-24 10:44:08][351681591774890][4870 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 10:44:08][351681591774890][5010 ms][DEBUG] SU: done in 141 ms; out [2025-08-24 10:44:08][351681591774890][5010 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 10:44:08][351681591774890][5011 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 10:44:08][351681591774890][5167 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 10:44:08][351681591774890][5167 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 10:44:08][351681591774890][5323 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 10:44:10][351681591774890][7338 ms][DEBUG] START check_boot_completed [2025-08-24 10:44:10][351681591774890][7338 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:44:10][351681591774890][7385 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 10:44:10][351681591774890][7385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:44:10][351681591774890][7432 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 10:44:10][351681591774890][7432 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 10:44:13][351681591774890][10446 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 10:44:13][351681591774890][10446 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681591774890\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4917\"}'\'' -e'"" [2025-08-24 10:44:17][351681591774890][14586 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a00e967b-cc96-4285-8368-73d49705168c","id":"QR_a00e967b-cc96-4285-8368-73d49705168c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:44:17][351681591774890][14742 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-08-24 10:44:17][351681591774890][14742 ms][DEBUG] END runCmdUntilRes#2 in 4296 ms [2025-08-24 10:44:17][351681591774890][14742 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:48:02][353684143249294][1 ms][INFO] === Request start === [2025-08-24 10:48:02][353684143249294][1 ms][DEBUG] START check_scloud [2025-08-24 10:48:02][353684143249294][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:48:03][353684143249294][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 11244 26573 23441480 127784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:48:03][353684143249294][317 ms][DEBUG] targetPkg: running [2025-08-24 10:48:03][353684143249294][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-24 10:48:03][353684143249294][317 ms][DEBUG] START check_boot_completed [2025-08-24 10:48:03][353684143249294][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:48:03][353684143249294][349 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 10:48:03][353684143249294][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:48:03][353684143249294][397 ms][DEBUG] SU: done in 49 ms; out [2025-08-24 10:48:03][353684143249294][397 ms][DEBUG] END check_boot_completed in 80 ms [2025-08-24 10:48:03][353684143249294][397 ms][DEBUG] START check_internet [2025-08-24 10:48:03][353684143249294][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 10:48:03][353684143249294][772 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=242 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 242.547/242.547/242.547/0.000 ms\n [2025-08-24 10:48:03][353684143249294][772 ms][DEBUG] check_internet: online [2025-08-24 10:48:03][353684143249294][772 ms][DEBUG] END check_internet in 375 ms [2025-08-24 10:48:03][353684143249294][773 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:48:03][353684143249294][773 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684143249294\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1576\"}'\'' -e'"" [2025-08-24 10:48:03][353684143249294][773 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:48:03][353684143249294][773 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684143249294\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1576\"}'\'' -e'"" [2025-08-24 10:48:07][353684143249294][5019 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8d649ab2-2382-4a7d-812d-9ff576306c38","id":"QR_8d649ab2-2382-4a7d-812d-9ff576306c38","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:48:08][353684143249294][5176 ms][DEBUG] proc_open done in 4403 ms; code=255; res.len=3343 [2025-08-24 10:48:08][353684143249294][5176 ms][DEBUG] END runCmdUntilRes#1 in 4403 ms [2025-08-24 10:48:08][353684143249294][5176 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:48:10][355755472848076][0 ms][INFO] === Request start === [2025-08-24 10:48:10][355755472848076][0 ms][DEBUG] START check_scloud [2025-08-24 10:48:10][355755472848076][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:48:10][355755472848076][266 ms][DEBUG] SU: done in 266 ms; outu0_a118 11244 26573 23600364 139244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:48:10][355755472848076][266 ms][DEBUG] targetPkg: running [2025-08-24 10:48:10][355755472848076][266 ms][DEBUG] END check_scloud in 266 ms [2025-08-24 10:48:10][355755472848076][266 ms][DEBUG] START check_boot_completed [2025-08-24 10:48:10][355755472848076][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:48:10][355755472848076][297 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 10:48:10][355755472848076][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:48:10][355755472848076][344 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 10:48:10][355755472848076][344 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 10:48:10][355755472848076][344 ms][DEBUG] START check_internet [2025-08-24 10:48:10][355755472848076][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 10:48:11][355755472848076][594 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=135 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 135.221/135.221/135.221/0.000 ms\n [2025-08-24 10:48:11][355755472848076][595 ms][DEBUG] check_internet: online [2025-08-24 10:48:11][355755472848076][595 ms][DEBUG] END check_internet in 250 ms [2025-08-24 10:48:11][355755472848076][595 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:48:11][355755472848076][595 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355755472848076\",\"model\":\"SM-F731N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4837\"}'\'' -e'"" [2025-08-24 10:48:11][355755472848076][595 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:48:11][355755472848076][595 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355755472848076\",\"model\":\"SM-F731N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4837\"}'\'' -e'"" [2025-08-24 10:48:15][355755472848076][4796 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_08ba98bf-fd33-4c4b-810f-df62a5d9742f","id":"QR_08ba98bf-fd33-4c4b-810f-df62a5d9742f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:48:15][355755472848076][4953 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3343 [2025-08-24 10:48:15][355755472848076][4953 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-24 10:48:15][355755472848076][4953 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:53:03][352455560529166][1 ms][INFO] === Request start === [2025-08-24 10:53:03][352455560529166][1 ms][DEBUG] START check_scloud [2025-08-24 10:53:03][352455560529166][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:53:04][352455560529166][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 11244 26573 23697772 150800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:53:04][352455560529166][310 ms][DEBUG] targetPkg: running [2025-08-24 10:53:04][352455560529166][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-24 10:53:04][352455560529166][310 ms][DEBUG] START check_boot_completed [2025-08-24 10:53:04][352455560529166][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:53:04][352455560529166][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 10:53:04][352455560529166][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:53:04][352455560529166][405 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 10:53:04][352455560529166][405 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 10:53:04][352455560529166][405 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:53:04][352455560529166][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352455560529166\",\"model\":\"GH82-285\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"73A\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8622\"}'\'' -e'"" [2025-08-24 10:53:04][352455560529166][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:53:04][352455560529166][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352455560529166\",\"model\":\"GH82-285\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"73A\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8622\"}'\'' -e'"" [2025-08-24 10:53:09][352455560529166][5309 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bf3f2fab-0ff2-4c9d-9cfc-3798ee43c28b","id":"QR_bf3f2fab-0ff2-4c9d-9cfc-3798ee43c28b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:53:09][352455560529166][5465 ms][DEBUG] proc_open done in 5059 ms; code=255; res.len=3343 [2025-08-24 10:53:09][352455560529166][5465 ms][DEBUG] END runCmdUntilRes#1 in 5059 ms [2025-08-24 10:53:09][352455560529166][5465 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:56:03][351272334094547][1 ms][INFO] === Request start === [2025-08-24 10:56:03][351272334094547][1 ms][DEBUG] START check_scloud [2025-08-24 10:56:03][351272334094547][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:56:04][351272334094547][320 ms][DEBUG] SU: done in 318 ms; outu0_a118 11244 26573 23807376 162448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:56:04][351272334094547][320 ms][DEBUG] targetPkg: running [2025-08-24 10:56:04][351272334094547][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-24 10:56:04][351272334094547][320 ms][DEBUG] START check_boot_completed [2025-08-24 10:56:04][351272334094547][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:56:04][351272334094547][366 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 10:56:04][351272334094547][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:56:04][351272334094547][413 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 10:56:04][351272334094547][414 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 10:56:04][351272334094547][414 ms][DEBUG] START check_internet [2025-08-24 10:56:04][351272334094547][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 10:56:04][351272334094547][929 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.510/201.510/201.510/0.000 ms\n [2025-08-24 10:56:04][351272334094547][929 ms][DEBUG] check_internet: online [2025-08-24 10:56:04][351272334094547][929 ms][DEBUG] END check_internet in 515 ms [2025-08-24 10:56:04][351272334094547][929 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:56:04][351272334094547][929 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272334094547\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1774\"}'\'' -e'"" [2025-08-24 10:56:04][351272334094547][929 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:56:04][351272334094547][929 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272334094547\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1774\"}'\'' -e'"" [2025-08-24 10:56:08][351272334094547][5068 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d0c4f6c1-ec8c-4eb1-a827-199f624648b8","id":"QR_d0c4f6c1-ec8c-4eb1-a827-199f624648b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:56:08][351272334094547][5225 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-08-24 10:56:08][351272334094547][5225 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-08-24 10:56:08][351272334094547][5225 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 10:56:11][354916444290299][0 ms][INFO] === Request start === [2025-08-24 10:56:11][354916444290299][1 ms][DEBUG] START check_scloud [2025-08-24 10:56:11][354916444290299][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 10:56:11][354916444290299][293 ms][DEBUG] SU: done in 293 ms; outu0_a118 11244 26573 23945816 172276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 10:56:11][354916444290299][293 ms][DEBUG] targetPkg: running [2025-08-24 10:56:11][354916444290299][293 ms][DEBUG] END check_scloud in 293 ms [2025-08-24 10:56:11][354916444290299][294 ms][DEBUG] START check_boot_completed [2025-08-24 10:56:11][354916444290299][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 10:56:11][354916444290299][340 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 10:56:11][354916444290299][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 10:56:11][354916444290299][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 10:56:11][354916444290299][387 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 10:56:11][354916444290299][387 ms][DEBUG] START check_internet [2025-08-24 10:56:11][354916444290299][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 10:56:12][354916444290299][700 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=176 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 176.909/176.909/176.909/0.000 ms\n [2025-08-24 10:56:12][354916444290299][700 ms][DEBUG] check_internet: online [2025-08-24 10:56:12][354916444290299][700 ms][DEBUG] END check_internet in 312 ms [2025-08-24 10:56:12][354916444290299][700 ms][DEBUG] rawBody.length=1148 [2025-08-24 10:56:12][354916444290299][700 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916444290299\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7501\"}'\'' -e'"" [2025-08-24 10:56:12][354916444290299][700 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 10:56:12][354916444290299][700 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916444290299\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7501\"}'\'' -e'"" [2025-08-24 10:56:15][354916444290299][4386 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7976fc1a-e78f-40f2-a68e-1429e4886329","id":"QR_7976fc1a-e78f-40f2-a68e-1429e4886329","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 10:56:16][354916444290299][4542 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3343 [2025-08-24 10:56:16][354916444290299][4542 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-08-24 10:56:16][354916444290299][4542 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:02:03][355744471068704][1 ms][INFO] === Request start === [2025-08-24 11:02:03][355744471068704][1 ms][DEBUG] START check_scloud [2025-08-24 11:02:03][355744471068704][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:02:04][355744471068704][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 11244 26573 24075800 182616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:02:04][355744471068704][300 ms][DEBUG] targetPkg: running [2025-08-24 11:02:04][355744471068704][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-24 11:02:04][355744471068704][300 ms][DEBUG] START check_boot_completed [2025-08-24 11:02:04][355744471068704][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:02:04][355744471068704][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 11:02:04][355744471068704][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:02:04][355744471068704][409 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 11:02:04][355744471068704][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 11:02:04][355744471068704][410 ms][DEBUG] START check_internet [2025-08-24 11:02:04][355744471068704][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 11:02:04][355744471068704][925 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.013/203.013/203.013/0.000 ms\n [2025-08-24 11:02:04][355744471068704][925 ms][DEBUG] check_internet: online [2025-08-24 11:02:04][355744471068704][925 ms][DEBUG] END check_internet in 516 ms [2025-08-24 11:02:04][355744471068704][925 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:02:04][355744471068704][925 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355744471068704\",\"model\":\"SM-E556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6772\"}'\'' -e'"" [2025-08-24 11:02:04][355744471068704][925 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:02:04][355744471068704][925 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355744471068704\",\"model\":\"SM-E556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6772\"}'\'' -e'"" [2025-08-24 11:02:09][355744471068704][5158 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_52f06cc4-9fab-4e7e-91fe-1cb3a1bad2e5","id":"QR_52f06cc4-9fab-4e7e-91fe-1cb3a1bad2e5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:02:09][355744471068704][5314 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-24 11:02:09][355744471068704][5314 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-24 11:02:09][355744471068704][5314 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:04:03][352332117278037][1 ms][INFO] === Request start === [2025-08-24 11:04:03][352332117278037][1 ms][DEBUG] START check_scloud [2025-08-24 11:04:03][352332117278037][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:04:03][352332117278037][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 11244 26573 24181372 185080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:04:03][352332117278037][309 ms][DEBUG] targetPkg: running [2025-08-24 11:04:03][352332117278037][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-24 11:04:03][352332117278037][309 ms][DEBUG] START check_boot_completed [2025-08-24 11:04:03][352332117278037][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:04:03][352332117278037][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 11:04:03][352332117278037][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:04:03][352332117278037][450 ms][DEBUG] SU: done in 94 ms; out [2025-08-24 11:04:03][352332117278037][450 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-24 11:04:03][352332117278037][450 ms][DEBUG] START check_internet [2025-08-24 11:04:03][352332117278037][450 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 11:04:04][352332117278037][934 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.258/202.258/202.258/0.000 ms\n [2025-08-24 11:04:04][352332117278037][934 ms][DEBUG] check_internet: online [2025-08-24 11:04:04][352332117278037][934 ms][DEBUG] END check_internet in 485 ms [2025-08-24 11:04:04][352332117278037][934 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:04:04][352332117278037][935 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352332117278037\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1901\"}'\'' -e'"" [2025-08-24 11:04:04][352332117278037][935 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:04:04][352332117278037][935 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352332117278037\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1901\"}'\'' -e'"" [2025-08-24 11:04:08][352332117278037][5261 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1bb47b61-5864-47a3-9eb6-0e28de6d4ee8","id":"QR_1bb47b61-5864-47a3-9eb6-0e28de6d4ee8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:04:08][352332117278037][5417 ms][DEBUG] proc_open done in 4482 ms; code=255; res.len=3343 [2025-08-24 11:04:08][352332117278037][5417 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-24 11:04:08][352332117278037][5417 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:05:03][353684144208679][0 ms][INFO] === Request start === [2025-08-24 11:05:03][353684144208679][1 ms][DEBUG] START check_scloud [2025-08-24 11:05:03][353684144208679][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:05:03][353684144208679][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 11244 26573 24299360 185952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:05:03][353684144208679][309 ms][DEBUG] targetPkg: running [2025-08-24 11:05:03][353684144208679][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-24 11:05:03][353684144208679][309 ms][DEBUG] START check_boot_completed [2025-08-24 11:05:03][353684144208679][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:05:03][353684144208679][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 11:05:03][353684144208679][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:05:03][353684144208679][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 11:05:03][353684144208679][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 11:05:03][353684144208679][402 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:05:03][353684144208679][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684144208679\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3993\"}'\'' -e'"" [2025-08-24 11:05:03][353684144208679][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:05:03][353684144208679][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684144208679\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3993\"}'\'' -e'"" [2025-08-24 11:05:07][353684144208679][4276 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_89291de8-dcd2-41da-ac7c-67f192fa97cd","id":"QR_89291de8-dcd2-41da-ac7c-67f192fa97cd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:05:07][353684144208679][4432 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-24 11:05:07][353684144208679][4432 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-24 11:05:07][353684144208679][4433 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:06:03][352133643659082][1 ms][INFO] === Request start === [2025-08-24 11:06:03][352133643659082][1 ms][DEBUG] START check_scloud [2025-08-24 11:06:03][352133643659082][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:06:03][352133643659082][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 11244 26573 24421444 196804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:06:03][352133643659082][274 ms][DEBUG] targetPkg: running [2025-08-24 11:06:03][352133643659082][274 ms][DEBUG] END check_scloud in 273 ms [2025-08-24 11:06:03][352133643659082][274 ms][DEBUG] START check_boot_completed [2025-08-24 11:06:03][352133643659082][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:06:03][352133643659082][320 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 11:06:03][352133643659082][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:06:03][352133643659082][383 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 11:06:03][352133643659082][383 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 11:06:03][352133643659082][383 ms][DEBUG] START check_internet [2025-08-24 11:06:03][352133643659082][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 11:06:03][352133643659082][789 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=296 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 296.279/296.279/296.279/0.000 ms\n [2025-08-24 11:06:03][352133643659082][789 ms][DEBUG] check_internet: online [2025-08-24 11:06:03][352133643659082][789 ms][DEBUG] END check_internet in 406 ms [2025-08-24 11:06:03][352133643659082][789 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:06:03][352133643659082][789 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352133643659082\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4863\"}'\'' -e'"" [2025-08-24 11:06:03][352133643659082][789 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:06:03][352133643659082][789 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352133643659082\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4863\"}'\'' -e'"" [2025-08-24 11:06:07][352133643659082][4772 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_515f839c-6634-44ca-8df4-4f56dc36423f","id":"QR_515f839c-6634-44ca-8df4-4f56dc36423f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:06:07][352133643659082][4928 ms][DEBUG] proc_open done in 4140 ms; code=255; res.len=3343 [2025-08-24 11:06:07][352133643659082][4928 ms][DEBUG] END runCmdUntilRes#1 in 4140 ms [2025-08-24 11:06:07][352133643659082][4928 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:08:03][350683211577563][1 ms][INFO] === Request start === [2025-08-24 11:08:03][350683211577563][1 ms][DEBUG] START check_scloud [2025-08-24 11:08:03][350683211577563][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:08:03][350683211577563][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 11244 26573 24553640 202476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:08:03][350683211577563][292 ms][DEBUG] targetPkg: running [2025-08-24 11:08:03][350683211577563][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-24 11:08:03][350683211577563][292 ms][DEBUG] START check_boot_completed [2025-08-24 11:08:03][350683211577563][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:08:03][350683211577563][339 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 11:08:03][350683211577563][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:08:03][350683211577563][432 ms][DEBUG] SU: done in 93 ms; out [2025-08-24 11:08:03][350683211577563][433 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-24 11:08:03][350683211577563][433 ms][DEBUG] START check_internet [2025-08-24 11:08:03][350683211577563][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 11:08:03][350683211577563][807 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=239 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 239.380/239.380/239.380/0.000 ms\n [2025-08-24 11:08:03][350683211577563][808 ms][DEBUG] check_internet: online [2025-08-24 11:08:03][350683211577563][808 ms][DEBUG] END check_internet in 375 ms [2025-08-24 11:08:03][350683211577563][808 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:08:03][350683211577563][808 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350683211577563\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9918\"}'\'' -e'"" [2025-08-24 11:08:03][350683211577563][808 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:08:03][350683211577563][808 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350683211577563\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9918\"}'\'' -e'"" [2025-08-24 11:08:08][350683211577563][4947 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb4cb311-33c6-4efd-ad6d-37b2cb1827dd","id":"QR_eb4cb311-33c6-4efd-ad6d-37b2cb1827dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:08:08][350683211577563][5103 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-24 11:08:08][350683211577563][5103 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-24 11:08:08][350683211577563][5103 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:08:10][350013883415670][0 ms][INFO] === Request start === [2025-08-24 11:08:10][350013883415670][1 ms][DEBUG] START check_scloud [2025-08-24 11:08:10][350013883415670][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:08:11][350013883415670][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 11244 26573 24724912 214264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:08:11][350013883415670][265 ms][DEBUG] targetPkg: running [2025-08-24 11:08:11][350013883415670][265 ms][DEBUG] END check_scloud in 264 ms [2025-08-24 11:08:11][350013883415670][265 ms][DEBUG] START check_boot_completed [2025-08-24 11:08:11][350013883415670][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:08:11][350013883415670][312 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 11:08:11][350013883415670][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:08:11][350013883415670][358 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 11:08:11][350013883415670][358 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 11:08:11][350013883415670][358 ms][DEBUG] START check_internet [2025-08-24 11:08:11][350013883415670][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 11:08:11][350013883415670][702 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=230 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 230.037/230.037/230.037/0.000 ms\n [2025-08-24 11:08:11][350013883415670][702 ms][DEBUG] check_internet: online [2025-08-24 11:08:11][350013883415670][702 ms][DEBUG] END check_internet in 344 ms [2025-08-24 11:08:11][350013883415670][702 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:08:11][350013883415670][703 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883415670\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8889\"}'\'' -e'"" [2025-08-24 11:08:11][350013883415670][703 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:08:11][350013883415670][703 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883415670\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8889\"}'\'' -e'"" [2025-08-24 11:08:15][350013883415670][4420 ms][DEBUG] proc_open done in 3717 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 11:08:15][350013883415670][4420 ms][DEBUG] END runCmdUntilRes#1 in 3717 ms [2025-08-24 11:08:15][350013883415670][4420 ms][WARN] Detected error: Process with pid 11244 either refused to load frida-agent, or terminated during injection [2025-08-24 11:08:15][350013883415670][4420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 11:08:15][350013883415670][4561 ms][DEBUG] SU: done in 141 ms; out [2025-08-24 11:08:15][350013883415670][4561 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 11:08:15][350013883415670][4561 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 11:08:15][350013883415670][4701 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 11:08:15][350013883415670][4701 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 11:08:15][350013883415670][4873 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 11:08:17][350013883415670][6888 ms][DEBUG] START check_boot_completed [2025-08-24 11:08:17][350013883415670][6888 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:08:17][350013883415670][6935 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 11:08:17][350013883415670][6935 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:08:17][350013883415670][6998 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 11:08:17][350013883415670][6998 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-24 11:08:20][350013883415670][10012 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 11:08:20][350013883415670][10012 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883415670\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8889\"}'\'' -e'"" [2025-08-24 11:08:24][350013883415670][13637 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3039066e-658e-47df-94ad-0e53ac04e631","id":"QR_3039066e-658e-47df-94ad-0e53ac04e631","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:08:24][350013883415670][13793 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-08-24 11:08:24][350013883415670][13793 ms][DEBUG] END runCmdUntilRes#2 in 3781 ms [2025-08-24 11:08:24][350013883415670][13793 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:13:03][354882179372191][1 ms][INFO] === Request start === [2025-08-24 11:13:03][354882179372191][1 ms][DEBUG] START check_scloud [2025-08-24 11:13:03][354882179372191][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:13:03][354882179372191][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 13803 26573 23504456 127808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:13:03][354882179372191][303 ms][DEBUG] targetPkg: running [2025-08-24 11:13:03][354882179372191][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-24 11:13:03][354882179372191][303 ms][DEBUG] START check_boot_completed [2025-08-24 11:13:03][354882179372191][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:13:03][354882179372191][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 11:13:03][354882179372191][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:13:04][354882179372191][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 11:13:04][354882179372191][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 11:13:04][354882179372191][381 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:13:04][354882179372191][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354882179372191\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8086\"}'\'' -e'"" [2025-08-24 11:13:04][354882179372191][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:13:04][354882179372191][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354882179372191\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8086\"}'\'' -e'"" [2025-08-24 11:13:08][354882179372191][4645 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_18e7c85a-8024-4880-aa46-3af1742c68d5","id":"QR_18e7c85a-8024-4880-aa46-3af1742c68d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:13:08][354882179372191][4802 ms][DEBUG] proc_open done in 4421 ms; code=255; res.len=3343 [2025-08-24 11:13:08][354882179372191][4802 ms][DEBUG] END runCmdUntilRes#1 in 4421 ms [2025-08-24 11:13:08][354882179372191][4802 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:14:03][354106247391995][0 ms][INFO] === Request start === [2025-08-24 11:14:03][354106247391995][1 ms][DEBUG] START check_scloud [2025-08-24 11:14:03][354106247391995][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:14:03][354106247391995][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 13803 26573 23656008 138780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:14:03][354106247391995][308 ms][DEBUG] targetPkg: running [2025-08-24 11:14:03][354106247391995][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-24 11:14:03][354106247391995][309 ms][DEBUG] START check_boot_completed [2025-08-24 11:14:03][354106247391995][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:14:03][354106247391995][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 11:14:03][354106247391995][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:14:03][354106247391995][418 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 11:14:03][354106247391995][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 11:14:03][354106247391995][418 ms][DEBUG] START check_internet [2025-08-24 11:14:03][354106247391995][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 11:14:04][354106247391995][902 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.541/202.541/202.541/0.000 ms\n [2025-08-24 11:14:04][354106247391995][902 ms][DEBUG] check_internet: online [2025-08-24 11:14:04][354106247391995][902 ms][DEBUG] END check_internet in 484 ms [2025-08-24 11:14:04][354106247391995][902 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:14:04][354106247391995][902 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106247391995\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1602\"}'\'' -e'"" [2025-08-24 11:14:04][354106247391995][903 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:14:04][354106247391995][903 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106247391995\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1602\"}'\'' -e'"" [2025-08-24 11:14:08][354106247391995][4932 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dfaf09ba-4c9c-4a62-876b-5e2d0c759a38","id":"QR_dfaf09ba-4c9c-4a62-876b-5e2d0c759a38","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:14:08][354106247391995][5088 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-24 11:14:08][354106247391995][5089 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-24 11:14:08][354106247391995][5089 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:14:10][353220824653932][0 ms][INFO] === Request start === [2025-08-24 11:14:10][353220824653932][1 ms][DEBUG] START check_scloud [2025-08-24 11:14:10][353220824653932][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:14:11][353220824653932][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 13803 26573 23812944 150656 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:14:11][353220824653932][284 ms][DEBUG] targetPkg: running [2025-08-24 11:14:11][353220824653932][284 ms][DEBUG] END check_scloud in 283 ms [2025-08-24 11:14:11][353220824653932][284 ms][DEBUG] START check_boot_completed [2025-08-24 11:14:11][353220824653932][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:14:11][353220824653932][331 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 11:14:11][353220824653932][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:14:11][353220824653932][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 11:14:11][353220824653932][377 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 11:14:11][353220824653932][377 ms][DEBUG] START check_internet [2025-08-24 11:14:11][353220824653932][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 11:14:11][353220824653932][706 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.781/223.781/223.781/0.000 ms\n [2025-08-24 11:14:11][353220824653932][706 ms][DEBUG] check_internet: online [2025-08-24 11:14:11][353220824653932][706 ms][DEBUG] END check_internet in 328 ms [2025-08-24 11:14:11][353220824653932][706 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:14:11][353220824653932][706 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353220824653932\",\"model\":\"SM-A235F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4766\"}'\'' -e'"" [2025-08-24 11:14:11][353220824653932][706 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:14:11][353220824653932][706 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353220824653932\",\"model\":\"SM-A235F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4766\"}'\'' -e'"" [2025-08-24 11:14:15][353220824653932][4767 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8a9da8b-d4c0-4d6c-b9d9-7c3da5dd3873","id":"QR_e8a9da8b-d4c0-4d6c-b9d9-7c3da5dd3873","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:14:15][353220824653932][4923 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-24 11:14:15][353220824653932][4923 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-24 11:14:15][353220824653932][4923 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:15:03][357147893088276][0 ms][INFO] === Request start === [2025-08-24 11:15:03][357147893088276][1 ms][DEBUG] START check_scloud [2025-08-24 11:15:03][357147893088276][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:15:04][357147893088276][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 13803 26573 23926480 161832 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:15:04][357147893088276][296 ms][DEBUG] targetPkg: running [2025-08-24 11:15:04][357147893088276][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-24 11:15:04][357147893088276][296 ms][DEBUG] START check_boot_completed [2025-08-24 11:15:04][357147893088276][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:15:04][357147893088276][342 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 11:15:04][357147893088276][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:15:04][357147893088276][405 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 11:15:04][357147893088276][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 11:15:04][357147893088276][405 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:15:04][357147893088276][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357147893088276\",\"model\":\"SM-M336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9197\"}'\'' -e'"" [2025-08-24 11:15:04][357147893088276][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:15:04][357147893088276][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357147893088276\",\"model\":\"SM-M336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9197\"}'\'' -e'"" [2025-08-24 11:15:08][357147893088276][4466 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_87aa0728-3c72-482a-8f48-d4357eadf61a","id":"QR_87aa0728-3c72-482a-8f48-d4357eadf61a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:15:08][357147893088276][4623 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-24 11:15:08][357147893088276][4623 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-24 11:15:08][357147893088276][4623 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:19:03][354595807430666][1 ms][INFO] === Request start === [2025-08-24 11:19:03][354595807430666][1 ms][DEBUG] START check_scloud [2025-08-24 11:19:03][354595807430666][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:19:03][354595807430666][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 13803 26573 24079028 172608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:19:03][354595807430666][295 ms][DEBUG] targetPkg: running [2025-08-24 11:19:03][354595807430666][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-24 11:19:03][354595807430666][295 ms][DEBUG] START check_boot_completed [2025-08-24 11:19:03][354595807430666][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:19:03][354595807430666][327 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 11:19:03][354595807430666][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:19:04][354595807430666][374 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 11:19:04][354595807430666][374 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 11:19:04][354595807430666][374 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:19:04][354595807430666][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354595807430666\",\"model\":\"SM-M336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8246\"}'\'' -e'"" [2025-08-24 11:19:04][354595807430666][374 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:19:04][354595807430666][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354595807430666\",\"model\":\"SM-M336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8246\"}'\'' -e'"" [2025-08-24 11:19:08][354595807430666][4544 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b6eb01b1-98f0-486e-bd9f-2cfc87de28d5","id":"QR_b6eb01b1-98f0-486e-bd9f-2cfc87de28d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:19:08][354595807430666][4701 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=3343 [2025-08-24 11:19:08][354595807430666][4701 ms][DEBUG] END runCmdUntilRes#1 in 4326 ms [2025-08-24 11:19:08][354595807430666][4701 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:21:03][351877471771861][0 ms][INFO] === Request start === [2025-08-24 11:21:03][351877471771861][1 ms][DEBUG] START check_scloud [2025-08-24 11:21:03][351877471771861][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:21:03][351877471771861][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 13803 26573 24211352 184780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:21:03][351877471771861][254 ms][DEBUG] targetPkg: running [2025-08-24 11:21:03][351877471771861][254 ms][DEBUG] END check_scloud in 254 ms [2025-08-24 11:21:03][351877471771861][255 ms][DEBUG] START check_boot_completed [2025-08-24 11:21:03][351877471771861][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:21:03][351877471771861][285 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 11:21:03][351877471771861][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:21:03][351877471771861][332 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 11:21:03][351877471771861][332 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 11:21:03][351877471771861][332 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:21:03][351877471771861][332 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877471771861\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3402\"}'\'' -e'"" [2025-08-24 11:21:03][351877471771861][332 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:21:03][351877471771861][332 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877471771861\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3402\"}'\'' -e'"" [2025-08-24 11:21:08][351877471771861][4378 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_db86b2db-cba8-4c52-ad5e-b64f8b2148ed","id":"QR_db86b2db-cba8-4c52-ad5e-b64f8b2148ed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:21:08][351877471771861][4534 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-24 11:21:08][351877471771861][4534 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-24 11:21:08][351877471771861][4535 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:22:03][352677532367306][1 ms][INFO] === Request start === [2025-08-24 11:22:03][352677532367306][1 ms][DEBUG] START check_scloud [2025-08-24 11:22:03][352677532367306][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:22:03][352677532367306][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 13803 26573 24359932 196000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:22:03][352677532367306][305 ms][DEBUG] targetPkg: running [2025-08-24 11:22:03][352677532367306][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-24 11:22:03][352677532367306][305 ms][DEBUG] START check_boot_completed [2025-08-24 11:22:03][352677532367306][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:22:03][352677532367306][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 11:22:03][352677532367306][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:22:03][352677532367306][414 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 11:22:03][352677532367306][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 11:22:03][352677532367306][414 ms][DEBUG] START check_internet [2025-08-24 11:22:03][352677532367306][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 11:22:04][352677532367306][883 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.298/200.298/200.298/0.000 ms\n [2025-08-24 11:22:04][352677532367306][883 ms][DEBUG] check_internet: online [2025-08-24 11:22:04][352677532367306][883 ms][DEBUG] END check_internet in 469 ms [2025-08-24 11:22:04][352677532367306][883 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:22:04][352677532367306][883 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532367306\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5269\"}'\'' -e'"" [2025-08-24 11:22:04][352677532367306][883 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:22:04][352677532367306][883 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532367306\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5269\"}'\'' -e'"" [2025-08-24 11:22:08][352677532367306][4803 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_433b863a-87bc-4b51-8b67-f1582b2e43cb","id":"QR_433b863a-87bc-4b51-8b67-f1582b2e43cb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:22:08][352677532367306][4960 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=3343 [2025-08-24 11:22:08][352677532367306][4960 ms][DEBUG] END runCmdUntilRes#1 in 4076 ms [2025-08-24 11:22:08][352677532367306][4960 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:22:11][356467780826757][0 ms][INFO] === Request start === [2025-08-24 11:22:11][356467780826757][1 ms][DEBUG] START check_scloud [2025-08-24 11:22:11][356467780826757][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:22:11][356467780826757][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 13803 26573 24504580 207668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:22:11][356467780826757][303 ms][DEBUG] targetPkg: running [2025-08-24 11:22:11][356467780826757][303 ms][DEBUG] END check_scloud in 303 ms [2025-08-24 11:22:11][356467780826757][303 ms][DEBUG] START check_boot_completed [2025-08-24 11:22:11][356467780826757][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:22:11][356467780826757][350 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 11:22:11][356467780826757][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:22:11][356467780826757][412 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 11:22:11][356467780826757][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 11:22:11][356467780826757][413 ms][DEBUG] START check_internet [2025-08-24 11:22:11][356467780826757][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 11:22:11][356467780826757][788 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=234 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 234.436/234.436/234.436/0.000 ms\n [2025-08-24 11:22:11][356467780826757][788 ms][DEBUG] check_internet: online [2025-08-24 11:22:11][356467780826757][788 ms][DEBUG] END check_internet in 376 ms [2025-08-24 11:22:11][356467780826757][788 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:22:11][356467780826757][788 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356467780826757\",\"model\":\"SM-X616B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3445\"}'\'' -e'"" [2025-08-24 11:22:11][356467780826757][788 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:22:11][356467780826757][789 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356467780826757\",\"model\":\"SM-X616B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3445\"}'\'' -e'"" [2025-08-24 11:22:15][356467780826757][4927 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_281dd85d-2214-4711-88cf-160300eb6730","id":"QR_281dd85d-2214-4711-88cf-160300eb6730","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:22:16][356467780826757][5083 ms][DEBUG] proc_open done in 4294 ms; code=255; res.len=3343 [2025-08-24 11:22:16][356467780826757][5083 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-24 11:22:16][356467780826757][5083 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:23:02][359257103296714][0 ms][INFO] === Request start === [2025-08-24 11:23:02][359257103296714][1 ms][DEBUG] START check_scloud [2025-08-24 11:23:02][359257103296714][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:23:03][359257103296714][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 13803 26573 24640964 218808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:23:03][359257103296714][272 ms][DEBUG] targetPkg: running [2025-08-24 11:23:03][359257103296714][272 ms][DEBUG] END check_scloud in 271 ms [2025-08-24 11:23:03][359257103296714][272 ms][DEBUG] START check_boot_completed [2025-08-24 11:23:03][359257103296714][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:23:03][359257103296714][319 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 11:23:03][359257103296714][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:23:03][359257103296714][365 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 11:23:03][359257103296714][365 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 11:23:03][359257103296714][365 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:23:03][359257103296714][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359257103296714\",\"model\":\"SM-N975F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1524\"}'\'' -e'"" [2025-08-24 11:23:03][359257103296714][366 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:23:03][359257103296714][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359257103296714\",\"model\":\"SM-N975F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1524\"}'\'' -e'"" [2025-08-24 11:23:07][359257103296714][4552 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7bf6b98a-1aa3-4fcf-8459-01d4922734b2","id":"QR_7bf6b98a-1aa3-4fcf-8459-01d4922734b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:23:07][359257103296714][4708 ms][DEBUG] proc_open done in 4343 ms; code=255; res.len=3343 [2025-08-24 11:23:07][359257103296714][4708 ms][DEBUG] END runCmdUntilRes#1 in 4343 ms [2025-08-24 11:23:07][359257103296714][4708 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:28:03][351199554230248][1 ms][INFO] === Request start === [2025-08-24 11:28:03][351199554230248][1 ms][DEBUG] START check_scloud [2025-08-24 11:28:03][351199554230248][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:28:03][351199554230248][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 13803 26573 24775336 231284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:28:03][351199554230248][314 ms][DEBUG] targetPkg: running [2025-08-24 11:28:03][351199554230248][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-24 11:28:03][351199554230248][314 ms][DEBUG] START check_boot_completed [2025-08-24 11:28:03][351199554230248][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:28:03][351199554230248][345 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 11:28:03][351199554230248][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:28:03][351199554230248][393 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 11:28:03][351199554230248][393 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 11:28:03][351199554230248][393 ms][DEBUG] START check_internet [2025-08-24 11:28:03][351199554230248][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 11:28:04][351199554230248][955 ms][DEBUG] SU: done in 561 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.432/201.432/201.432/0.000 ms\n [2025-08-24 11:28:04][351199554230248][955 ms][DEBUG] check_internet: online [2025-08-24 11:28:04][351199554230248][955 ms][DEBUG] END check_internet in 562 ms [2025-08-24 11:28:04][351199554230248][955 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:28:04][351199554230248][955 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199554230248\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2848\"}'\'' -e'"" [2025-08-24 11:28:04][351199554230248][955 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:28:04][351199554230248][955 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199554230248\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2848\"}'\'' -e'"" [2025-08-24 11:28:08][351199554230248][5360 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8d29a0f9-e4b9-48e0-9084-eac18a3766a7","id":"QR_8d29a0f9-e4b9-48e0-9084-eac18a3766a7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:28:08][351199554230248][5516 ms][DEBUG] proc_open done in 4561 ms; code=255; res.len=3343 [2025-08-24 11:28:08][351199554230248][5516 ms][DEBUG] END runCmdUntilRes#1 in 4561 ms [2025-08-24 11:28:08][351199554230248][5516 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:28:11][353243888280046][0 ms][INFO] === Request start === [2025-08-24 11:28:11][353243888280046][1 ms][DEBUG] START check_scloud [2025-08-24 11:28:11][353243888280046][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:28:11][353243888280046][268 ms][DEBUG] SU: done in 268 ms; outu0_a118 13803 26573 24919988 239008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:28:11][353243888280046][268 ms][DEBUG] targetPkg: running [2025-08-24 11:28:11][353243888280046][268 ms][DEBUG] END check_scloud in 268 ms [2025-08-24 11:28:11][353243888280046][269 ms][DEBUG] START check_boot_completed [2025-08-24 11:28:11][353243888280046][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:28:11][353243888280046][315 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 11:28:11][353243888280046][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:28:11][353243888280046][378 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 11:28:11][353243888280046][378 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 11:28:11][353243888280046][378 ms][DEBUG] START check_internet [2025-08-24 11:28:11][353243888280046][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 11:28:11][353243888280046][674 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=179 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 179.711/179.711/179.711/0.000 ms\n [2025-08-24 11:28:11][353243888280046][675 ms][DEBUG] check_internet: online [2025-08-24 11:28:11][353243888280046][675 ms][DEBUG] END check_internet in 297 ms [2025-08-24 11:28:11][353243888280046][675 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:28:11][353243888280046][675 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243888280046\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7925\"}'\'' -e'"" [2025-08-24 11:28:11][353243888280046][675 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:28:11][353243888280046][675 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243888280046\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7925\"}'\'' -e'"" [2025-08-24 11:28:15][353243888280046][4377 ms][DEBUG] proc_open done in 3701 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 11:28:15][353243888280046][4377 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-24 11:28:15][353243888280046][4377 ms][WARN] Detected error: Process with pid 13803 either refused to load frida-agent, or terminated during injection [2025-08-24 11:28:15][353243888280046][4377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 11:28:15][353243888280046][4533 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 11:28:15][353243888280046][4533 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 11:28:15][353243888280046][4533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 11:28:15][353243888280046][4658 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 11:28:15][353243888280046][4658 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 11:28:15][353243888280046][4798 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 11:28:17][353243888280046][6813 ms][DEBUG] START check_boot_completed [2025-08-24 11:28:17][353243888280046][6814 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:28:17][353243888280046][6861 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 11:28:17][353243888280046][6861 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:28:18][353243888280046][6923 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 11:28:18][353243888280046][6924 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-24 11:28:21][353243888280046][9938 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 11:28:21][353243888280046][9938 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243888280046\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7925\"}'\'' -e'"" [2025-08-24 11:28:24][353243888280046][13546 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b3ac9234-cc0a-4934-bbfc-4839422d6003","id":"QR_b3ac9234-cc0a-4934-bbfc-4839422d6003","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:28:24][353243888280046][13702 ms][DEBUG] proc_open done in 3765 ms; code=255; res.len=3343 [2025-08-24 11:28:24][353243888280046][13703 ms][DEBUG] END runCmdUntilRes#2 in 3765 ms [2025-08-24 11:28:24][353243888280046][13703 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:32:03][352060484122062][1 ms][INFO] === Request start === [2025-08-24 11:32:03][352060484122062][1 ms][DEBUG] START check_scloud [2025-08-24 11:32:03][352060484122062][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:32:03][352060484122062][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 15536 26573 23501600 128560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:32:03][352060484122062][297 ms][DEBUG] targetPkg: running [2025-08-24 11:32:03][352060484122062][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-24 11:32:03][352060484122062][297 ms][DEBUG] START check_boot_completed [2025-08-24 11:32:03][352060484122062][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:32:03][352060484122062][343 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 11:32:03][352060484122062][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:32:03][352060484122062][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 11:32:03][352060484122062][390 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 11:32:03][352060484122062][390 ms][DEBUG] START check_internet [2025-08-24 11:32:03][352060484122062][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 11:32:04][352060484122062][735 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=238 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 238.215/238.215/238.215/0.000 ms\n [2025-08-24 11:32:04][352060484122062][735 ms][DEBUG] check_internet: online [2025-08-24 11:32:04][352060484122062][735 ms][DEBUG] END check_internet in 344 ms [2025-08-24 11:32:04][352060484122062][735 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:32:04][352060484122062][735 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060484122062\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8956\"}'\'' -e'"" [2025-08-24 11:32:04][352060484122062][735 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:32:04][352060484122062][735 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060484122062\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8956\"}'\'' -e'"" [2025-08-24 11:32:08][352060484122062][4780 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_97f43d17-5735-42de-ba56-15e34b0a439c","id":"QR_97f43d17-5735-42de-ba56-15e34b0a439c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:32:08][352060484122062][4936 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-08-24 11:32:08][352060484122062][4936 ms][DEBUG] END runCmdUntilRes#1 in 4201 ms [2025-08-24 11:32:08][352060484122062][4936 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:35:03][352737402176987][1 ms][INFO] === Request start === [2025-08-24 11:35:03][352737402176987][1 ms][DEBUG] START check_scloud [2025-08-24 11:35:03][352737402176987][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:35:03][352737402176987][297 ms][DEBUG] SU: done in 295 ms; outu0_a118 15536 26573 23611396 140152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:35:03][352737402176987][297 ms][DEBUG] targetPkg: running [2025-08-24 11:35:03][352737402176987][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-24 11:35:03][352737402176987][297 ms][DEBUG] START check_boot_completed [2025-08-24 11:35:03][352737402176987][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:35:03][352737402176987][328 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 11:35:03][352737402176987][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:35:03][352737402176987][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 11:35:03][352737402176987][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 11:35:03][352737402176987][375 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:35:03][352737402176987][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352737402176987\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2009\"}'\'' -e'"" [2025-08-24 11:35:03][352737402176987][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:35:03][352737402176987][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352737402176987\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2009\"}'\'' -e'"" [2025-08-24 11:35:07][352737402176987][4405 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cdc2d8ae-5ac4-4770-a994-71e9827df971","id":"QR_cdc2d8ae-5ac4-4770-a994-71e9827df971","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:35:07][352737402176987][4561 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-24 11:35:07][352737402176987][4561 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-24 11:35:07][352737402176987][4561 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:35:10][354360418439873][1 ms][INFO] === Request start === [2025-08-24 11:35:10][354360418439873][1 ms][DEBUG] START check_scloud [2025-08-24 11:35:10][354360418439873][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:35:10][354360418439873][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 15536 26573 23741580 151764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:35:10][354360418439873][279 ms][DEBUG] targetPkg: running [2025-08-24 11:35:10][354360418439873][279 ms][DEBUG] END check_scloud in 278 ms [2025-08-24 11:35:10][354360418439873][279 ms][DEBUG] START check_boot_completed [2025-08-24 11:35:10][354360418439873][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:35:10][354360418439873][326 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 11:35:10][354360418439873][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:35:10][354360418439873][388 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 11:35:10][354360418439873][388 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 11:35:10][354360418439873][389 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:35:10][354360418439873][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360418439873\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4611\"}'\'' -e'"" [2025-08-24 11:35:10][354360418439873][389 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:35:10][354360418439873][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360418439873\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4611\"}'\'' -e'"" [2025-08-24 11:35:14][354360418439873][4309 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_88fe0429-468f-4937-9adc-e1dc010330eb","id":"QR_88fe0429-468f-4937-9adc-e1dc010330eb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:35:14][354360418439873][4465 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-24 11:35:14][354360418439873][4465 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-24 11:35:14][354360418439873][4465 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:38:03][351978521114068][1 ms][INFO] === Request start === [2025-08-24 11:38:03][351978521114068][1 ms][DEBUG] START check_scloud [2025-08-24 11:38:03][351978521114068][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:38:03][351978521114068][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 15536 26573 23859472 162764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:38:03][351978521114068][292 ms][DEBUG] targetPkg: running [2025-08-24 11:38:03][351978521114068][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-24 11:38:03][351978521114068][292 ms][DEBUG] START check_boot_completed [2025-08-24 11:38:03][351978521114068][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:38:03][351978521114068][339 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 11:38:03][351978521114068][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:38:03][351978521114068][386 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 11:38:03][351978521114068][386 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 11:38:03][351978521114068][386 ms][DEBUG] START check_internet [2025-08-24 11:38:03][351978521114068][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 11:38:04][351978521114068][854 ms][DEBUG] SU: done in 467 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.168/201.168/201.168/0.000 ms\n [2025-08-24 11:38:04][351978521114068][854 ms][DEBUG] check_internet: online [2025-08-24 11:38:04][351978521114068][854 ms][DEBUG] END check_internet in 468 ms [2025-08-24 11:38:04][351978521114068][854 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:38:04][351978521114068][854 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978521114068\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4362\"}'\'' -e'"" [2025-08-24 11:38:04][351978521114068][854 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:38:04][351978521114068][855 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978521114068\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4362\"}'\'' -e'"" [2025-08-24 11:38:08][351978521114068][4994 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9b2f6c99-de74-496b-9099-a6767819aa1c","id":"QR_9b2f6c99-de74-496b-9099-a6767819aa1c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:38:08][351978521114068][5150 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-24 11:38:08][351978521114068][5150 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-24 11:38:08][351978521114068][5150 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:39:03][354068195221071][0 ms][INFO] === Request start === [2025-08-24 11:39:03][354068195221071][1 ms][DEBUG] START check_scloud [2025-08-24 11:39:03][354068195221071][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:39:04][354068195221071][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 15536 26573 24022516 173600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:39:04][354068195221071][305 ms][DEBUG] targetPkg: running [2025-08-24 11:39:04][354068195221071][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-24 11:39:04][354068195221071][305 ms][DEBUG] START check_boot_completed [2025-08-24 11:39:04][354068195221071][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:39:04][354068195221071][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 11:39:04][354068195221071][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:39:04][354068195221071][414 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 11:39:04][354068195221071][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 11:39:04][354068195221071][414 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:39:04][354068195221071][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195221071\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1009\"}'\'' -e'"" [2025-08-24 11:39:04][354068195221071][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:39:04][354068195221071][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195221071\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1009\"}'\'' -e'"" [2025-08-24 11:39:08][354068195221071][4475 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0f53035b-a8a7-4c49-a71b-ed7261c3698b","id":"QR_0f53035b-a8a7-4c49-a71b-ed7261c3698b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:39:08][354068195221071][4631 ms][DEBUG] proc_open done in 4218 ms; code=255; res.len=3343 [2025-08-24 11:39:08][354068195221071][4631 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-08-24 11:39:08][354068195221071][4631 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:40:04][357651719175886][1 ms][INFO] === Request start === [2025-08-24 11:40:04][357651719175886][1 ms][DEBUG] START check_scloud [2025-08-24 11:40:04][357651719175886][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:40:05][357651719175886][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 15536 26573 24144600 185568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:40:05][357651719175886][305 ms][DEBUG] targetPkg: running [2025-08-24 11:40:05][357651719175886][305 ms][DEBUG] END check_scloud in 303 ms [2025-08-24 11:40:05][357651719175886][305 ms][DEBUG] START check_boot_completed [2025-08-24 11:40:05][357651719175886][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:40:05][357651719175886][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 11:40:05][357651719175886][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:40:05][357651719175886][399 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 11:40:05][357651719175886][399 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 11:40:05][357651719175886][399 ms][DEBUG] START check_internet [2025-08-24 11:40:05][357651719175886][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 11:40:05][357651719175886][820 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.217/200.217/200.217/0.000 ms\n [2025-08-24 11:40:05][357651719175886][820 ms][DEBUG] check_internet: online [2025-08-24 11:40:05][357651719175886][820 ms][DEBUG] END check_internet in 421 ms [2025-08-24 11:40:05][357651719175886][820 ms][DEBUG] rawBody.length=1149 [2025-08-24 11:40:05][357651719175886][820 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651719175886\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3296\"}'\'' -e'"" [2025-08-24 11:40:05][357651719175886][820 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:40:05][357651719175886][820 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651719175886\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3296\"}'\'' -e'"" [2025-08-24 11:40:11][357651719175886][6365 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7f9fba61-45be-4b40-82e3-a6b4bc7c4bda","id":"QR_7f9fba61-45be-4b40-82e3-a6b4bc7c4bda","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:40:11][357651719175886][6522 ms][DEBUG] proc_open done in 5701 ms; code=255; res.len=3343 [2025-08-24 11:40:11][357651719175886][6522 ms][DEBUG] END runCmdUntilRes#1 in 5701 ms [2025-08-24 11:40:11][357651719175886][6522 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:40:16][353628422664624][0 ms][INFO] === Request start === [2025-08-24 11:40:16][353628422664624][1 ms][DEBUG] START check_scloud [2025-08-24 11:40:16][353628422664624][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:40:16][353628422664624][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 15536 26573 24319968 196760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:40:16][353628422664624][266 ms][DEBUG] targetPkg: running [2025-08-24 11:40:16][353628422664624][266 ms][DEBUG] END check_scloud in 265 ms [2025-08-24 11:40:16][353628422664624][266 ms][DEBUG] START check_boot_completed [2025-08-24 11:40:16][353628422664624][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:40:17][353628422664624][312 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 11:40:17][353628422664624][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:40:17][353628422664624][359 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 11:40:17][353628422664624][359 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 11:40:17][353628422664624][359 ms][DEBUG] START check_internet [2025-08-24 11:40:17][353628422664624][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 11:40:17][353628422664624][687 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=217 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 217.375/217.375/217.375/0.000 ms\n [2025-08-24 11:40:17][353628422664624][687 ms][DEBUG] check_internet: online [2025-08-24 11:40:17][353628422664624][687 ms][DEBUG] END check_internet in 328 ms [2025-08-24 11:40:17][353628422664624][687 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:40:17][353628422664624][687 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628422664624\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4777\"}'\'' -e'"" [2025-08-24 11:40:17][353628422664624][687 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:40:17][353628422664624][687 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628422664624\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4777\"}'\'' -e'"" [2025-08-24 11:40:21][353628422664624][4749 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c0d82d3d-5ba9-4eb2-ab7d-be3d3bded5c6","id":"QR_c0d82d3d-5ba9-4eb2-ab7d-be3d3bded5c6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:40:21][353628422664624][4905 ms][DEBUG] proc_open done in 4218 ms; code=255; res.len=3343 [2025-08-24 11:40:21][353628422664624][4905 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-08-24 11:40:21][353628422664624][4905 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:40:25][352686599135761][1 ms][INFO] === Request start === [2025-08-24 11:40:25][352686599135761][1 ms][DEBUG] START check_scloud [2025-08-24 11:40:25][352686599135761][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:40:26][352686599135761][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 15536 26573 24501480 208660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:40:26][352686599135761][295 ms][DEBUG] targetPkg: running [2025-08-24 11:40:26][352686599135761][295 ms][DEBUG] END check_scloud in 293 ms [2025-08-24 11:40:26][352686599135761][295 ms][DEBUG] START check_boot_completed [2025-08-24 11:40:26][352686599135761][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:40:26][352686599135761][341 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 11:40:26][352686599135761][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:40:26][352686599135761][389 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 11:40:26][352686599135761][390 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 11:40:26][352686599135761][390 ms][DEBUG] START check_internet [2025-08-24 11:40:26][352686599135761][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 11:40:26][352686599135761][669 ms][DEBUG] SU: done in 280 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=149 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 149.588/149.588/149.588/0.000 ms\n [2025-08-24 11:40:26][352686599135761][669 ms][DEBUG] check_internet: online [2025-08-24 11:40:26][352686599135761][669 ms][DEBUG] END check_internet in 280 ms [2025-08-24 11:40:26][352686599135761][670 ms][DEBUG] rawBody.length=1149 [2025-08-24 11:40:26][352686599135761][670 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352686599135761\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5754\"}'\'' -e'"" [2025-08-24 11:40:26][352686599135761][670 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:40:26][352686599135761][670 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352686599135761\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5754\"}'\'' -e'"" [2025-08-24 11:40:33][352686599135761][7433 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8a2c2e19-f66d-4225-a80c-7cfc0e144d31","id":"QR_8a2c2e19-f66d-4225-a80c-7cfc0e144d31","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:40:33][352686599135761][7589 ms][DEBUG] proc_open done in 6919 ms; code=255; res.len=3343 [2025-08-24 11:40:33][352686599135761][7590 ms][DEBUG] END runCmdUntilRes#1 in 6920 ms [2025-08-24 11:40:33][352686599135761][7590 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:41:02][353684143901902][1 ms][INFO] === Request start === [2025-08-24 11:41:02][353684143901902][1 ms][DEBUG] START check_scloud [2025-08-24 11:41:02][353684143901902][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:41:03][353684143901902][281 ms][DEBUG] SU: done in 279 ms; outu0_a118 15536 26573 24586436 219472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:41:03][353684143901902][281 ms][DEBUG] targetPkg: running [2025-08-24 11:41:03][353684143901902][281 ms][DEBUG] END check_scloud in 280 ms [2025-08-24 11:41:03][353684143901902][281 ms][DEBUG] START check_boot_completed [2025-08-24 11:41:03][353684143901902][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:41:03][353684143901902][327 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 11:41:03][353684143901902][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:41:03][353684143901902][390 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 11:41:03][353684143901902][390 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 11:41:03][353684143901902][390 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:41:03][353684143901902][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684143901902\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9580\"}'\'' -e'"" [2025-08-24 11:41:03][353684143901902][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:41:03][353684143901902][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684143901902\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9580\"}'\'' -e'"" [2025-08-24 11:41:07][353684143901902][4280 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2b063401-2639-4fee-a8b0-e4e61aa61e73","id":"QR_2b063401-2639-4fee-a8b0-e4e61aa61e73","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:41:07][353684143901902][4436 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-08-24 11:41:07][353684143901902][4436 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-08-24 11:41:07][353684143901902][4436 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:43:03][355382707019801][1 ms][INFO] === Request start === [2025-08-24 11:43:03][355382707019801][1 ms][DEBUG] START check_scloud [2025-08-24 11:43:03][355382707019801][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:43:04][355382707019801][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 15536 26573 24752608 231688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:43:04][355382707019801][305 ms][DEBUG] targetPkg: running [2025-08-24 11:43:04][355382707019801][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-24 11:43:04][355382707019801][305 ms][DEBUG] START check_boot_completed [2025-08-24 11:43:04][355382707019801][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:43:04][355382707019801][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 11:43:04][355382707019801][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:43:04][355382707019801][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 11:43:04][355382707019801][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 11:43:04][355382707019801][384 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:43:04][355382707019801][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382707019801\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1345\"}'\'' -e'"" [2025-08-24 11:43:04][355382707019801][384 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:43:04][355382707019801][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382707019801\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1345\"}'\'' -e'"" [2025-08-24 11:43:08][355382707019801][4523 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c66b4294-dcf7-41f2-bb24-5f069ffe50e4","id":"QR_c66b4294-dcf7-41f2-bb24-5f069ffe50e4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:43:08][355382707019801][4679 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-24 11:43:08][355382707019801][4679 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-24 11:43:08][355382707019801][4679 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:43:10][351477972845080][0 ms][INFO] === Request start === [2025-08-24 11:43:10][351477972845080][1 ms][DEBUG] START check_scloud [2025-08-24 11:43:10][351477972845080][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:43:11][351477972845080][301 ms][DEBUG] SU: done in 301 ms; outu0_a118 15536 26573 24876648 242528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:43:11][351477972845080][301 ms][DEBUG] targetPkg: running [2025-08-24 11:43:11][351477972845080][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-24 11:43:11][351477972845080][302 ms][DEBUG] START check_boot_completed [2025-08-24 11:43:11][351477972845080][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:43:11][351477972845080][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 11:43:11][351477972845080][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:43:11][351477972845080][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 11:43:11][351477972845080][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 11:43:11][351477972845080][411 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:43:11][351477972845080][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972845080\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6199\"}'\'' -e'"" [2025-08-24 11:43:11][351477972845080][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:43:11][351477972845080][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972845080\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6199\"}'\'' -e'"" [2025-08-24 11:43:19][351477972845080][8237 ms][DEBUG] proc_open done in 7826 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 11:43:19][351477972845080][8237 ms][DEBUG] END runCmdUntilRes#1 in 7826 ms [2025-08-24 11:43:19][351477972845080][8237 ms][WARN] Detected error: Process with pid 15536 either refused to load frida-agent, or terminated during injection [2025-08-24 11:43:19][351477972845080][8237 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 11:43:19][351477972845080][8471 ms][DEBUG] SU: done in 234 ms; out [2025-08-24 11:43:19][351477972845080][8471 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 11:43:19][351477972845080][8471 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 11:43:19][351477972845080][8784 ms][DEBUG] SU: done in 312 ms; out [2025-08-24 11:43:19][351477972845080][8784 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 11:43:20][351477972845080][9283 ms][DEBUG] SU: done in 500 ms; out [2025-08-24 11:43:22][351477972845080][11299 ms][DEBUG] START check_boot_completed [2025-08-24 11:43:22][351477972845080][11299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:43:22][351477972845080][11346 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 11:43:22][351477972845080][11346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:43:22][351477972845080][11408 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 11:43:22][351477972845080][11408 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-24 11:43:25][351477972845080][14423 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 11:43:25][351477972845080][14423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972845080\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6199\"}'\'' -e'"" [2025-08-24 11:43:26][351477972845080][15860 ms][DEBUG] proc_open done in 1437 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-24 11:43:26][351477972845080][15860 ms][DEBUG] END runCmdUntilRes#2 in 1438 ms [2025-08-24 11:43:26][351477972845080][15861 ms][WARN] Detected error 2; Reboot the device [2025-08-24 11:43:26][351477972845080][15861 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-24 11:43:27][351477972845080][16500 ms][DEBUG] SU: done in 640 ms; out [2025-08-24 11:44:03][351477972845080][1 ms][INFO] === Request start === [2025-08-24 11:44:03][351477972845080][1 ms][DEBUG] START check_scloud [2025-08-24 11:44:03][351477972845080][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:44:03][351477972845080][35 ms][DEBUG] SU: done in 33 ms; out [2025-08-24 11:44:03][351477972845080][35 ms][WARN] targetPkg: not running, restarting [2025-08-24 11:44:03][351477972845080][35 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 11:44:03][351477972845080][66 ms][DEBUG] SU: done in 31 ms; out [2025-08-24 11:44:03][351477972845080][66 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 11:44:03][351477972845080][97 ms][DEBUG] SU: done in 31 ms; out [2025-08-24 11:44:05][351477972845080][2112 ms][DEBUG] END check_scloud in 2111 ms [2025-08-24 11:44:05][351477972845080][2112 ms][DEBUG] START check_boot_completed [2025-08-24 11:44:05][351477972845080][2112 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:44:27][351477972845080][24495 ms][DEBUG] ADB: done in 22383 ms; out [2025-08-24 11:44:27][351477972845080][24495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:44:27][351477972845080][24573 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 11:44:27][351477972845080][24573 ms][DEBUG] END check_boot_completed in 22461 ms [2025-08-24 11:44:27][351477972845080][24573 ms][DEBUG] START check_internet [2025-08-24 11:44:27][351477972845080][24573 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 11:44:28][351477972845080][24683 ms][DEBUG] SU: done in 109 ms; out [2025-08-24 11:44:28][351477972845080][24683 ms][WARN] check_internet: offline [2025-08-24 11:44:28][351477972845080][24683 ms][DEBUG] END check_internet in 110 ms [2025-08-24 11:45:03][351477972845080][0 ms][INFO] === Request start === [2025-08-24 11:45:03][351477972845080][1 ms][DEBUG] START check_scloud [2025-08-24 11:45:03][351477972845080][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:45:03][351477972845080][525 ms][DEBUG] SU: done in 524 ms; out [2025-08-24 11:45:03][351477972845080][525 ms][WARN] targetPkg: not running, restarting [2025-08-24 11:45:03][351477972845080][525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 11:45:03][351477972845080][681 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 11:45:03][351477972845080][681 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 11:45:04][351477972845080][946 ms][DEBUG] SU: done in 265 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 11:45:06][351477972845080][2961 ms][DEBUG] END check_scloud in 2961 ms [2025-08-24 11:45:06][351477972845080][2962 ms][DEBUG] START check_boot_completed [2025-08-24 11:45:06][351477972845080][2962 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:45:06][351477972845080][3008 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 11:45:06][351477972845080][3009 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:45:06][351477972845080][3087 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 11:45:06][351477972845080][3087 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-24 11:45:06][351477972845080][3087 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:45:06][351477972845080][3087 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972845080\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4796\"}'\'' -e'"" [2025-08-24 11:45:06][351477972845080][3087 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:45:06][351477972845080][3087 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972845080\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4796\"}'\'' -e'"" [2025-08-24 11:45:12][351477972845080][8976 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8977c188-f85b-4c8e-8fdf-903cc0220ff9","id":"QR_8977c188-f85b-4c8e-8fdf-903cc0220ff9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:45:12][351477972845080][9132 ms][DEBUG] proc_open done in 6045 ms; code=255; res.len=3343 [2025-08-24 11:45:12][351477972845080][9132 ms][DEBUG] END runCmdUntilRes#1 in 6045 ms [2025-08-24 11:45:12][351477972845080][9132 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:46:03][357435840568858][0 ms][INFO] === Request start === [2025-08-24 11:46:03][357435840568858][1 ms][DEBUG] START check_scloud [2025-08-24 11:46:03][357435840568858][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:46:03][357435840568858][388 ms][DEBUG] SU: done in 387 ms; outu0_a118 11144 4973 23642640 69780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:46:03][357435840568858][388 ms][DEBUG] targetPkg: running [2025-08-24 11:46:03][357435840568858][388 ms][DEBUG] END check_scloud in 388 ms [2025-08-24 11:46:03][357435840568858][388 ms][DEBUG] START check_boot_completed [2025-08-24 11:46:03][357435840568858][388 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:46:03][357435840568858][435 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 11:46:03][357435840568858][435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:46:03][357435840568858][483 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 11:46:03][357435840568858][483 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 11:46:03][357435840568858][483 ms][DEBUG] START check_internet [2025-08-24 11:46:03][357435840568858][483 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 11:46:04][357435840568858][1060 ms][DEBUG] SU: done in 577 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.628/200.628/200.628/0.000 ms\n [2025-08-24 11:46:04][357435840568858][1060 ms][DEBUG] check_internet: online [2025-08-24 11:46:04][357435840568858][1060 ms][DEBUG] END check_internet in 577 ms [2025-08-24 11:46:04][357435840568858][1060 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:46:04][357435840568858][1060 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840568858\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7447\"}'\'' -e'"" [2025-08-24 11:46:04][357435840568858][1060 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:46:04][357435840568858][1060 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840568858\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7447\"}'\'' -e'"" [2025-08-24 11:46:09][357435840568858][5731 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_62c9c842-5e2b-4855-b1bb-c0163f73e702","id":"QR_62c9c842-5e2b-4855-b1bb-c0163f73e702","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:46:09][357435840568858][5887 ms][DEBUG] proc_open done in 4827 ms; code=255; res.len=3343 [2025-08-24 11:46:09][357435840568858][5887 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-08-24 11:46:09][357435840568858][5887 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:47:03][359062340713608][1 ms][INFO] === Request start === [2025-08-24 11:47:03][359062340713608][1 ms][DEBUG] START check_scloud [2025-08-24 11:47:03][359062340713608][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:47:04][359062340713608][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 11144 4973 23802484 90804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:47:04][359062340713608][279 ms][DEBUG] targetPkg: running [2025-08-24 11:47:04][359062340713608][279 ms][DEBUG] END check_scloud in 278 ms [2025-08-24 11:47:04][359062340713608][279 ms][DEBUG] START check_boot_completed [2025-08-24 11:47:04][359062340713608][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:47:04][359062340713608][325 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 11:47:04][359062340713608][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:47:04][359062340713608][374 ms][DEBUG] SU: done in 49 ms; out [2025-08-24 11:47:04][359062340713608][374 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 11:47:04][359062340713608][374 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:47:04][359062340713608][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359062340713608\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ILO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4830\"}'\'' -e'"" [2025-08-24 11:47:04][359062340713608][374 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:47:04][359062340713608][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359062340713608\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ILO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4830\"}'\'' -e'"" [2025-08-24 11:47:08][359062340713608][4293 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bb69f6b6-a514-4210-bbd1-7f94a3370080","id":"QR_bb69f6b6-a514-4210-bbd1-7f94a3370080","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:47:08][359062340713608][4449 ms][DEBUG] proc_open done in 4075 ms; code=255; res.len=3343 [2025-08-24 11:47:08][359062340713608][4449 ms][DEBUG] END runCmdUntilRes#1 in 4075 ms [2025-08-24 11:47:08][359062340713608][4449 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:47:10][354068195226831][0 ms][INFO] === Request start === [2025-08-24 11:47:10][354068195226831][1 ms][DEBUG] START check_scloud [2025-08-24 11:47:10][354068195226831][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:47:11][354068195226831][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 11144 4973 23921008 101972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:47:11][354068195226831][300 ms][DEBUG] targetPkg: running [2025-08-24 11:47:11][354068195226831][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-24 11:47:11][354068195226831][300 ms][DEBUG] START check_boot_completed [2025-08-24 11:47:11][354068195226831][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:47:11][354068195226831][347 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 11:47:11][354068195226831][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:47:11][354068195226831][440 ms][DEBUG] SU: done in 94 ms; out [2025-08-24 11:47:11][354068195226831][440 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-24 11:47:11][354068195226831][440 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:47:11][354068195226831][440 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195226831\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4981\"}'\'' -e'"" [2025-08-24 11:47:11][354068195226831][441 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:47:11][354068195226831][441 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195226831\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4981\"}'\'' -e'"" [2025-08-24 11:47:15][354068195226831][4392 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1d877b79-7de0-425a-8a00-c5c522a41e12","id":"QR_1d877b79-7de0-425a-8a00-c5c522a41e12","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:47:15][354068195226831][4548 ms][DEBUG] proc_open done in 4107 ms; code=255; res.len=3343 [2025-08-24 11:47:15][354068195226831][4548 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-24 11:47:15][354068195226831][4548 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:48:03][350938287156035][0 ms][INFO] === Request start === [2025-08-24 11:48:03][350938287156035][1 ms][DEBUG] START check_scloud [2025-08-24 11:48:03][350938287156035][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:48:03][350938287156035][318 ms][DEBUG] SU: done in 318 ms; outu0_a118 11144 4973 24009968 112812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:48:03][350938287156035][319 ms][DEBUG] targetPkg: running [2025-08-24 11:48:03][350938287156035][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-24 11:48:03][350938287156035][319 ms][DEBUG] START check_boot_completed [2025-08-24 11:48:03][350938287156035][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:48:03][350938287156035][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 11:48:03][350938287156035][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:48:03][350938287156035][412 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 11:48:03][350938287156035][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 11:48:03][350938287156035][412 ms][DEBUG] START check_internet [2025-08-24 11:48:03][350938287156035][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 11:48:03][350938287156035][693 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=186 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 186.596/186.596/186.596/0.000 ms\n [2025-08-24 11:48:03][350938287156035][693 ms][DEBUG] check_internet: online [2025-08-24 11:48:03][350938287156035][693 ms][DEBUG] END check_internet in 281 ms [2025-08-24 11:48:03][350938287156035][694 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:48:03][350938287156035][694 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938287156035\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9182\"}'\'' -e'"" [2025-08-24 11:48:03][350938287156035][694 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:48:03][350938287156035][694 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938287156035\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9182\"}'\'' -e'"" [2025-08-24 11:48:07][350938287156035][4583 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_55e7b12c-f885-4b59-ad63-3094d4b039c1","id":"QR_55e7b12c-f885-4b59-ad63-3094d4b039c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:48:07][350938287156035][4739 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-08-24 11:48:07][350938287156035][4739 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-08-24 11:48:07][350938287156035][4739 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:53:04][353607434826835][1 ms][INFO] === Request start === [2025-08-24 11:53:04][353607434826835][1 ms][DEBUG] START check_scloud [2025-08-24 11:53:04][353607434826835][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:53:05][353607434826835][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 11144 4973 24172884 123232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:53:05][353607434826835][289 ms][DEBUG] targetPkg: running [2025-08-24 11:53:05][353607434826835][289 ms][DEBUG] END check_scloud in 288 ms [2025-08-24 11:53:05][353607434826835][289 ms][DEBUG] START check_boot_completed [2025-08-24 11:53:05][353607434826835][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:53:05][353607434826835][320 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 11:53:05][353607434826835][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:53:05][353607434826835][367 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 11:53:05][353607434826835][367 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 11:53:05][353607434826835][367 ms][DEBUG] rawBody.length=1149 [2025-08-24 11:53:05][353607434826835][367 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353607434826835\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2946\"}'\'' -e'"" [2025-08-24 11:53:05][353607434826835][367 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:53:05][353607434826835][367 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353607434826835\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2946\"}'\'' -e'"" [2025-08-24 11:53:10][353607434826835][5803 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_15840b9d-71cf-4553-a6a7-bec7b223803d","id":"QR_15840b9d-71cf-4553-a6a7-bec7b223803d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:53:10][353607434826835][5959 ms][DEBUG] proc_open done in 5592 ms; code=255; res.len=3343 [2025-08-24 11:53:10][353607434826835][5959 ms][DEBUG] END runCmdUntilRes#1 in 5592 ms [2025-08-24 11:53:10][353607434826835][5960 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:54:02][350013884266460][0 ms][INFO] === Request start === [2025-08-24 11:54:02][350013884266460][1 ms][DEBUG] START check_scloud [2025-08-24 11:54:02][350013884266460][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:54:03][350013884266460][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 11144 4973 24311352 134940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:54:03][350013884266460][312 ms][DEBUG] targetPkg: running [2025-08-24 11:54:03][350013884266460][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-24 11:54:03][350013884266460][312 ms][DEBUG] START check_boot_completed [2025-08-24 11:54:03][350013884266460][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:54:03][350013884266460][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 11:54:03][350013884266460][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:54:03][350013884266460][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 11:54:03][350013884266460][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 11:54:03][350013884266460][405 ms][DEBUG] START check_internet [2025-08-24 11:54:03][350013884266460][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 11:54:03][350013884266460][874 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.451/202.451/202.451/0.000 ms\n [2025-08-24 11:54:03][350013884266460][874 ms][DEBUG] check_internet: online [2025-08-24 11:54:03][350013884266460][874 ms][DEBUG] END check_internet in 469 ms [2025-08-24 11:54:03][350013884266460][874 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:54:03][350013884266460][874 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884266460\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6630\"}'\'' -e'"" [2025-08-24 11:54:03][350013884266460][874 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:54:03][350013884266460][874 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884266460\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6630\"}'\'' -e'"" [2025-08-24 11:54:07][350013884266460][4889 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_86c0beb1-2a33-4895-8f1b-6e94075ff9b6","id":"QR_86c0beb1-2a33-4895-8f1b-6e94075ff9b6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:54:08][350013884266460][5045 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-24 11:54:08][350013884266460][5045 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-24 11:54:08][350013884266460][5045 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:54:10][351104345838713][0 ms][INFO] === Request start === [2025-08-24 11:54:10][351104345838713][1 ms][DEBUG] START check_scloud [2025-08-24 11:54:10][351104345838713][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:54:10][351104345838713][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 11144 4973 24470336 146024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:54:10][351104345838713][305 ms][DEBUG] targetPkg: running [2025-08-24 11:54:10][351104345838713][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-24 11:54:10][351104345838713][305 ms][DEBUG] START check_boot_completed [2025-08-24 11:54:10][351104345838713][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:54:10][351104345838713][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 11:54:10][351104345838713][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:54:10][351104345838713][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 11:54:10][351104345838713][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 11:54:10][351104345838713][398 ms][DEBUG] START check_internet [2025-08-24 11:54:10][351104345838713][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 11:54:11][351104345838713][726 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=126 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 126.042/126.042/126.042/0.000 ms\n [2025-08-24 11:54:11][351104345838713][727 ms][DEBUG] check_internet: online [2025-08-24 11:54:11][351104345838713][727 ms][DEBUG] END check_internet in 328 ms [2025-08-24 11:54:11][351104345838713][727 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:54:11][351104345838713][727 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351104345838713\",\"model\":\"SM-A166B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2725\"}'\'' -e'"" [2025-08-24 11:54:11][351104345838713][727 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:54:11][351104345838713][727 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351104345838713\",\"model\":\"SM-A166B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2725\"}'\'' -e'"" [2025-08-24 11:54:14][351104345838713][4397 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5cc53515-a7f3-4c90-8e22-94667160bbd3","id":"QR_5cc53515-a7f3-4c90-8e22-94667160bbd3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:54:15][351104345838713][4554 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=3343 [2025-08-24 11:54:15][351104345838713][4554 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-24 11:54:15][351104345838713][4554 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:58:03][358080745783464][1 ms][INFO] === Request start === [2025-08-24 11:58:03][358080745783464][1 ms][DEBUG] START check_scloud [2025-08-24 11:58:03][358080745783464][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:58:03][358080745783464][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 11144 4973 24614400 158160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:58:03][358080745783464][313 ms][DEBUG] targetPkg: running [2025-08-24 11:58:03][358080745783464][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-24 11:58:03][358080745783464][313 ms][DEBUG] START check_boot_completed [2025-08-24 11:58:03][358080745783464][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:58:03][358080745783464][344 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 11:58:03][358080745783464][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:58:03][358080745783464][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 11:58:03][358080745783464][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 11:58:03][358080745783464][392 ms][DEBUG] START check_internet [2025-08-24 11:58:03][358080745783464][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 11:58:04][358080745783464][798 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=286 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 286.604/286.604/286.604/0.000 ms\n [2025-08-24 11:58:04][358080745783464][798 ms][DEBUG] check_internet: online [2025-08-24 11:58:04][358080745783464][798 ms][DEBUG] END check_internet in 406 ms [2025-08-24 11:58:04][358080745783464][798 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:58:04][358080745783464][798 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080745783464\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4906\"}'\'' -e'"" [2025-08-24 11:58:04][358080745783464][798 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:58:04][358080745783464][798 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080745783464\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4906\"}'\'' -e'"" [2025-08-24 11:58:08][358080745783464][4937 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dc5ef83a-acb7-4627-8b0a-2d80409fca37","id":"QR_dc5ef83a-acb7-4627-8b0a-2d80409fca37","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:58:08][358080745783464][5093 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-24 11:58:08][358080745783464][5093 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-24 11:58:08][358080745783464][5093 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 11:59:03][350832442401610][0 ms][INFO] === Request start === [2025-08-24 11:59:03][350832442401610][1 ms][DEBUG] START check_scloud [2025-08-24 11:59:03][350832442401610][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 11:59:04][350832442401610][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 11144 4973 24754788 167636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 11:59:04][350832442401610][317 ms][DEBUG] targetPkg: running [2025-08-24 11:59:04][350832442401610][317 ms][DEBUG] END check_scloud in 317 ms [2025-08-24 11:59:04][350832442401610][317 ms][DEBUG] START check_boot_completed [2025-08-24 11:59:04][350832442401610][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 11:59:04][350832442401610][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 11:59:04][350832442401610][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 11:59:04][350832442401610][442 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 11:59:04][350832442401610][442 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-24 11:59:04][350832442401610][442 ms][DEBUG] rawBody.length=1148 [2025-08-24 11:59:04][350832442401610][443 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442401610\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3506\"}'\'' -e'"" [2025-08-24 11:59:04][350832442401610][443 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 11:59:04][350832442401610][443 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442401610\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3506\"}'\'' -e'"" [2025-08-24 11:59:08][350832442401610][4566 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4bbfb6b0-277b-4a77-a33d-08be02cf06dd","id":"QR_4bbfb6b0-277b-4a77-a33d-08be02cf06dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 11:59:08][350832442401610][4722 ms][DEBUG] proc_open done in 4279 ms; code=255; res.len=3343 [2025-08-24 11:59:08][350832442401610][4722 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-24 11:59:08][350832442401610][4722 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:00:03][351786692368441][1 ms][INFO] === Request start === [2025-08-24 12:00:03][351786692368441][1 ms][DEBUG] START check_scloud [2025-08-24 12:00:03][351786692368441][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:00:04][351786692368441][316 ms][DEBUG] SU: done in 314 ms; outu0_a118 11144 4973 24891208 179716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:00:04][351786692368441][316 ms][DEBUG] targetPkg: running [2025-08-24 12:00:04][351786692368441][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-24 12:00:04][351786692368441][316 ms][DEBUG] START check_boot_completed [2025-08-24 12:00:04][351786692368441][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:00:04][351786692368441][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:00:04][351786692368441][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:00:04][351786692368441][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:00:04][351786692368441][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 12:00:04][351786692368441][409 ms][DEBUG] START check_internet [2025-08-24 12:00:04][351786692368441][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:00:04][351786692368441][972 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.366/201.366/201.366/0.000 ms\n [2025-08-24 12:00:04][351786692368441][972 ms][DEBUG] check_internet: online [2025-08-24 12:00:04][351786692368441][972 ms][DEBUG] END check_internet in 563 ms [2025-08-24 12:00:04][351786692368441][972 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:00:04][351786692368441][972 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692368441\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4398\"}'\'' -e'"" [2025-08-24 12:00:04][351786692368441][972 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:00:04][351786692368441][972 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692368441\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4398\"}'\'' -e'"" [2025-08-24 12:00:08][351786692368441][5049 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ec576780-f998-44b1-8b5d-699f6051a1f9","id":"QR_ec576780-f998-44b1-8b5d-699f6051a1f9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:00:09][351786692368441][5205 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-24 12:00:09][351786692368441][5205 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-24 12:00:09][351786692368441][5205 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:00:11][351676567291267][0 ms][INFO] === Request start === [2025-08-24 12:00:11][351676567291267][1 ms][DEBUG] START check_scloud [2025-08-24 12:00:11][351676567291267][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:00:11][351676567291267][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 11144 4973 25050192 190648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:00:11][351676567291267][314 ms][DEBUG] targetPkg: running [2025-08-24 12:00:11][351676567291267][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-24 12:00:11][351676567291267][315 ms][DEBUG] START check_boot_completed [2025-08-24 12:00:11][351676567291267][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:00:12][351676567291267][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:00:12][351676567291267][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:00:12][351676567291267][424 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 12:00:12][351676567291267][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 12:00:12][351676567291267][424 ms][DEBUG] START check_internet [2025-08-24 12:00:12][351676567291267][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:00:12][351676567291267][721 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=178 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 178.362/178.362/178.362/0.000 ms\n [2025-08-24 12:00:12][351676567291267][721 ms][DEBUG] check_internet: online [2025-08-24 12:00:12][351676567291267][721 ms][DEBUG] END check_internet in 297 ms [2025-08-24 12:00:12][351676567291267][721 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:00:12][351676567291267][721 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676567291267\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2069\"}'\'' -e'"" [2025-08-24 12:00:12][351676567291267][721 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:00:12][351676567291267][721 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676567291267\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2069\"}'\'' -e'"" [2025-08-24 12:00:16][351676567291267][4611 ms][DEBUG] proc_open done in 3890 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 12:00:16][351676567291267][4611 ms][DEBUG] END runCmdUntilRes#1 in 3890 ms [2025-08-24 12:00:16][351676567291267][4611 ms][WARN] Detected error: Process with pid 11144 either refused to load frida-agent, or terminated during injection [2025-08-24 12:00:16][351676567291267][4611 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 12:00:16][351676567291267][4735 ms][DEBUG] SU: done in 124 ms; out [2025-08-24 12:00:16][351676567291267][4735 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 12:00:16][351676567291267][4735 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 12:00:16][351676567291267][4860 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 12:00:16][351676567291267][4860 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 12:00:16][351676567291267][5016 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 12:00:18][351676567291267][7031 ms][DEBUG] START check_boot_completed [2025-08-24 12:00:18][351676567291267][7032 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:00:18][351676567291267][7078 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:00:18][351676567291267][7079 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:00:18][351676567291267][7141 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 12:00:18][351676567291267][7141 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 12:00:21][351676567291267][10156 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 12:00:21][351676567291267][10156 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676567291267\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2069\"}'\'' -e'"" [2025-08-24 12:00:25][351676567291267][13717 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1eb71a9d-18be-4f1d-8b66-19aa03a5295f","id":"QR_1eb71a9d-18be-4f1d-8b66-19aa03a5295f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:00:25][351676567291267][13874 ms][DEBUG] proc_open done in 3718 ms; code=255; res.len=3343 [2025-08-24 12:00:25][351676567291267][13874 ms][DEBUG] END runCmdUntilRes#2 in 3718 ms [2025-08-24 12:00:25][351676567291267][13874 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:04:03][350117930167455][1 ms][INFO] === Request start === [2025-08-24 12:04:03][350117930167455][1 ms][DEBUG] START check_scloud [2025-08-24 12:04:03][350117930167455][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:04:03][350117930167455][271 ms][DEBUG] SU: done in 269 ms; outu0_a118 17708 4973 23574336 128192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:04:03][350117930167455][271 ms][DEBUG] targetPkg: running [2025-08-24 12:04:03][350117930167455][271 ms][DEBUG] END check_scloud in 270 ms [2025-08-24 12:04:03][350117930167455][271 ms][DEBUG] START check_boot_completed [2025-08-24 12:04:03][350117930167455][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:04:03][350117930167455][302 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 12:04:03][350117930167455][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:04:03][350117930167455][349 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:04:03][350117930167455][349 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 12:04:03][350117930167455][349 ms][DEBUG] START check_internet [2025-08-24 12:04:03][350117930167455][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:04:04][350117930167455][818 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.470/201.470/201.470/0.000 ms\n [2025-08-24 12:04:04][350117930167455][818 ms][DEBUG] check_internet: online [2025-08-24 12:04:04][350117930167455][818 ms][DEBUG] END check_internet in 469 ms [2025-08-24 12:04:04][350117930167455][818 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:04:04][350117930167455][818 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350117930167455\",\"model\":\"SM-A217F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6219\"}'\'' -e'"" [2025-08-24 12:04:04][350117930167455][818 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:04:04][350117930167455][818 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350117930167455\",\"model\":\"SM-A217F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6219\"}'\'' -e'"" [2025-08-24 12:04:08][350117930167455][5035 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4084ffd2-56cc-4fd3-8bf2-eb56c10fb37c","id":"QR_4084ffd2-56cc-4fd3-8bf2-eb56c10fb37c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:04:08][350117930167455][5192 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3343 [2025-08-24 12:04:08][350117930167455][5192 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-24 12:04:08][350117930167455][5192 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:04:11][351978521569931][1 ms][INFO] === Request start === [2025-08-24 12:04:11][351978521569931][1 ms][DEBUG] START check_scloud [2025-08-24 12:04:11][351978521569931][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:04:11][351978521569931][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 17708 4973 23726408 138992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:04:11][351978521569931][268 ms][DEBUG] targetPkg: running [2025-08-24 12:04:11][351978521569931][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-24 12:04:11][351978521569931][268 ms][DEBUG] START check_boot_completed [2025-08-24 12:04:11][351978521569931][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:04:11][351978521569931][313 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 12:04:11][351978521569931][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:04:11][351978521569931][360 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:04:11][351978521569931][360 ms][DEBUG] END check_boot_completed in 91 ms [2025-08-24 12:04:11][351978521569931][360 ms][DEBUG] START check_internet [2025-08-24 12:04:11][351978521569931][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:04:12][351978521569931][719 ms][DEBUG] SU: done in 360 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=124 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 124.725/124.725/124.725/0.000 ms\n [2025-08-24 12:04:12][351978521569931][719 ms][DEBUG] check_internet: online [2025-08-24 12:04:12][351978521569931][719 ms][DEBUG] END check_internet in 360 ms [2025-08-24 12:04:12][351978521569931][719 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:04:12][351978521569931][719 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978521569931\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4558\"}'\'' -e'"" [2025-08-24 12:04:12][351978521569931][719 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:04:12][351978521569931][720 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978521569931\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4558\"}'\'' -e'"" [2025-08-24 12:04:15][351978521569931][4312 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6585ad7f-5014-4ec6-891a-729dc10c6960","id":"QR_6585ad7f-5014-4ec6-891a-729dc10c6960","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:04:15][351978521569931][4468 ms][DEBUG] proc_open done in 3748 ms; code=255; res.len=3343 [2025-08-24 12:04:15][351978521569931][4468 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-08-24 12:04:15][351978521569931][4468 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:09:02][352060486503921][1 ms][INFO] === Request start === [2025-08-24 12:09:02][352060486503921][1 ms][DEBUG] START check_scloud [2025-08-24 12:09:02][352060486503921][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:09:03][352060486503921][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 17708 4973 23874888 150228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:09:03][352060486503921][314 ms][DEBUG] targetPkg: running [2025-08-24 12:09:03][352060486503921][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-24 12:09:03][352060486503921][314 ms][DEBUG] START check_boot_completed [2025-08-24 12:09:03][352060486503921][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:09:03][352060486503921][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:09:03][352060486503921][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:09:03][352060486503921][423 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 12:09:03][352060486503921][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 12:09:03][352060486503921][423 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:09:03][352060486503921][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060486503921\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4396\"}'\'' -e'"" [2025-08-24 12:09:03][352060486503921][423 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:09:03][352060486503921][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060486503921\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4396\"}'\'' -e'"" [2025-08-24 12:09:07][352060486503921][4578 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b0f0f5d-da24-4b86-b363-d604978ea6bc","id":"QR_8b0f0f5d-da24-4b86-b363-d604978ea6bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:09:07][352060486503921][4734 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-24 12:09:07][352060486503921][4734 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-24 12:09:07][352060486503921][4734 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:13:04][352549938138104][1 ms][INFO] === Request start === [2025-08-24 12:13:04][352549938138104][1 ms][DEBUG] START check_scloud [2025-08-24 12:13:04][352549938138104][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:13:04][352549938138104][319 ms][DEBUG] SU: done in 317 ms; outu0_a118 17708 4973 24021484 161452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:13:04][352549938138104][319 ms][DEBUG] targetPkg: running [2025-08-24 12:13:04][352549938138104][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-24 12:13:04][352549938138104][319 ms][DEBUG] START check_boot_completed [2025-08-24 12:13:04][352549938138104][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:13:04][352549938138104][350 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 12:13:04][352549938138104][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:13:04][352549938138104][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:13:04][352549938138104][397 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 12:13:04][352549938138104][397 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:13:04][352549938138104][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549938138104\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2399\"}'\'' -e'"" [2025-08-24 12:13:04][352549938138104][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:13:04][352549938138104][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549938138104\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2399\"}'\'' -e'"" [2025-08-24 12:13:08][352549938138104][4021 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 12:13:08][352549938138104][4177 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=107 [2025-08-24 12:13:08][352549938138104][4177 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-24 12:13:08][352549938138104][4178 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 12:13:08][][0 ms][INFO] === Request start === [2025-08-24 12:13:08][][1 ms][DEBUG] START check_scloud [2025-08-24 12:13:08][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:13:09][][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 17708 4973 24176372 171688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:13:09][][305 ms][DEBUG] targetPkg: running [2025-08-24 12:13:09][][305 ms][DEBUG] END check_scloud in 305 ms [2025-08-24 12:13:09][][305 ms][DEBUG] START check_boot_completed [2025-08-24 12:13:09][][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:13:09][][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:13:09][][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:13:09][][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:13:09][][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 12:13:09][][399 ms][DEBUG] rawBody.length=1129 [2025-08-24 12:13:09][][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X90M5EKL\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6864\"}'\'' -e'"" [2025-08-24 12:13:09][][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:13:09][][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X90M5EKL\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6864\"}'\'' -e'"" [2025-08-24 12:13:12][][3804 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 12:13:12][][3960 ms][DEBUG] proc_open done in 3562 ms; code=255; res.len=107 [2025-08-24 12:13:12][][3960 ms][DEBUG] END runCmdUntilRes#1 in 3562 ms [2025-08-24 12:13:12][][3960 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 12:13:15][352549938138104][0 ms][INFO] === Request start === [2025-08-24 12:13:15][352549938138104][1 ms][DEBUG] START check_scloud [2025-08-24 12:13:15][352549938138104][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:13:15][352549938138104][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 17708 4973 24343612 183428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:13:15][352549938138104][293 ms][DEBUG] targetPkg: running [2025-08-24 12:13:15][352549938138104][293 ms][DEBUG] END check_scloud in 292 ms [2025-08-24 12:13:15][352549938138104][293 ms][DEBUG] START check_boot_completed [2025-08-24 12:13:15][352549938138104][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:13:15][352549938138104][339 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:13:15][352549938138104][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:13:15][352549938138104][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:13:15][352549938138104][386 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 12:13:15][352549938138104][386 ms][DEBUG] rawBody.length=1149 [2025-08-24 12:13:15][352549938138104][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549938138104\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1144\"}'\'' -e'"" [2025-08-24 12:13:15][352549938138104][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:13:15][352549938138104][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549938138104\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1144\"}'\'' -e'"" [2025-08-24 12:13:21][352549938138104][6604 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c92ad08f-0433-4d1f-8cb0-efa88bbce69e","id":"QR_c92ad08f-0433-4d1f-8cb0-efa88bbce69e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:13:21][352549938138104][6760 ms][DEBUG] proc_open done in 6373 ms; code=255; res.len=3343 [2025-08-24 12:13:21][352549938138104][6760 ms][DEBUG] END runCmdUntilRes#1 in 6373 ms [2025-08-24 12:13:21][352549938138104][6760 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:16:02][352596764451499][1 ms][INFO] === Request start === [2025-08-24 12:16:02][352596764451499][1 ms][DEBUG] START check_scloud [2025-08-24 12:16:02][352596764451499][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:16:03][352596764451499][258 ms][DEBUG] SU: done in 256 ms; outu0_a118 17708 4973 24443096 185076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:16:03][352596764451499][258 ms][DEBUG] targetPkg: running [2025-08-24 12:16:03][352596764451499][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-24 12:16:03][352596764451499][258 ms][DEBUG] START check_boot_completed [2025-08-24 12:16:03][352596764451499][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:16:03][352596764451499][288 ms][DEBUG] ADB: done in 30 ms; out [2025-08-24 12:16:03][352596764451499][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:16:03][352596764451499][335 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:16:03][352596764451499][335 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-24 12:16:03][352596764451499][335 ms][DEBUG] START check_internet [2025-08-24 12:16:03][352596764451499][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:16:03][352596764451499][912 ms][DEBUG] SU: done in 578 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.151/201.151/201.151/0.000 ms\n [2025-08-24 12:16:03][352596764451499][912 ms][DEBUG] check_internet: online [2025-08-24 12:16:03][352596764451499][912 ms][DEBUG] END check_internet in 578 ms [2025-08-24 12:16:03][352596764451499][913 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:16:03][352596764451499][913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352596764451499\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9036\"}'\'' -e'"" [2025-08-24 12:16:03][352596764451499][913 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:16:03][352596764451499][913 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352596764451499\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9036\"}'\'' -e'"" [2025-08-24 12:16:07][352596764451499][4990 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_85b8fb15-d63d-4ae2-aeaf-3f899c1daaa0","id":"QR_85b8fb15-d63d-4ae2-aeaf-3f899c1daaa0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:16:08][352596764451499][5146 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-24 12:16:08][352596764451499][5146 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-24 12:16:08][352596764451499][5146 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:17:03][351272336342704][0 ms][INFO] === Request start === [2025-08-24 12:17:03][351272336342704][1 ms][DEBUG] START check_scloud [2025-08-24 12:17:03][351272336342704][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:17:03][351272336342704][248 ms][DEBUG] SU: done in 247 ms; outu0_a118 17708 4973 24556988 192336 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:17:03][351272336342704][248 ms][DEBUG] targetPkg: running [2025-08-24 12:17:03][351272336342704][248 ms][DEBUG] END check_scloud in 248 ms [2025-08-24 12:17:03][351272336342704][248 ms][DEBUG] START check_boot_completed [2025-08-24 12:17:03][351272336342704][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:17:03][351272336342704][295 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:17:03][351272336342704][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:17:04][351272336342704][373 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 12:17:04][351272336342704][373 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-24 12:17:04][351272336342704][374 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:17:04][351272336342704][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272336342704\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9608\"}'\'' -e'"" [2025-08-24 12:17:04][351272336342704][374 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:17:04][351272336342704][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272336342704\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9608\"}'\'' -e'"" [2025-08-24 12:17:07][351272336342704][4263 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2a46b51c-2bf9-4426-bc42-24acf1825ac6","id":"QR_2a46b51c-2bf9-4426-bc42-24acf1825ac6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:17:08][351272336342704][4419 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-08-24 12:17:08][351272336342704][4419 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-08-24 12:17:08][351272336342704][4419 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:18:03][350513045986344][1 ms][INFO] === Request start === [2025-08-24 12:18:03][350513045986344][1 ms][DEBUG] START check_scloud [2025-08-24 12:18:03][350513045986344][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:18:03][350513045986344][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 17708 4973 24711712 202932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:18:03][350513045986344][307 ms][DEBUG] targetPkg: running [2025-08-24 12:18:03][350513045986344][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-24 12:18:03][350513045986344][308 ms][DEBUG] START check_boot_completed [2025-08-24 12:18:03][350513045986344][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:18:03][350513045986344][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:18:03][350513045986344][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:18:03][350513045986344][417 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 12:18:03][350513045986344][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 12:18:03][350513045986344][417 ms][DEBUG] START check_internet [2025-08-24 12:18:03][350513045986344][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:18:03][350513045986344][776 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=231 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 231.238/231.238/231.238/0.000 ms\n [2025-08-24 12:18:03][350513045986344][776 ms][DEBUG] check_internet: online [2025-08-24 12:18:03][350513045986344][776 ms][DEBUG] END check_internet in 359 ms [2025-08-24 12:18:03][350513045986344][776 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:18:03][350513045986344][776 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350513045986344\",\"model\":\"SM-S928N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3682\"}'\'' -e'"" [2025-08-24 12:18:03][350513045986344][776 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:18:03][350513045986344][776 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350513045986344\",\"model\":\"SM-S928N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3682\"}'\'' -e'"" [2025-08-24 12:18:07][350513045986344][4634 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7b8096a3-e8b4-4bc9-a37e-94e1548237b6","id":"QR_7b8096a3-e8b4-4bc9-a37e-94e1548237b6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:18:07][350513045986344][4790 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-24 12:18:07][350513045986344][4790 ms][DEBUG] END runCmdUntilRes#1 in 4015 ms [2025-08-24 12:18:07][350513045986344][4790 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:20:05][353439960700162][1 ms][INFO] === Request start === [2025-08-24 12:20:05][353439960700162][1 ms][DEBUG] START check_scloud [2025-08-24 12:20:05][353439960700162][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:20:05][353439960700162][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 17708 4973 24837892 210436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:20:05][353439960700162][284 ms][DEBUG] targetPkg: running [2025-08-24 12:20:05][353439960700162][284 ms][DEBUG] END check_scloud in 283 ms [2025-08-24 12:20:05][353439960700162][284 ms][DEBUG] START check_boot_completed [2025-08-24 12:20:05][353439960700162][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:20:05][353439960700162][331 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:20:05][353439960700162][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:20:05][353439960700162][394 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 12:20:05][353439960700162][394 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 12:20:05][353439960700162][394 ms][DEBUG] START check_internet [2025-08-24 12:20:05][353439960700162][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:20:06][353439960700162][972 ms][DEBUG] SU: done in 578 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.091/202.091/202.091/0.000 ms\n [2025-08-24 12:20:06][353439960700162][972 ms][DEBUG] check_internet: online [2025-08-24 12:20:06][353439960700162][972 ms][DEBUG] END check_internet in 578 ms [2025-08-24 12:20:06][353439960700162][972 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:20:06][353439960700162][972 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353439960700162\",\"model\":\"SM-X716B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7840\"}'\'' -e'"" [2025-08-24 12:20:06][353439960700162][972 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:20:06][353439960700162][972 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353439960700162\",\"model\":\"SM-X716B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7840\"}'\'' -e'"" [2025-08-24 12:20:09][353439960700162][4721 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 12:20:10][353439960700162][4877 ms][DEBUG] proc_open done in 3904 ms; code=255; res.len=107 [2025-08-24 12:20:10][353439960700162][4877 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-24 12:20:10][353439960700162][4877 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 12:20:10][][0 ms][INFO] === Request start === [2025-08-24 12:20:10][][1 ms][DEBUG] START check_scloud [2025-08-24 12:20:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:20:10][][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 17708 4973 25009168 221344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:20:10][][310 ms][DEBUG] targetPkg: running [2025-08-24 12:20:10][][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-24 12:20:10][][310 ms][DEBUG] START check_boot_completed [2025-08-24 12:20:10][][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:20:10][][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 12:20:10][][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:20:10][][403 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 12:20:10][][404 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 12:20:10][][404 ms][DEBUG] START check_internet [2025-08-24 12:20:10][][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:20:11][][653 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=135 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 135.976/135.976/135.976/0.000 ms\n [2025-08-24 12:20:11][][653 ms][DEBUG] check_internet: online [2025-08-24 12:20:11][][653 ms][DEBUG] END check_internet in 250 ms [2025-08-24 12:20:11][][653 ms][DEBUG] rawBody.length=1129 [2025-08-24 12:20:11][][653 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-X716B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52W70EQVEN\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6570\"}'\'' -e'"" [2025-08-24 12:20:11][][653 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:20:11][][653 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-X716B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52W70EQVEN\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6570\"}'\'' -e'"" [2025-08-24 12:20:14][][4465 ms][DEBUG] proc_open done in 3812 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 12:20:14][][4465 ms][DEBUG] END runCmdUntilRes#1 in 3812 ms [2025-08-24 12:20:14][][4465 ms][WARN] Detected error: Process with pid 17708 either refused to load frida-agent, or terminated during injection [2025-08-24 12:20:14][][4465 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 12:20:15][][4621 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 12:20:15][][4621 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 12:20:15][][4621 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 12:20:15][][4746 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 12:20:15][][4746 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 12:20:15][][4918 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 12:20:17][][6933 ms][DEBUG] START check_boot_completed [2025-08-24 12:20:17][][6933 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:20:17][][6980 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:20:17][][6980 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:20:17][][7073 ms][DEBUG] SU: done in 93 ms; out [2025-08-24 12:20:17][][7074 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-24 12:20:20][][10088 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 12:20:20][][10089 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-X716B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52W70EQVEN\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6570\"}'\'' -e'"" [2025-08-24 12:20:24][][13650 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 12:20:24][][13806 ms][DEBUG] proc_open done in 3718 ms; code=255; res.len=107 [2025-08-24 12:20:24][][13806 ms][DEBUG] END runCmdUntilRes#2 in 3718 ms [2025-08-24 12:20:24][][13806 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 12:20:26][353439960700162][0 ms][INFO] === Request start === [2025-08-24 12:20:26][353439960700162][1 ms][DEBUG] START check_scloud [2025-08-24 12:20:26][353439960700162][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:20:26][353439960700162][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 19407 4973 23708856 125456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:20:26][353439960700162][257 ms][DEBUG] targetPkg: running [2025-08-24 12:20:26][353439960700162][257 ms][DEBUG] END check_scloud in 257 ms [2025-08-24 12:20:26][353439960700162][257 ms][DEBUG] START check_boot_completed [2025-08-24 12:20:26][353439960700162][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:20:26][353439960700162][304 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:20:26][353439960700162][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:20:27][353439960700162][352 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 12:20:27][353439960700162][352 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 12:20:27][353439960700162][352 ms][DEBUG] START check_internet [2025-08-24 12:20:27][353439960700162][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:20:27][353439960700162][726 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=231 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 231.827/231.827/231.827/0.000 ms\n [2025-08-24 12:20:27][353439960700162][726 ms][DEBUG] check_internet: online [2025-08-24 12:20:27][353439960700162][726 ms][DEBUG] END check_internet in 374 ms [2025-08-24 12:20:27][353439960700162][726 ms][DEBUG] rawBody.length=1149 [2025-08-24 12:20:27][353439960700162][726 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353439960700162\",\"model\":\"SM-X716B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4051\"}'\'' -e'"" [2025-08-24 12:20:27][353439960700162][726 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:20:27][353439960700162][726 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353439960700162\",\"model\":\"SM-X716B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4051\"}'\'' -e'"" [2025-08-24 12:20:33][353439960700162][7302 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1cc04367-73a8-4fc6-ac66-24406047ccbb","id":"QR_1cc04367-73a8-4fc6-ac66-24406047ccbb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:20:34][353439960700162][7458 ms][DEBUG] proc_open done in 6732 ms; code=255; res.len=3343 [2025-08-24 12:20:34][353439960700162][7459 ms][DEBUG] END runCmdUntilRes#1 in 6732 ms [2025-08-24 12:20:34][353439960700162][7459 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:21:05][354818253085887][1 ms][INFO] === Request start === [2025-08-24 12:21:05][354818253085887][1 ms][DEBUG] START check_scloud [2025-08-24 12:21:05][354818253085887][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:21:05][354818253085887][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 19407 4973 23801776 138716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:21:05][354818253085887][251 ms][DEBUG] targetPkg: running [2025-08-24 12:21:05][354818253085887][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-24 12:21:05][354818253085887][251 ms][DEBUG] START check_boot_completed [2025-08-24 12:21:05][354818253085887][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:21:05][354818253085887][283 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 12:21:05][354818253085887][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:21:05][354818253085887][330 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:21:05][354818253085887][330 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 12:21:05][354818253085887][330 ms][DEBUG] rawBody.length=1149 [2025-08-24 12:21:05][354818253085887][330 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354818253085887\",\"model\":\"SM-S901W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9631\"}'\'' -e'"" [2025-08-24 12:21:05][354818253085887][331 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:21:05][354818253085887][331 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354818253085887\",\"model\":\"SM-S901W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9631\"}'\'' -e'"" [2025-08-24 12:21:12][354818253085887][6984 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_077e9779-32ea-4b11-9038-dbce272de9e2","id":"QR_077e9779-32ea-4b11-9038-dbce272de9e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:21:12][354818253085887][7140 ms][DEBUG] proc_open done in 6810 ms; code=255; res.len=3343 [2025-08-24 12:21:12][354818253085887][7140 ms][DEBUG] END runCmdUntilRes#1 in 6810 ms [2025-08-24 12:21:12][354818253085887][7141 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:22:03][351978522724220][0 ms][INFO] === Request start === [2025-08-24 12:22:03][351978522724220][1 ms][DEBUG] START check_scloud [2025-08-24 12:22:03][351978522724220][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:22:04][351978522724220][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 19407 4973 23919364 150788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:22:04][351978522724220][321 ms][DEBUG] targetPkg: running [2025-08-24 12:22:04][351978522724220][321 ms][DEBUG] END check_scloud in 321 ms [2025-08-24 12:22:04][351978522724220][321 ms][DEBUG] START check_boot_completed [2025-08-24 12:22:04][351978522724220][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:22:04][351978522724220][368 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:22:04][351978522724220][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:22:04][351978522724220][415 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:22:04][351978522724220][415 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 12:22:04][351978522724220][415 ms][DEBUG] START check_internet [2025-08-24 12:22:04][351978522724220][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:22:04][351978522724220][711 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=187 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 187.830/187.830/187.830/0.000 ms\n [2025-08-24 12:22:04][351978522724220][712 ms][DEBUG] check_internet: online [2025-08-24 12:22:04][351978522724220][712 ms][DEBUG] END check_internet in 297 ms [2025-08-24 12:22:04][351978522724220][712 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:22:04][351978522724220][712 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522724220\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4620\"}'\'' -e'"" [2025-08-24 12:22:04][351978522724220][712 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:22:04][351978522724220][712 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522724220\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4620\"}'\'' -e'"" [2025-08-24 12:22:08][351978522724220][4726 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2aa3cb9c-c3ca-4536-b997-806e88c83669","id":"QR_2aa3cb9c-c3ca-4536-b997-806e88c83669","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:22:08][351978522724220][4882 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3343 [2025-08-24 12:22:08][351978522724220][4883 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-08-24 12:22:08][351978522724220][4883 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:22:11][354775290291151][1 ms][INFO] === Request start === [2025-08-24 12:22:11][354775290291151][1 ms][DEBUG] START check_scloud [2025-08-24 12:22:11][354775290291151][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:22:12][354775290291151][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 19407 4973 24076300 161576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:22:12][354775290291151][306 ms][DEBUG] targetPkg: running [2025-08-24 12:22:12][354775290291151][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-24 12:22:12][354775290291151][306 ms][DEBUG] START check_boot_completed [2025-08-24 12:22:12][354775290291151][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:22:12][354775290291151][351 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 12:22:12][354775290291151][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:22:12][354775290291151][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:22:12][354775290291151][398 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-24 12:22:12][354775290291151][398 ms][DEBUG] START check_internet [2025-08-24 12:22:12][354775290291151][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:22:12][354775290291151][695 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.898/200.898/200.898/0.000 ms\n [2025-08-24 12:22:12][354775290291151][695 ms][DEBUG] check_internet: online [2025-08-24 12:22:12][354775290291151][695 ms][DEBUG] END check_internet in 297 ms [2025-08-24 12:22:12][354775290291151][695 ms][DEBUG] rawBody.length=1149 [2025-08-24 12:22:12][354775290291151][696 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354775290291151\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5051\"}'\'' -e'"" [2025-08-24 12:22:12][354775290291151][696 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:22:12][354775290291151][696 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354775290291151\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5051\"}'\'' -e'"" [2025-08-24 12:22:17][354775290291151][5756 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c4d444f0-01f5-4e76-9804-b67964377e97","id":"QR_c4d444f0-01f5-4e76-9804-b67964377e97","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:22:17][354775290291151][5912 ms][DEBUG] proc_open done in 5216 ms; code=255; res.len=3343 [2025-08-24 12:22:17][354775290291151][5912 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-08-24 12:22:17][354775290291151][5912 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:23:01][357733315915210][0 ms][INFO] === Request start === [2025-08-24 12:23:01][357733315915210][1 ms][DEBUG] START check_scloud [2025-08-24 12:23:01][357733315915210][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:23:02][357733315915210][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 19407 4973 24158336 173040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:23:02][357733315915210][315 ms][DEBUG] targetPkg: running [2025-08-24 12:23:02][357733315915210][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-24 12:23:02][357733315915210][315 ms][DEBUG] START check_boot_completed [2025-08-24 12:23:02][357733315915210][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:23:02][357733315915210][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:23:02][357733315915210][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:23:02][357733315915210][410 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 12:23:02][357733315915210][410 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 12:23:02][357733315915210][410 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:23:02][357733315915210][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357733315915210\",\"model\":\"SM-A5460\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"BRI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1820\"}'\'' -e'"" [2025-08-24 12:23:02][357733315915210][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:23:02][357733315915210][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357733315915210\",\"model\":\"SM-A5460\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"BRI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1820\"}'\'' -e'"" [2025-08-24 12:23:06][357733315915210][4548 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_654740f0-b6d1-469b-b129-ea61574d7500","id":"QR_654740f0-b6d1-469b-b129-ea61574d7500","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:23:06][357733315915210][4704 ms][DEBUG] proc_open done in 4294 ms; code=255; res.len=3343 [2025-08-24 12:23:06][357733315915210][4704 ms][DEBUG] END runCmdUntilRes#1 in 4294 ms [2025-08-24 12:23:06][357733315915210][4704 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:24:03][355478282455350][1 ms][INFO] === Request start === [2025-08-24 12:24:03][355478282455350][1 ms][DEBUG] START check_scloud [2025-08-24 12:24:03][355478282455350][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:24:03][355478282455350][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 19407 4973 24286564 185036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:24:03][355478282455350][294 ms][DEBUG] targetPkg: running [2025-08-24 12:24:03][355478282455350][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-24 12:24:03][355478282455350][294 ms][DEBUG] START check_boot_completed [2025-08-24 12:24:03][355478282455350][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:24:03][355478282455350][340 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:24:03][355478282455350][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:24:03][355478282455350][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:24:03][355478282455350][387 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 12:24:03][355478282455350][387 ms][DEBUG] START check_internet [2025-08-24 12:24:03][355478282455350][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:24:03][355478282455350][715 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=214 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 214.937/214.937/214.937/0.000 ms\n [2025-08-24 12:24:03][355478282455350][715 ms][DEBUG] check_internet: online [2025-08-24 12:24:03][355478282455350][715 ms][DEBUG] END check_internet in 328 ms [2025-08-24 12:24:03][355478282455350][715 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:24:03][355478282455350][716 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355478282455350\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2626\"}'\'' -e'"" [2025-08-24 12:24:03][355478282455350][716 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:24:03][355478282455350][716 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355478282455350\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2626\"}'\'' -e'"" [2025-08-24 12:24:07][355478282455350][4745 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_376bedc6-964a-4725-b26a-e4cd34bf4d4a","id":"QR_376bedc6-964a-4725-b26a-e4cd34bf4d4a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:24:08][355478282455350][4902 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-24 12:24:08][355478282455350][4902 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-24 12:24:08][355478282455350][4902 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:25:03][352397457296014][0 ms][INFO] === Request start === [2025-08-24 12:25:03][352397457296014][1 ms][DEBUG] START check_scloud [2025-08-24 12:25:03][352397457296014][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:25:03][352397457296014][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 19407 4973 24433224 195908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:25:03][352397457296014][310 ms][DEBUG] targetPkg: running [2025-08-24 12:25:03][352397457296014][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-24 12:25:03][352397457296014][310 ms][DEBUG] START check_boot_completed [2025-08-24 12:25:03][352397457296014][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:25:03][352397457296014][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:25:03][352397457296014][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:25:03][352397457296014][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:25:03][352397457296014][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 12:25:03][352397457296014][403 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:25:03][352397457296014][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397457296014\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8501\"}'\'' -e'"" [2025-08-24 12:25:03][352397457296014][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:25:03][352397457296014][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397457296014\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8501\"}'\'' -e'"" [2025-08-24 12:25:07][352397457296014][4214 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ffb8895b-c2a4-4bbf-be5a-a37210fc4e2b","id":"QR_ffb8895b-c2a4-4bbf-be5a-a37210fc4e2b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:25:07][352397457296014][4371 ms][DEBUG] proc_open done in 3968 ms; code=255; res.len=3343 [2025-08-24 12:25:07][352397457296014][4371 ms][DEBUG] END runCmdUntilRes#1 in 3968 ms [2025-08-24 12:25:07][352397457296014][4371 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:25:09][352053264973887][0 ms][INFO] === Request start === [2025-08-24 12:25:09][352053264973887][1 ms][DEBUG] START check_scloud [2025-08-24 12:25:09][352053264973887][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:25:09][352053264973887][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 19407 4973 24565392 207648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:25:09][352053264973887][267 ms][DEBUG] targetPkg: running [2025-08-24 12:25:09][352053264973887][267 ms][DEBUG] END check_scloud in 266 ms [2025-08-24 12:25:09][352053264973887][267 ms][DEBUG] START check_boot_completed [2025-08-24 12:25:09][352053264973887][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:25:09][352053264973887][314 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:25:09][352053264973887][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:25:09][352053264973887][360 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:25:09][352053264973887][360 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 12:25:09][352053264973887][360 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:25:09][352053264973887][360 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053264973887\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3942\"}'\'' -e'"" [2025-08-24 12:25:09][352053264973887][360 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:25:09][352053264973887][360 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053264973887\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3942\"}'\'' -e'"" [2025-08-24 12:25:13][352053264973887][4313 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7f1ea472-ecda-4260-b428-237b3c6f0aaa","id":"QR_7f1ea472-ecda-4260-b428-237b3c6f0aaa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:25:13][352053264973887][4469 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-24 12:25:13][352053264973887][4469 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-24 12:25:13][352053264973887][4469 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:25:14][352842935691617][0 ms][INFO] === Request start === [2025-08-24 12:25:14][352842935691617][1 ms][DEBUG] START check_scloud [2025-08-24 12:25:14][352842935691617][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:25:15][352842935691617][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 19407 4973 24709912 218184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:25:15][352842935691617][300 ms][DEBUG] targetPkg: running [2025-08-24 12:25:15][352842935691617][300 ms][DEBUG] END check_scloud in 300 ms [2025-08-24 12:25:15][352842935691617][300 ms][DEBUG] START check_boot_completed [2025-08-24 12:25:15][352842935691617][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:25:15][352842935691617][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:25:15][352842935691617][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:25:15][352842935691617][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:25:15][352842935691617][394 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 12:25:15][352842935691617][394 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:25:15][352842935691617][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352842935691617\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5362\"}'\'' -e'"" [2025-08-24 12:25:15][352842935691617][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:25:15][352842935691617][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352842935691617\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5362\"}'\'' -e'"" [2025-08-24 12:25:19][352842935691617][4096 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_334614bf-a2de-4ac6-8879-5e1cebe2d8df","id":"QR_334614bf-a2de-4ac6-8879-5e1cebe2d8df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:25:19][352842935691617][4252 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-24 12:25:19][352842935691617][4252 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-24 12:25:19][352842935691617][4252 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:26:02][351642484402643][0 ms][INFO] === Request start === [2025-08-24 12:26:02][351642484402643][1 ms][DEBUG] START check_scloud [2025-08-24 12:26:02][351642484402643][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:26:03][351642484402643][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 19407 4973 24789036 230564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:26:03][351642484402643][302 ms][DEBUG] targetPkg: running [2025-08-24 12:26:03][351642484402643][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-24 12:26:03][351642484402643][303 ms][DEBUG] START check_boot_completed [2025-08-24 12:26:03][351642484402643][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:26:03][351642484402643][349 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:26:03][351642484402643][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:26:03][351642484402643][412 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 12:26:03][351642484402643][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 12:26:03][351642484402643][412 ms][DEBUG] START check_internet [2025-08-24 12:26:03][351642484402643][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:26:03][351642484402643][912 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.834/202.834/202.834/0.000 ms\n [2025-08-24 12:26:03][351642484402643][912 ms][DEBUG] check_internet: online [2025-08-24 12:26:03][351642484402643][912 ms][DEBUG] END check_internet in 500 ms [2025-08-24 12:26:03][351642484402643][912 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:26:03][351642484402643][912 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642484402643\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2435\"}'\'' -e'"" [2025-08-24 12:26:03][351642484402643][912 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:26:03][351642484402643][912 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642484402643\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2435\"}'\'' -e'"" [2025-08-24 12:26:07][351642484402643][4989 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c4dce7fb-9978-4f90-83a2-f862dd75c771","id":"QR_c4dce7fb-9978-4f90-83a2-f862dd75c771","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:26:08][351642484402643][5145 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-24 12:26:08][351642484402643][5145 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-24 12:26:08][351642484402643][5145 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:26:09][354485112748178][1 ms][INFO] === Request start === [2025-08-24 12:26:09][354485112748178][1 ms][DEBUG] START check_scloud [2025-08-24 12:26:09][354485112748178][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:26:10][354485112748178][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 19407 4973 24931640 241744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:26:10][354485112748178][256 ms][DEBUG] targetPkg: running [2025-08-24 12:26:10][354485112748178][256 ms][DEBUG] END check_scloud in 255 ms [2025-08-24 12:26:10][354485112748178][256 ms][DEBUG] START check_boot_completed [2025-08-24 12:26:10][354485112748178][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:26:10][354485112748178][302 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:26:10][354485112748178][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:26:10][354485112748178][349 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:26:10][354485112748178][349 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 12:26:10][354485112748178][349 ms][DEBUG] START check_internet [2025-08-24 12:26:10][354485112748178][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:26:10][354485112748178][631 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=185 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 185.341/185.341/185.341/0.000 ms\n [2025-08-24 12:26:10][354485112748178][631 ms][DEBUG] check_internet: online [2025-08-24 12:26:10][354485112748178][631 ms][DEBUG] END check_internet in 282 ms [2025-08-24 12:26:10][354485112748178][631 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:26:10][354485112748178][631 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354485112748178\",\"model\":\"SM-A516N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7106\"}'\'' -e'"" [2025-08-24 12:26:10][354485112748178][631 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:26:10][354485112748178][631 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354485112748178\",\"model\":\"SM-A516N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7106\"}'\'' -e'"" [2025-08-24 12:26:14][354485112748178][4521 ms][DEBUG] proc_open done in 3890 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 12:26:14][354485112748178][4521 ms][DEBUG] END runCmdUntilRes#1 in 3890 ms [2025-08-24 12:26:14][354485112748178][4521 ms][WARN] Detected error: Process with pid 19407 either refused to load frida-agent, or terminated during injection [2025-08-24 12:26:14][354485112748178][4521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 12:26:14][354485112748178][4661 ms][DEBUG] SU: done in 139 ms; out [2025-08-24 12:26:14][354485112748178][4661 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 12:26:14][354485112748178][4661 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 12:26:14][354485112748178][4786 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 12:26:14][354485112748178][4786 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 12:26:14][354485112748178][4942 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 12:26:16][354485112748178][6957 ms][DEBUG] START check_boot_completed [2025-08-24 12:26:16][354485112748178][6957 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:26:16][354485112748178][7004 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:26:16][354485112748178][7004 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:26:16][354485112748178][7098 ms][DEBUG] SU: done in 94 ms; out [2025-08-24 12:26:16][354485112748178][7098 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-24 12:26:19][354485112748178][10113 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 12:26:19][354485112748178][10113 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354485112748178\",\"model\":\"SM-A516N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7106\"}'\'' -e'"" [2025-08-24 12:26:23][354485112748178][14206 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf6a7aee-9372-4bc2-bc39-f26330159215","id":"QR_cf6a7aee-9372-4bc2-bc39-f26330159215","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:26:24][354485112748178][14362 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-08-24 12:26:24][354485112748178][14362 ms][DEBUG] END runCmdUntilRes#2 in 4249 ms [2025-08-24 12:26:24][354485112748178][14362 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:27:04][355819210574996][0 ms][INFO] === Request start === [2025-08-24 12:27:04][355819210574996][1 ms][DEBUG] START check_scloud [2025-08-24 12:27:04][355819210574996][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:27:05][355819210574996][321 ms][DEBUG] SU: done in 321 ms; outu0_a118 21555 4973 23589716 127924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:27:05][355819210574996][322 ms][DEBUG] targetPkg: running [2025-08-24 12:27:05][355819210574996][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-24 12:27:05][355819210574996][322 ms][DEBUG] START check_boot_completed [2025-08-24 12:27:05][355819210574996][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:27:05][355819210574996][368 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:27:05][355819210574996][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:27:05][355819210574996][431 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 12:27:05][355819210574996][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 12:27:05][355819210574996][431 ms][DEBUG] rawBody.length=1158 [2025-08-24 12:27:05][355819210574996][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355819210574996\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52W90J7BZV\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHN\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2760\"}'\'' -e'"" [2025-08-24 12:27:05][355819210574996][431 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:27:05][355819210574996][431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355819210574996\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52W90J7BZV\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHN\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2760\"}'\'' -e'"" [2025-08-24 12:27:09][355819210574996][4352 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1d4b9bb2-e070-4d42-a595-fbec4cab0c06","id":"QR_1d4b9bb2-e070-4d42-a595-fbec4cab0c06","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:27:09][355819210574996][4508 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-24 12:27:09][355819210574996][4508 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-24 12:27:09][355819210574996][4508 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:28:02][354455940995341][0 ms][INFO] === Request start === [2025-08-24 12:28:02][354455940995341][1 ms][DEBUG] START check_scloud [2025-08-24 12:28:02][354455940995341][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:28:03][354455940995341][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 21555 4973 23714672 138500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:28:03][354455940995341][315 ms][DEBUG] targetPkg: running [2025-08-24 12:28:03][354455940995341][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-24 12:28:03][354455940995341][315 ms][DEBUG] START check_boot_completed [2025-08-24 12:28:03][354455940995341][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:28:03][354455940995341][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:28:03][354455940995341][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:28:03][354455940995341][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:28:03][354455940995341][408 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 12:28:03][354455940995341][408 ms][DEBUG] START check_internet [2025-08-24 12:28:03][354455940995341][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:28:03][354455940995341][908 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.438/202.438/202.438/0.000 ms\n [2025-08-24 12:28:03][354455940995341][908 ms][DEBUG] check_internet: online [2025-08-24 12:28:03][354455940995341][908 ms][DEBUG] END check_internet in 500 ms [2025-08-24 12:28:03][354455940995341][908 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:28:03][354455940995341][908 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354455940995341\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5599\"}'\'' -e'"" [2025-08-24 12:28:03][354455940995341][909 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:28:03][354455940995341][909 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354455940995341\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5599\"}'\'' -e'"" [2025-08-24 12:28:07][354455940995341][5016 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e111d82a-56a9-4b79-ab7a-9a187ecbcceb","id":"QR_e111d82a-56a9-4b79-ab7a-9a187ecbcceb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:28:08][354455940995341][5173 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-24 12:28:08][354455940995341][5173 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-24 12:28:08][354455940995341][5173 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:30:03][353302721491077][1 ms][INFO] === Request start === [2025-08-24 12:30:03][353302721491077][1 ms][DEBUG] START check_scloud [2025-08-24 12:30:03][353302721491077][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:30:03][353302721491077][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 21555 4973 23816192 150784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:30:03][353302721491077][304 ms][DEBUG] targetPkg: running [2025-08-24 12:30:03][353302721491077][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-24 12:30:03][353302721491077][304 ms][DEBUG] START check_boot_completed [2025-08-24 12:30:03][353302721491077][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:30:03][353302721491077][349 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 12:30:03][353302721491077][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:30:03][353302721491077][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:30:03][353302721491077][396 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-24 12:30:03][353302721491077][396 ms][DEBUG] START check_internet [2025-08-24 12:30:03][353302721491077][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:30:03][353302721491077][833 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.194/300.194/300.194/0.000 ms\n [2025-08-24 12:30:03][353302721491077][833 ms][DEBUG] check_internet: online [2025-08-24 12:30:03][353302721491077][833 ms][DEBUG] END check_internet in 437 ms [2025-08-24 12:30:03][353302721491077][833 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:30:03][353302721491077][833 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353302721491077\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3627\"}'\'' -e'"" [2025-08-24 12:30:03][353302721491077][833 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:30:03][353302721491077][833 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353302721491077\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3627\"}'\'' -e'"" [2025-08-24 12:30:07][353302721491077][4832 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_edf66a93-6341-445a-8938-525aa335f725","id":"QR_edf66a93-6341-445a-8938-525aa335f725","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:30:08][353302721491077][4988 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-24 12:30:08][353302721491077][4988 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-24 12:30:08][353302721491077][4988 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:31:03][350013881856453][0 ms][INFO] === Request start === [2025-08-24 12:31:03][350013881856453][1 ms][DEBUG] START check_scloud [2025-08-24 12:31:03][350013881856453][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:31:03][350013881856453][307 ms][DEBUG] SU: done in 307 ms; outu0_a118 21555 4973 23929828 161272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:31:03][350013881856453][308 ms][DEBUG] targetPkg: running [2025-08-24 12:31:03][350013881856453][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-24 12:31:03][350013881856453][308 ms][DEBUG] START check_boot_completed [2025-08-24 12:31:03][350013881856453][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:31:03][350013881856453][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:31:03][350013881856453][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:31:03][350013881856453][402 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 12:31:03][350013881856453][402 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 12:31:03][350013881856453][402 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:31:03][350013881856453][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881856453\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3315\"}'\'' -e'"" [2025-08-24 12:31:03][350013881856453][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:31:03][350013881856453][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881856453\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3315\"}'\'' -e'"" [2025-08-24 12:31:07][350013881856453][4338 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1690b20a-f62f-405f-bc17-4e2b7417ed35","id":"QR_1690b20a-f62f-405f-bc17-4e2b7417ed35","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:31:08][350013881856453][4494 ms][DEBUG] proc_open done in 4091 ms; code=255; res.len=3343 [2025-08-24 12:31:08][350013881856453][4494 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-24 12:31:08][350013881856453][4494 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:31:09][355403290962411][0 ms][INFO] === Request start === [2025-08-24 12:31:09][355403290962411][1 ms][DEBUG] START check_scloud [2025-08-24 12:31:09][355403290962411][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:31:09][355403290962411][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 21555 4973 24074220 172016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:31:09][355403290962411][308 ms][DEBUG] targetPkg: running [2025-08-24 12:31:09][355403290962411][308 ms][DEBUG] END check_scloud in 308 ms [2025-08-24 12:31:09][355403290962411][308 ms][DEBUG] START check_boot_completed [2025-08-24 12:31:09][355403290962411][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:31:10][355403290962411][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:31:10][355403290962411][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:31:10][355403290962411][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:31:10][355403290962411][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 12:31:10][355403290962411][402 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:31:10][355403290962411][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355403290962411\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1978\"}'\'' -e'"" [2025-08-24 12:31:10][355403290962411][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:31:10][355403290962411][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355403290962411\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1978\"}'\'' -e'"" [2025-08-24 12:31:13][355403290962411][4291 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1ab806b4-12cf-49e8-9e61-b6a0fb460974","id":"QR_1ab806b4-12cf-49e8-9e61-b6a0fb460974","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:31:14][355403290962411][4447 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-08-24 12:31:14][355403290962411][4447 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-08-24 12:31:14][355403290962411][4448 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:32:03][352677531578499][0 ms][INFO] === Request start === [2025-08-24 12:32:03][352677531578499][1 ms][DEBUG] START check_scloud [2025-08-24 12:32:03][352677531578499][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:32:03][352677531578499][281 ms][DEBUG] SU: done in 280 ms; outu0_a118 21555 4973 24176228 184344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:32:03][352677531578499][281 ms][DEBUG] targetPkg: running [2025-08-24 12:32:03][352677531578499][281 ms][DEBUG] END check_scloud in 281 ms [2025-08-24 12:32:03][352677531578499][281 ms][DEBUG] START check_boot_completed [2025-08-24 12:32:03][352677531578499][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:32:03][352677531578499][328 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:32:03][352677531578499][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:32:03][352677531578499][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:32:03][352677531578499][375 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 12:32:03][352677531578499][375 ms][DEBUG] START check_internet [2025-08-24 12:32:03][352677531578499][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:32:04][352677531578499][703 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=176 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 176.915/176.915/176.915/0.000 ms\n [2025-08-24 12:32:04][352677531578499][703 ms][DEBUG] check_internet: online [2025-08-24 12:32:04][352677531578499][703 ms][DEBUG] END check_internet in 328 ms [2025-08-24 12:32:04][352677531578499][703 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:32:04][352677531578499][703 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531578499\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8365\"}'\'' -e'"" [2025-08-24 12:32:04][352677531578499][703 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:32:04][352677531578499][703 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531578499\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8365\"}'\'' -e'"" [2025-08-24 12:32:08][352677531578499][4671 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5cf807ff-9bb3-4d81-9fe0-6db187cfad46","id":"QR_5cf807ff-9bb3-4d81-9fe0-6db187cfad46","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:32:08][352677531578499][4827 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-08-24 12:32:08][352677531578499][4827 ms][DEBUG] END runCmdUntilRes#1 in 4123 ms [2025-08-24 12:32:08][352677531578499][4827 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:32:10][354568111344394][1 ms][INFO] === Request start === [2025-08-24 12:32:10][354568111344394][1 ms][DEBUG] START check_scloud [2025-08-24 12:32:10][354568111344394][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:32:11][354568111344394][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 21555 4973 24352620 195508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:32:11][354568111344394][299 ms][DEBUG] targetPkg: running [2025-08-24 12:32:11][354568111344394][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-24 12:32:11][354568111344394][299 ms][DEBUG] START check_boot_completed [2025-08-24 12:32:11][354568111344394][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:32:11][354568111344394][346 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:32:11][354568111344394][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:32:11][354568111344394][408 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 12:32:11][354568111344394][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 12:32:11][354568111344394][409 ms][DEBUG] START check_internet [2025-08-24 12:32:11][354568111344394][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:32:11][354568111344394][705 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=172 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 172.462/172.462/172.462/0.000 ms\n [2025-08-24 12:32:11][354568111344394][706 ms][DEBUG] check_internet: online [2025-08-24 12:32:11][354568111344394][706 ms][DEBUG] END check_internet in 297 ms [2025-08-24 12:32:11][354568111344394][706 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:32:11][354568111344394][706 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354568111344394\",\"model\":\"SM-G988B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3130\"}'\'' -e'"" [2025-08-24 12:32:11][354568111344394][706 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:32:11][354568111344394][706 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354568111344394\",\"model\":\"SM-G988B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3130\"}'\'' -e'"" [2025-08-24 12:32:15][354568111344394][4938 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e401ba9c-a76a-43e1-92f0-c2891c62d2d0","id":"QR_e401ba9c-a76a-43e1-92f0-c2891c62d2d0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:32:16][354568111344394][5095 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-24 12:32:16][354568111344394][5095 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-24 12:32:16][354568111344394][5095 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:33:03][356544761797502][0 ms][INFO] === Request start === [2025-08-24 12:33:03][356544761797502][1 ms][DEBUG] START check_scloud [2025-08-24 12:33:03][356544761797502][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:33:03][356544761797502][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 21555 4973 24468524 207576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:33:03][356544761797502][271 ms][DEBUG] targetPkg: running [2025-08-24 12:33:03][356544761797502][271 ms][DEBUG] END check_scloud in 270 ms [2025-08-24 12:33:03][356544761797502][271 ms][DEBUG] START check_boot_completed [2025-08-24 12:33:03][356544761797502][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:33:03][356544761797502][318 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:33:03][356544761797502][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:33:04][356544761797502][380 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 12:33:04][356544761797502][380 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 12:33:04][356544761797502][380 ms][DEBUG] rawBody.length=1149 [2025-08-24 12:33:04][356544761797502][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544761797502\",\"model\":\"SM-G998U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CCT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6337\"}'\'' -e'"" [2025-08-24 12:33:04][356544761797502][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:33:04][356544761797502][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544761797502\",\"model\":\"SM-G998U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CCT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6337\"}'\'' -e'"" [2025-08-24 12:33:10][356544761797502][6519 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1811e72c-6980-4d14-b15e-38f0538f9caf","id":"QR_1811e72c-6980-4d14-b15e-38f0538f9caf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:33:10][356544761797502][6675 ms][DEBUG] proc_open done in 6295 ms; code=255; res.len=3343 [2025-08-24 12:33:10][356544761797502][6675 ms][DEBUG] END runCmdUntilRes#1 in 6295 ms [2025-08-24 12:33:10][356544761797502][6676 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:34:02][350991621708441][0 ms][INFO] === Request start === [2025-08-24 12:34:02][350991621708441][1 ms][DEBUG] START check_scloud [2025-08-24 12:34:02][350991621708441][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:34:02][350991621708441][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 21555 4973 24574224 218368 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:34:02][350991621708441][282 ms][DEBUG] targetPkg: running [2025-08-24 12:34:02][350991621708441][282 ms][DEBUG] END check_scloud in 281 ms [2025-08-24 12:34:02][350991621708441][282 ms][DEBUG] START check_boot_completed [2025-08-24 12:34:02][350991621708441][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:34:02][350991621708441][329 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:34:02][350991621708441][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:34:02][350991621708441][391 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 12:34:02][350991621708441][391 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 12:34:02][350991621708441][391 ms][DEBUG] START check_internet [2025-08-24 12:34:02][350991621708441][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:34:03][350991621708441][891 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.022/200.022/200.022/0.000 ms\n [2025-08-24 12:34:03][350991621708441][891 ms][DEBUG] check_internet: online [2025-08-24 12:34:03][350991621708441][891 ms][DEBUG] END check_internet in 500 ms [2025-08-24 12:34:03][350991621708441][891 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:34:03][350991621708441][892 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350991621708441\",\"model\":\"SM-A356N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6480\"}'\'' -e'"" [2025-08-24 12:34:03][350991621708441][892 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:34:03][350991621708441][892 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350991621708441\",\"model\":\"SM-A356N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6480\"}'\'' -e'"" [2025-08-24 12:34:07][350991621708441][4906 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d8307701-ea79-4581-b796-fbd91d3c5a46","id":"QR_d8307701-ea79-4581-b796-fbd91d3c5a46","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:34:07][350991621708441][5062 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-24 12:34:07][350991621708441][5062 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-24 12:34:07][350991621708441][5062 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:35:03][357450478530914][1 ms][INFO] === Request start === [2025-08-24 12:35:03][357450478530914][1 ms][DEBUG] START check_scloud [2025-08-24 12:35:03][357450478530914][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:35:04][357450478530914][297 ms][DEBUG] SU: done in 295 ms; outu0_a118 21555 4973 24724980 230320 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:35:04][357450478530914][297 ms][DEBUG] targetPkg: running [2025-08-24 12:35:04][357450478530914][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-24 12:35:04][357450478530914][297 ms][DEBUG] START check_boot_completed [2025-08-24 12:35:04][357450478530914][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:35:04][357450478530914][343 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:35:04][357450478530914][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:35:04][357450478530914][406 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 12:35:04][357450478530914][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 12:35:04][357450478530914][406 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:35:04][357450478530914][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450478530914\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7672\"}'\'' -e'"" [2025-08-24 12:35:04][357450478530914][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:35:04][357450478530914][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450478530914\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7672\"}'\'' -e'"" [2025-08-24 12:35:08][357450478530914][4639 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f1d135f4-3ba7-4e28-8ad3-0ed30a17b1d5","id":"QR_f1d135f4-3ba7-4e28-8ad3-0ed30a17b1d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:35:08][357450478530914][4795 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-24 12:35:08][357450478530914][4795 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-24 12:35:08][357450478530914][4795 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:35:12][356130860089049][0 ms][INFO] === Request start === [2025-08-24 12:35:12][356130860089049][1 ms][DEBUG] START check_scloud [2025-08-24 12:35:12][356130860089049][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:35:12][356130860089049][270 ms][DEBUG] SU: done in 270 ms; outu0_a118 21555 4973 24892032 241064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:35:12][356130860089049][271 ms][DEBUG] targetPkg: running [2025-08-24 12:35:12][356130860089049][271 ms][DEBUG] END check_scloud in 270 ms [2025-08-24 12:35:12][356130860089049][271 ms][DEBUG] START check_boot_completed [2025-08-24 12:35:12][356130860089049][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:35:12][356130860089049][317 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:35:12][356130860089049][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:35:12][356130860089049][364 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:35:12][356130860089049][364 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 12:35:12][356130860089049][364 ms][DEBUG] rawBody.length=1149 [2025-08-24 12:35:12][356130860089049][364 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356130860089049\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3703\"}'\'' -e'"" [2025-08-24 12:35:12][356130860089049][364 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:35:12][356130860089049][364 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356130860089049\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3703\"}'\'' -e'"" [2025-08-24 12:35:15][356130860089049][3957 ms][DEBUG] proc_open done in 3593 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 12:35:15][356130860089049][3958 ms][DEBUG] END runCmdUntilRes#1 in 3593 ms [2025-08-24 12:35:15][356130860089049][3958 ms][WARN] Detected error: Process with pid 21555 either refused to load frida-agent, or terminated during injection [2025-08-24 12:35:15][356130860089049][3958 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 12:35:16][356130860089049][4113 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 12:35:16][356130860089049][4113 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 12:35:16][356130860089049][4113 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 12:35:16][356130860089049][4286 ms][DEBUG] SU: done in 172 ms; out [2025-08-24 12:35:16][356130860089049][4286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 12:35:16][356130860089049][4457 ms][DEBUG] SU: done in 171 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 12:35:18][356130860089049][6472 ms][DEBUG] START check_boot_completed [2025-08-24 12:35:18][356130860089049][6472 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:35:18][356130860089049][6519 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:35:18][356130860089049][6519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:35:18][356130860089049][6566 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:35:18][356130860089049][6566 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 12:35:21][356130860089049][9581 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 12:35:21][356130860089049][9581 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356130860089049\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3703\"}'\'' -e'"" [2025-08-24 12:35:22][356130860089049][10159 ms][DEBUG] proc_open done in 578 ms (timeout); code=4; out.len=0 err.len=50 [2025-08-24 12:35:22][356130860089049][10159 ms][DEBUG] END runCmdUntilRes#2 in 578 ms [2025-08-24 12:35:22][356130860089049][10159 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-08-24 12:36:03][356130860089049][0 ms][INFO] === Request start === [2025-08-24 12:36:03][356130860089049][1 ms][DEBUG] START check_scloud [2025-08-24 12:36:03][356130860089049][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:36:04][356130860089049][400 ms][DEBUG] SU: done in 399 ms; out [2025-08-24 12:36:04][356130860089049][400 ms][WARN] targetPkg: not running, restarting [2025-08-24 12:36:04][356130860089049][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 12:36:04][356130860089049][555 ms][DEBUG] SU: done in 155 ms; out [2025-08-24 12:36:04][356130860089049][555 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 12:36:04][356130860089049][821 ms][DEBUG] SU: done in 265 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 12:36:06][356130860089049][2836 ms][DEBUG] END check_scloud in 2835 ms [2025-08-24 12:36:06][356130860089049][2836 ms][DEBUG] START check_boot_completed [2025-08-24 12:36:06][356130860089049][2836 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:36:06][356130860089049][2883 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:36:06][356130860089049][2883 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:36:06][356130860089049][2945 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 12:36:06][356130860089049][2945 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-24 12:36:06][356130860089049][2946 ms][DEBUG] START check_internet [2025-08-24 12:36:06][356130860089049][2946 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:36:07][356130860089049][3461 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=168 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 168.568/168.568/168.568/0.000 ms\n [2025-08-24 12:36:07][356130860089049][3461 ms][DEBUG] check_internet: online [2025-08-24 12:36:07][356130860089049][3461 ms][DEBUG] END check_internet in 515 ms [2025-08-24 12:36:07][356130860089049][3461 ms][DEBUG] rawBody.length=1149 [2025-08-24 12:36:07][356130860089049][3461 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356130860089049\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4314\"}'\'' -e'"" [2025-08-24 12:36:07][356130860089049][3461 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:36:07][356130860089049][3461 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356130860089049\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4314\"}'\'' -e'"" [2025-08-24 12:36:16][356130860089049][12802 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3db6ac3d-ccc8-4f93-ae96-148ff0173687","id":"QR_3db6ac3d-ccc8-4f93-ae96-148ff0173687","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:36:16][356130860089049][12958 ms][DEBUG] proc_open done in 9497 ms; code=255; res.len=3343 [2025-08-24 12:36:16][356130860089049][12958 ms][DEBUG] END runCmdUntilRes#1 in 9497 ms [2025-08-24 12:36:16][356130860089049][12958 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:36:22][352549939918454][0 ms][INFO] === Request start === [2025-08-24 12:36:22][352549939918454][1 ms][DEBUG] START check_scloud [2025-08-24 12:36:22][352549939918454][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:36:22][352549939918454][331 ms][DEBUG] SU: done in 330 ms; outu0_a118 26507 22894 23734752 98964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:36:22][352549939918454][331 ms][DEBUG] targetPkg: running [2025-08-24 12:36:22][352549939918454][331 ms][DEBUG] END check_scloud in 330 ms [2025-08-24 12:36:22][352549939918454][331 ms][DEBUG] START check_boot_completed [2025-08-24 12:36:22][352549939918454][331 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:36:22][352549939918454][377 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 12:36:22][352549939918454][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:36:22][352549939918454][439 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 12:36:22][352549939918454][439 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-24 12:36:22][352549939918454][439 ms][DEBUG] START check_internet [2025-08-24 12:36:22][352549939918454][439 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:36:22][352549939918454][798 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=241 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 241.650/241.650/241.650/0.000 ms\n [2025-08-24 12:36:22][352549939918454][798 ms][DEBUG] check_internet: online [2025-08-24 12:36:22][352549939918454][798 ms][DEBUG] END check_internet in 359 ms [2025-08-24 12:36:22][352549939918454][799 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:36:22][352549939918454][799 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549939918454\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4032\"}'\'' -e'"" [2025-08-24 12:36:22][352549939918454][799 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:36:22][352549939918454][799 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549939918454\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4032\"}'\'' -e'"" [2025-08-24 12:36:32][352549939918454][10468 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4c0795d7-c342-488a-91eb-fc454e862e01","id":"QR_4c0795d7-c342-488a-91eb-fc454e862e01","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:36:32][352549939918454][10624 ms][DEBUG] proc_open done in 9825 ms; code=255; res.len=3343 [2025-08-24 12:36:32][352549939918454][10624 ms][DEBUG] END runCmdUntilRes#1 in 9825 ms [2025-08-24 12:36:32][352549939918454][10624 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:37:03][354747955818552][0 ms][INFO] === Request start === [2025-08-24 12:37:03][354747955818552][1 ms][DEBUG] START check_scloud [2025-08-24 12:37:03][354747955818552][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:37:03][354747955818552][480 ms][DEBUG] SU: done in 479 ms; outu0_a118 26507 22894 23796888 66636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:37:03][354747955818552][480 ms][DEBUG] targetPkg: running [2025-08-24 12:37:03][354747955818552][480 ms][DEBUG] END check_scloud in 480 ms [2025-08-24 12:37:03][354747955818552][480 ms][DEBUG] START check_boot_completed [2025-08-24 12:37:03][354747955818552][480 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:37:04][354747955818552][527 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:37:04][354747955818552][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:37:04][354747955818552][589 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 12:37:04][354747955818552][589 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 12:37:04][354747955818552][589 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:37:04][354747955818552][590 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747955818552\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8581\"}'\'' -e'"" [2025-08-24 12:37:04][354747955818552][590 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:37:04][354747955818552][590 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747955818552\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8581\"}'\'' -e'"" [2025-08-24 12:37:08][354747955818552][4885 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_021181df-2b86-4c25-8e1e-23fe56d5cf38","id":"QR_021181df-2b86-4c25-8e1e-23fe56d5cf38","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:37:08][354747955818552][5041 ms][DEBUG] proc_open done in 4451 ms; code=255; res.len=3343 [2025-08-24 12:37:08][354747955818552][5041 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-08-24 12:37:08][354747955818552][5041 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:37:10][353628424738574][1 ms][INFO] === Request start === [2025-08-24 12:37:10][353628424738574][1 ms][DEBUG] START check_scloud [2025-08-24 12:37:10][353628424738574][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:37:10][353628424738574][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 26507 22894 23979168 83308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:37:10][353628424738574][304 ms][DEBUG] targetPkg: running [2025-08-24 12:37:10][353628424738574][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-24 12:37:10][353628424738574][304 ms][DEBUG] START check_boot_completed [2025-08-24 12:37:10][353628424738574][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:37:10][353628424738574][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:37:10][353628424738574][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:37:10][353628424738574][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 12:37:10][353628424738574][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 12:37:10][353628424738574][413 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:37:10][353628424738574][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628424738574\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8480\"}'\'' -e'"" [2025-08-24 12:37:10][353628424738574][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:37:10][353628424738574][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628424738574\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8480\"}'\'' -e'"" [2025-08-24 12:37:14][353628424738574][4178 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 12:37:14][353628424738574][4334 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=107 [2025-08-24 12:37:14][353628424738574][4334 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-08-24 12:37:14][353628424738574][4334 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 12:37:14][][0 ms][INFO] === Request start === [2025-08-24 12:37:14][][1 ms][DEBUG] START check_scloud [2025-08-24 12:37:14][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:37:15][][331 ms][DEBUG] SU: done in 331 ms; outu0_a118 26507 22894 24141152 99508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:37:15][][331 ms][DEBUG] targetPkg: running [2025-08-24 12:37:15][][331 ms][DEBUG] END check_scloud in 331 ms [2025-08-24 12:37:15][][331 ms][DEBUG] START check_boot_completed [2025-08-24 12:37:15][][331 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:37:15][][378 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:37:15][][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:37:15][][441 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 12:37:15][][441 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 12:37:15][][441 ms][DEBUG] rawBody.length=1129 [2025-08-24 12:37:15][][441 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8X2020ADD\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4455\"}'\'' -e'"" [2025-08-24 12:37:15][][441 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:37:15][][441 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8X2020ADD\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4455\"}'\'' -e'"" [2025-08-24 12:37:19][][4299 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 12:37:19][][4455 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=107 [2025-08-24 12:37:19][][4455 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-24 12:37:19][][4455 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 12:38:03][355195306938613][1 ms][INFO] === Request start === [2025-08-24 12:38:03][355195306938613][1 ms][DEBUG] START check_scloud [2025-08-24 12:38:03][355195306938613][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:38:03][355195306938613][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 26507 22894 24222012 112584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:38:03][355195306938613][321 ms][DEBUG] targetPkg: running [2025-08-24 12:38:03][355195306938613][322 ms][DEBUG] END check_scloud in 320 ms [2025-08-24 12:38:03][355195306938613][322 ms][DEBUG] START check_boot_completed [2025-08-24 12:38:03][355195306938613][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:38:03][355195306938613][367 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 12:38:03][355195306938613][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:38:03][355195306938613][415 ms][DEBUG] SU: done in 49 ms; out [2025-08-24 12:38:03][355195306938613][416 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 12:38:03][355195306938613][416 ms][DEBUG] START check_internet [2025-08-24 12:38:03][355195306938613][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:38:03][355195306938613][710 ms][DEBUG] SU: done in 295 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.836/163.836/163.836/0.000 ms\n [2025-08-24 12:38:03][355195306938613][710 ms][DEBUG] check_internet: online [2025-08-24 12:38:03][355195306938613][710 ms][DEBUG] END check_internet in 295 ms [2025-08-24 12:38:03][355195306938613][710 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:38:03][355195306938613][710 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355195306938613\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2425\"}'\'' -e'"" [2025-08-24 12:38:03][355195306938613][710 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:38:03][355195306938613][710 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355195306938613\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2425\"}'\'' -e'"" [2025-08-24 12:38:08][355195306938613][4991 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_04c04fbb-98a2-4e63-a5f4-9fafdf867f50","id":"QR_04c04fbb-98a2-4e63-a5f4-9fafdf867f50","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:38:08][355195306938613][5147 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-08-24 12:38:08][355195306938613][5147 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-08-24 12:38:08][355195306938613][5147 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:38:09][352208775823654][0 ms][INFO] === Request start === [2025-08-24 12:38:09][352208775823654][1 ms][DEBUG] START check_scloud [2025-08-24 12:38:09][352208775823654][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:38:10][352208775823654][338 ms][DEBUG] SU: done in 337 ms; outu0_a118 26507 22894 24338936 125332 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:38:10][352208775823654][338 ms][DEBUG] targetPkg: running [2025-08-24 12:38:10][352208775823654][338 ms][DEBUG] END check_scloud in 338 ms [2025-08-24 12:38:10][352208775823654][338 ms][DEBUG] START check_boot_completed [2025-08-24 12:38:10][352208775823654][338 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:38:10][352208775823654][385 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:38:10][352208775823654][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:38:10][352208775823654][447 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 12:38:10][352208775823654][447 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 12:38:10][352208775823654][448 ms][DEBUG] START check_internet [2025-08-24 12:38:10][352208775823654][448 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:38:10][352208775823654][760 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=150 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 150.450/150.450/150.450/0.000 ms\n [2025-08-24 12:38:10][352208775823654][760 ms][DEBUG] check_internet: online [2025-08-24 12:38:10][352208775823654][760 ms][DEBUG] END check_internet in 312 ms [2025-08-24 12:38:10][352208775823654][760 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:38:10][352208775823654][760 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208775823654\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2047\"}'\'' -e'"" [2025-08-24 12:38:10][352208775823654][760 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:38:10][352208775823654][760 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208775823654\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2047\"}'\'' -e'"" [2025-08-24 12:38:14][352208775823654][4290 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f2c9f595-1a42-46fe-a9dc-3e12395f52a6","id":"QR_f2c9f595-1a42-46fe-a9dc-3e12395f52a6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:38:14][352208775823654][4446 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=3343 [2025-08-24 12:38:14][352208775823654][4446 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-08-24 12:38:14][352208775823654][4446 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:40:02][355857115139085][0 ms][INFO] === Request start === [2025-08-24 12:40:02][355857115139085][1 ms][DEBUG] START check_scloud [2025-08-24 12:40:02][355857115139085][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:40:02][355857115139085][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 26507 22894 24477368 137352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:40:02][355857115139085][309 ms][DEBUG] targetPkg: running [2025-08-24 12:40:02][355857115139085][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-24 12:40:02][355857115139085][309 ms][DEBUG] START check_boot_completed [2025-08-24 12:40:02][355857115139085][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:40:02][355857115139085][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:40:02][355857115139085][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:40:02][355857115139085][433 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 12:40:02][355857115139085][434 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-24 12:40:02][355857115139085][434 ms][DEBUG] START check_internet [2025-08-24 12:40:02][355857115139085][434 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:40:03][355857115139085][887 ms][DEBUG] SU: done in 454 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.064/202.064/202.064/0.000 ms\n [2025-08-24 12:40:03][355857115139085][887 ms][DEBUG] check_internet: online [2025-08-24 12:40:03][355857115139085][888 ms][DEBUG] END check_internet in 454 ms [2025-08-24 12:40:03][355857115139085][888 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:40:03][355857115139085][888 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857115139085\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9165\"}'\'' -e'"" [2025-08-24 12:40:03][355857115139085][888 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:40:03][355857115139085][888 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857115139085\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9165\"}'\'' -e'"" [2025-08-24 12:40:06][355857115139085][4604 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 12:40:06][355857115139085][4760 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=107 [2025-08-24 12:40:06][355857115139085][4761 ms][DEBUG] END runCmdUntilRes#1 in 3873 ms [2025-08-24 12:40:06][355857115139085][4761 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 12:40:07][][1 ms][INFO] === Request start === [2025-08-24 12:40:07][][1 ms][DEBUG] START check_scloud [2025-08-24 12:40:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:40:07][][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 26507 22894 24642496 144228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:40:07][][310 ms][DEBUG] targetPkg: running [2025-08-24 12:40:07][][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-24 12:40:07][][311 ms][DEBUG] START check_boot_completed [2025-08-24 12:40:07][][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:40:07][][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:40:07][][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:40:07][][405 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 12:40:07][][405 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 12:40:07][][405 ms][DEBUG] START check_internet [2025-08-24 12:40:07][][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:40:07][][654 ms][DEBUG] SU: done in 249 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=131 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 131.660/131.660/131.660/0.000 ms\n [2025-08-24 12:40:07][][654 ms][DEBUG] check_internet: online [2025-08-24 12:40:07][][654 ms][DEBUG] END check_internet in 249 ms [2025-08-24 12:40:07][][654 ms][DEBUG] rawBody.length=1129 [2025-08-24 12:40:07][][654 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CN815N3BR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9712\"}'\'' -e'"" [2025-08-24 12:40:07][][654 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:40:07][][654 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CN815N3BR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9712\"}'\'' -e'"" [2025-08-24 12:40:11][][4137 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 12:40:11][][4293 ms][DEBUG] proc_open done in 3640 ms; code=255; res.len=107 [2025-08-24 12:40:11][][4293 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-08-24 12:40:11][][4294 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 12:41:03][350938283966908][0 ms][INFO] === Request start === [2025-08-24 12:41:03][350938283966908][1 ms][DEBUG] START check_scloud [2025-08-24 12:41:03][350938283966908][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:41:04][350938283966908][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 26507 22894 24790976 148472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:41:04][350938283966908][275 ms][DEBUG] targetPkg: running [2025-08-24 12:41:04][350938283966908][275 ms][DEBUG] END check_scloud in 275 ms [2025-08-24 12:41:04][350938283966908][275 ms][DEBUG] START check_boot_completed [2025-08-24 12:41:04][350938283966908][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:41:04][350938283966908][322 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:41:04][350938283966908][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:41:04][350938283966908][385 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 12:41:04][350938283966908][385 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 12:41:04][350938283966908][385 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:41:04][350938283966908][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938283966908\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5414\"}'\'' -e'"" [2025-08-24 12:41:04][350938283966908][385 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:41:04][350938283966908][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938283966908\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5414\"}'\'' -e'"" [2025-08-24 12:41:08][350938283966908][4508 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_288522a5-d91c-46ea-87cc-339420260ec7","id":"QR_288522a5-d91c-46ea-87cc-339420260ec7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:41:08][350938283966908][4665 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-24 12:41:08][350938283966908][4665 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-24 12:41:08][350938283966908][4665 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:41:11][356969642807529][1 ms][INFO] === Request start === [2025-08-24 12:41:11][356969642807529][1 ms][DEBUG] START check_scloud [2025-08-24 12:41:11][356969642807529][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:41:11][356969642807529][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 26507 22894 24968392 160204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:41:11][356969642807529][270 ms][DEBUG] targetPkg: running [2025-08-24 12:41:11][356969642807529][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-24 12:41:11][356969642807529][270 ms][DEBUG] START check_boot_completed [2025-08-24 12:41:11][356969642807529][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:41:11][356969642807529][301 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 12:41:11][356969642807529][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:41:11][356969642807529][348 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:41:11][356969642807529][348 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 12:41:11][356969642807529][348 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:41:11][356969642807529][348 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356969642807529\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2071\"}'\'' -e'"" [2025-08-24 12:41:11][356969642807529][348 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:41:11][356969642807529][348 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356969642807529\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2071\"}'\'' -e'"" [2025-08-24 12:41:15][356969642807529][4113 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d8f39c8c-cb65-42b0-a35a-328b5e278eae","id":"QR_d8f39c8c-cb65-42b0-a35a-328b5e278eae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:41:15][356969642807529][4269 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-08-24 12:41:15][356969642807529][4269 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-08-24 12:41:15][356969642807529][4269 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:41:16][351285622404715][0 ms][INFO] === Request start === [2025-08-24 12:41:16][351285622404715][1 ms][DEBUG] START check_scloud [2025-08-24 12:41:16][351285622404715][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:41:17][351285622404715][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 26507 22894 25143120 171152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:41:17][351285622404715][253 ms][DEBUG] targetPkg: running [2025-08-24 12:41:17][351285622404715][253 ms][DEBUG] END check_scloud in 253 ms [2025-08-24 12:41:17][351285622404715][253 ms][DEBUG] START check_boot_completed [2025-08-24 12:41:17][351285622404715][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:41:17][351285622404715][300 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:41:17][351285622404715][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:41:17][351285622404715][394 ms][DEBUG] SU: done in 94 ms; out [2025-08-24 12:41:17][351285622404715][394 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-24 12:41:17][351285622404715][394 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:41:17][351285622404715][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285622404715\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7970\"}'\'' -e'"" [2025-08-24 12:41:17][351285622404715][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:41:17][351285622404715][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285622404715\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7970\"}'\'' -e'"" [2025-08-24 12:41:26][351285622404715][9251 ms][DEBUG] proc_open done in 8857 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 12:41:26][351285622404715][9251 ms][DEBUG] END runCmdUntilRes#1 in 8857 ms [2025-08-24 12:41:26][351285622404715][9251 ms][WARN] Detected error: Process with pid 26507 either refused to load frida-agent, or terminated during injection [2025-08-24 12:41:26][351285622404715][9251 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 12:41:26][351285622404715][9407 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 12:41:26][351285622404715][9407 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 12:41:26][351285622404715][9407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 12:41:26][351285622404715][9610 ms][DEBUG] SU: done in 203 ms; out [2025-08-24 12:41:26][351285622404715][9610 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 12:41:26][351285622404715][9923 ms][DEBUG] SU: done in 312 ms; out [2025-08-24 12:41:28][351285622404715][11938 ms][DEBUG] START check_boot_completed [2025-08-24 12:41:28][351285622404715][11938 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:41:28][351285622404715][11985 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:41:28][351285622404715][11985 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:41:28][351285622404715][12047 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 12:41:28][351285622404715][12047 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-24 12:41:31][351285622404715][15062 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 12:41:31][351285622404715][15062 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285622404715\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7970\"}'\'' -e'"" [2025-08-24 12:41:33][351285622404715][16562 ms][DEBUG] proc_open done in 1500 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-24 12:41:33][351285622404715][16562 ms][DEBUG] END runCmdUntilRes#2 in 1500 ms [2025-08-24 12:41:33][351285622404715][16562 ms][WARN] Detected error 2; Reboot the device [2025-08-24 12:41:33][351285622404715][16562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-24 12:41:33][351285622404715][17155 ms][DEBUG] SU: done in 593 ms; out [2025-08-24 12:42:02][351285622404715][0 ms][INFO] === Request start === [2025-08-24 12:42:02][351285622404715][1 ms][DEBUG] START check_scloud [2025-08-24 12:42:02][351285622404715][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:42:02][351285622404715][41 ms][DEBUG] SU: done in 40 ms; out [2025-08-24 12:42:02][351285622404715][41 ms][WARN] targetPkg: not running, restarting [2025-08-24 12:42:02][351285622404715][41 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 12:42:02][351285622404715][72 ms][DEBUG] SU: done in 31 ms; out [2025-08-24 12:42:02][351285622404715][72 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 12:42:02][351285622404715][103 ms][DEBUG] SU: done in 31 ms; out [2025-08-24 12:42:04][351285622404715][2118 ms][DEBUG] END check_scloud in 2118 ms [2025-08-24 12:42:04][351285622404715][2118 ms][DEBUG] START check_boot_completed [2025-08-24 12:42:04][351285622404715][2119 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:42:34][351285622404715][32611 ms][DEBUG] ADB: done in 30493 ms; out [2025-08-24 12:42:34][351285622404715][32611 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:42:34][351285622404715][32689 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 12:42:34][351285622404715][32689 ms][DEBUG] END check_boot_completed in 30571 ms [2025-08-24 12:42:34][351285622404715][32689 ms][DEBUG] START check_internet [2025-08-24 12:42:34][351285622404715][32689 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:42:34][351285622404715][32830 ms][DEBUG] SU: done in 141 ms; out [2025-08-24 12:42:34][351285622404715][32830 ms][WARN] check_internet: offline [2025-08-24 12:42:34][351285622404715][32830 ms][DEBUG] END check_internet in 141 ms [2025-08-24 12:43:02][351285622404715][1 ms][INFO] === Request start === [2025-08-24 12:43:02][351285622404715][1 ms][DEBUG] START check_scloud [2025-08-24 12:43:02][351285622404715][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:43:03][351285622404715][377 ms][DEBUG] SU: done in 376 ms; out [2025-08-24 12:43:03][351285622404715][377 ms][WARN] targetPkg: not running, restarting [2025-08-24 12:43:03][351285622404715][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 12:43:03][351285622404715][533 ms][DEBUG] SU: done in 155 ms; out [2025-08-24 12:43:03][351285622404715][533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 12:43:03][351285622404715][798 ms][DEBUG] SU: done in 265 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 12:43:05][351285622404715][2813 ms][DEBUG] END check_scloud in 2812 ms [2025-08-24 12:43:05][351285622404715][2813 ms][DEBUG] START check_boot_completed [2025-08-24 12:43:05][351285622404715][2813 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:43:05][351285622404715][2860 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:43:05][351285622404715][2860 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:43:05][351285622404715][2970 ms][DEBUG] SU: done in 109 ms; out [2025-08-24 12:43:05][351285622404715][2970 ms][DEBUG] END check_boot_completed in 156 ms [2025-08-24 12:43:05][351285622404715][2970 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:43:05][351285622404715][2970 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285622404715\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7950\"}'\'' -e'"" [2025-08-24 12:43:05][351285622404715][2970 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:43:05][351285622404715][2970 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351285622404715\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7950\"}'\'' -e'"" [2025-08-24 12:43:11][351285622404715][8999 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_19c1fd94-c79d-4d63-80c3-b8b9155dfb65","id":"QR_19c1fd94-c79d-4d63-80c3-b8b9155dfb65","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:43:12][351285622404715][9155 ms][DEBUG] proc_open done in 6185 ms; code=255; res.len=3343 [2025-08-24 12:43:12][351285622404715][9156 ms][DEBUG] END runCmdUntilRes#1 in 6186 ms [2025-08-24 12:43:12][351285622404715][9156 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:43:14][351240644237999][0 ms][INFO] === Request start === [2025-08-24 12:43:14][351240644237999][1 ms][DEBUG] START check_scloud [2025-08-24 12:43:14][351240644237999][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:43:14][351240644237999][353 ms][DEBUG] SU: done in 352 ms; outu0_a118 10709 5021 23661332 112676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:43:14][351240644237999][353 ms][DEBUG] targetPkg: running [2025-08-24 12:43:14][351240644237999][353 ms][DEBUG] END check_scloud in 352 ms [2025-08-24 12:43:14][351240644237999][353 ms][DEBUG] START check_boot_completed [2025-08-24 12:43:14][351240644237999][353 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:43:14][351240644237999][400 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:43:14][351240644237999][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:43:14][351240644237999][462 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 12:43:14][351240644237999][462 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 12:43:14][351240644237999][462 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:43:14][351240644237999][462 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240644237999\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4714\"}'\'' -e'"" [2025-08-24 12:43:14][351240644237999][463 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:43:14][351240644237999][463 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240644237999\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4714\"}'\'' -e'"" [2025-08-24 12:43:19][351240644237999][5539 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_22bad884-9c17-41f2-9be7-280eaec11198","id":"QR_22bad884-9c17-41f2-9be7-280eaec11198","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:43:20][351240644237999][5695 ms][DEBUG] proc_open done in 5232 ms; code=255; res.len=3343 [2025-08-24 12:43:20][351240644237999][5695 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-08-24 12:43:20][351240644237999][5695 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:43:21][351786693315300][0 ms][INFO] === Request start === [2025-08-24 12:43:21][351786693315300][1 ms][DEBUG] START check_scloud [2025-08-24 12:43:21][351786693315300][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:43:22][351786693315300][418 ms][DEBUG] SU: done in 417 ms; outu0_a118 10709 5021 23841832 93792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:43:22][351786693315300][418 ms][DEBUG] targetPkg: running [2025-08-24 12:43:22][351786693315300][418 ms][DEBUG] END check_scloud in 418 ms [2025-08-24 12:43:22][351786693315300][418 ms][DEBUG] START check_boot_completed [2025-08-24 12:43:22][351786693315300][418 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:43:22][351786693315300][449 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 12:43:22][351786693315300][449 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:43:22][351786693315300][512 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 12:43:22][351786693315300][512 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 12:43:22][351786693315300][512 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:43:22][351786693315300][512 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693315300\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3530\"}'\'' -e'"" [2025-08-24 12:43:22][351786693315300][512 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:43:22][351786693315300][512 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693315300\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3530\"}'\'' -e'"" [2025-08-24 12:43:23][351786693315300][1824 ms][DEBUG] proc_open done in 1312 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-24 12:43:23][351786693315300][1824 ms][DEBUG] END runCmdUntilRes#1 in 1312 ms [2025-08-24 12:43:23][351786693315300][1824 ms][WARN] Detected error: Process not found [2025-08-24 12:43:23][351786693315300][1824 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 12:43:23][351786693315300][2011 ms][DEBUG] SU: done in 187 ms; out [2025-08-24 12:43:23][351786693315300][2012 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 12:43:23][351786693315300][2012 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 12:43:23][351786693315300][2402 ms][DEBUG] SU: done in 390 ms; out [2025-08-24 12:43:23][351786693315300][2402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 12:43:24][351786693315300][2683 ms][DEBUG] SU: done in 281 ms; out [2025-08-24 12:43:26][351786693315300][4698 ms][DEBUG] START check_boot_completed [2025-08-24 12:43:26][351786693315300][4698 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:43:26][351786693315300][4745 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:43:26][351786693315300][4745 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:43:26][351786693315300][4792 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:43:26][351786693315300][4792 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 12:43:29][351786693315300][7807 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 12:43:29][351786693315300][7807 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693315300\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3530\"}'\'' -e'"" [2025-08-24 12:43:30][351786693315300][9291 ms][DEBUG] proc_open done in 1484 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-24 12:43:30][351786693315300][9291 ms][DEBUG] END runCmdUntilRes#2 in 1484 ms [2025-08-24 12:43:30][351786693315300][9291 ms][WARN] Detected error 2; Reboot the device [2025-08-24 12:43:30][351786693315300][9291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-24 12:43:31][351786693315300][9884 ms][DEBUG] SU: done in 593 ms; out [2025-08-24 12:44:02][351786693315300][0 ms][INFO] === Request start === [2025-08-24 12:44:02][351786693315300][1 ms][DEBUG] START check_scloud [2025-08-24 12:44:02][351786693315300][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:44:02][351786693315300][44 ms][DEBUG] SU: done in 43 ms; out [2025-08-24 12:44:02][351786693315300][44 ms][WARN] targetPkg: not running, restarting [2025-08-24 12:44:02][351786693315300][44 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 12:44:02][351786693315300][75 ms][DEBUG] SU: done in 31 ms; out [2025-08-24 12:44:02][351786693315300][75 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 12:44:02][351786693315300][106 ms][DEBUG] SU: done in 31 ms; out [2025-08-24 12:44:04][351786693315300][2121 ms][DEBUG] END check_scloud in 2121 ms [2025-08-24 12:44:04][351786693315300][2121 ms][DEBUG] START check_boot_completed [2025-08-24 12:44:04][351786693315300][2121 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:44:32][351786693315300][29572 ms][DEBUG] ADB: done in 27451 ms; out [2025-08-24 12:44:32][351786693315300][29572 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:44:32][351786693315300][29635 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 12:44:32][351786693315300][29635 ms][DEBUG] END check_boot_completed in 27514 ms [2025-08-24 12:44:32][351786693315300][29635 ms][DEBUG] START check_internet [2025-08-24 12:44:32][351786693315300][29635 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:44:32][351786693315300][29776 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 12:44:32][351786693315300][29776 ms][WARN] check_internet: offline [2025-08-24 12:44:32][351786693315300][29776 ms][DEBUG] END check_internet in 141 ms [2025-08-24 12:45:02][351786693315300][0 ms][INFO] === Request start === [2025-08-24 12:45:02][351786693315300][1 ms][DEBUG] START check_scloud [2025-08-24 12:45:02][351786693315300][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:45:02][351786693315300][360 ms][DEBUG] SU: done in 360 ms; out [2025-08-24 12:45:02][351786693315300][361 ms][WARN] targetPkg: not running, restarting [2025-08-24 12:45:02][351786693315300][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 12:45:02][351786693315300][517 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 12:45:02][351786693315300][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 12:45:02][351786693315300][735 ms][DEBUG] SU: done in 218 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 12:45:05][351786693315300][2750 ms][DEBUG] END check_scloud in 2750 ms [2025-08-24 12:45:05][351786693315300][2750 ms][DEBUG] START check_boot_completed [2025-08-24 12:45:05][351786693315300][2750 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:45:05][351786693315300][2797 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:45:05][351786693315300][2797 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:45:05][351786693315300][2860 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 12:45:05][351786693315300][2860 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-24 12:45:05][351786693315300][2860 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:45:05][351786693315300][2860 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693315300\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3382\"}'\'' -e'"" [2025-08-24 12:45:05][351786693315300][2860 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:45:05][351786693315300][2860 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693315300\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3382\"}'\'' -e'"" [2025-08-24 12:45:10][351786693315300][8312 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 12:45:10][351786693315300][8468 ms][DEBUG] proc_open done in 5607 ms; code=255; res.len=107 [2025-08-24 12:45:10][351786693315300][8468 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-08-24 12:45:10][351786693315300][8468 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 12:45:11][][1 ms][INFO] === Request start === [2025-08-24 12:45:11][][1 ms][DEBUG] START check_scloud [2025-08-24 12:45:11][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:45:11][][346 ms][DEBUG] SU: done in 344 ms; outu0_a118 10935 5014 23643772 120504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:45:11][][346 ms][DEBUG] targetPkg: running [2025-08-24 12:45:11][][346 ms][DEBUG] END check_scloud in 345 ms [2025-08-24 12:45:11][][346 ms][DEBUG] START check_boot_completed [2025-08-24 12:45:11][][346 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:45:11][][391 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 12:45:11][][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:45:11][][454 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 12:45:11][][454 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-24 12:45:11][][454 ms][DEBUG] rawBody.length=1129 [2025-08-24 12:45:11][][454 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W10L7DEM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1064\"}'\'' -e'"" [2025-08-24 12:45:11][][454 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:45:11][][454 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W10L7DEM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1064\"}'\'' -e'"" [2025-08-24 12:45:15][][4375 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 12:45:15][][4531 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=107 [2025-08-24 12:45:15][][4531 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-24 12:45:15][][4531 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 12:45:22][350513045986344][0 ms][INFO] === Request start === [2025-08-24 12:45:22][350513045986344][1 ms][DEBUG] START check_scloud [2025-08-24 12:45:22][350513045986344][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:45:23][350513045986344][436 ms][DEBUG] SU: done in 435 ms; outu0_a118 10935 5014 23802676 78580 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:45:23][350513045986344][436 ms][DEBUG] targetPkg: running [2025-08-24 12:45:23][350513045986344][436 ms][DEBUG] END check_scloud in 436 ms [2025-08-24 12:45:23][350513045986344][436 ms][DEBUG] START check_boot_completed [2025-08-24 12:45:23][350513045986344][436 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:45:23][350513045986344][483 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:45:23][350513045986344][483 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:45:23][350513045986344][546 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 12:45:23][350513045986344][546 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 12:45:23][350513045986344][546 ms][DEBUG] rawBody.length=1149 [2025-08-24 12:45:23][350513045986344][546 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350513045986344\",\"model\":\"SM-S928N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3600\"}'\'' -e'"" [2025-08-24 12:45:23][350513045986344][546 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:45:23][350513045986344][546 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350513045986344\",\"model\":\"SM-S928N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3600\"}'\'' -e'"" [2025-08-24 12:45:31][350513045986344][8965 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2e57cfd4-dc79-48ca-9665-e5f9461a1221","id":"QR_2e57cfd4-dc79-48ca-9665-e5f9461a1221","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:45:31][350513045986344][9121 ms][DEBUG] proc_open done in 8575 ms; code=255; res.len=3343 [2025-08-24 12:45:31][350513045986344][9121 ms][DEBUG] END runCmdUntilRes#1 in 8576 ms [2025-08-24 12:45:31][350513045986344][9122 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:46:03][350822574347236][1 ms][INFO] === Request start === [2025-08-24 12:46:03][350822574347236][1 ms][DEBUG] START check_scloud [2025-08-24 12:46:03][350822574347236][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:46:04][350822574347236][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 10935 5014 23878188 67924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:46:04][350822574347236][320 ms][DEBUG] targetPkg: running [2025-08-24 12:46:04][350822574347236][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-24 12:46:04][350822574347236][320 ms][DEBUG] START check_boot_completed [2025-08-24 12:46:04][350822574347236][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:46:04][350822574347236][367 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:46:04][350822574347236][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:46:04][350822574347236][429 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 12:46:04][350822574347236][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 12:46:04][350822574347236][429 ms][DEBUG] START check_internet [2025-08-24 12:46:04][350822574347236][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:46:04][350822574347236][976 ms][DEBUG] SU: done in 547 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.821/202.821/202.821/0.000 ms\n [2025-08-24 12:46:04][350822574347236][976 ms][DEBUG] check_internet: online [2025-08-24 12:46:04][350822574347236][976 ms][DEBUG] END check_internet in 547 ms [2025-08-24 12:46:04][350822574347236][976 ms][DEBUG] rawBody.length=1149 [2025-08-24 12:46:04][350822574347236][976 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350822574347236\",\"model\":\"SM-S926U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3692\"}'\'' -e'"" [2025-08-24 12:46:04][350822574347236][977 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:46:04][350822574347236][977 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350822574347236\",\"model\":\"SM-S926U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3692\"}'\'' -e'"" [2025-08-24 12:46:10][350822574347236][6537 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1ca7e681-9923-486b-8c4a-fa3f848d2828","id":"QR_1ca7e681-9923-486b-8c4a-fa3f848d2828","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:46:10][350822574347236][6693 ms][DEBUG] proc_open done in 5716 ms; code=255; res.len=3343 [2025-08-24 12:46:10][350822574347236][6693 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-08-24 12:46:10][350822574347236][6694 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:46:15][352404916736851][0 ms][INFO] === Request start === [2025-08-24 12:46:15][352404916736851][1 ms][DEBUG] START check_scloud [2025-08-24 12:46:15][352404916736851][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:46:15][352404916736851][353 ms][DEBUG] SU: done in 352 ms; outu0_a118 10935 5014 24003380 89868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:46:15][352404916736851][353 ms][DEBUG] targetPkg: running [2025-08-24 12:46:15][352404916736851][353 ms][DEBUG] END check_scloud in 352 ms [2025-08-24 12:46:15][352404916736851][353 ms][DEBUG] START check_boot_completed [2025-08-24 12:46:15][352404916736851][353 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:46:15][352404916736851][400 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:46:15][352404916736851][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:46:15][352404916736851][493 ms][DEBUG] SU: done in 94 ms; out [2025-08-24 12:46:15][352404916736851][493 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-24 12:46:15][352404916736851][493 ms][DEBUG] START check_internet [2025-08-24 12:46:15][352404916736851][494 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:46:15][352404916736851][806 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.455/197.455/197.455/0.000 ms\n [2025-08-24 12:46:15][352404916736851][806 ms][DEBUG] check_internet: online [2025-08-24 12:46:15][352404916736851][806 ms][DEBUG] END check_internet in 313 ms [2025-08-24 12:46:15][352404916736851][806 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:46:15][352404916736851][806 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352404916736851\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3952\"}'\'' -e'"" [2025-08-24 12:46:15][352404916736851][806 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:46:15][352404916736851][806 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352404916736851\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3952\"}'\'' -e'"" [2025-08-24 12:46:20][352404916736851][4898 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fb163f79-9fd6-4047-bc73-42035975cea3","id":"QR_fb163f79-9fd6-4047-bc73-42035975cea3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:46:20][352404916736851][5055 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-08-24 12:46:20][352404916736851][5055 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-24 12:46:20][352404916736851][5055 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:46:21][351199554419460][0 ms][INFO] === Request start === [2025-08-24 12:46:21][351199554419460][1 ms][DEBUG] START check_scloud [2025-08-24 12:46:21][351199554419460][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:46:22][351199554419460][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 10935 5014 24145980 101224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:46:22][351199554419460][315 ms][DEBUG] targetPkg: running [2025-08-24 12:46:22][351199554419460][315 ms][DEBUG] END check_scloud in 315 ms [2025-08-24 12:46:22][351199554419460][315 ms][DEBUG] START check_boot_completed [2025-08-24 12:46:22][351199554419460][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:46:22][351199554419460][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:46:22][351199554419460][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:46:22][351199554419460][425 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 12:46:22][351199554419460][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 12:46:22][351199554419460][425 ms][DEBUG] START check_internet [2025-08-24 12:46:22][351199554419460][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:46:22][351199554419460][706 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=136 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 136.333/136.333/136.333/0.000 ms\n [2025-08-24 12:46:22][351199554419460][706 ms][DEBUG] check_internet: online [2025-08-24 12:46:22][351199554419460][706 ms][DEBUG] END check_internet in 281 ms [2025-08-24 12:46:22][351199554419460][706 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:46:22][351199554419460][706 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199554419460\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4499\"}'\'' -e'"" [2025-08-24 12:46:22][351199554419460][706 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:46:22][351199554419460][706 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199554419460\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4499\"}'\'' -e'"" [2025-08-24 12:46:26][351199554419460][4314 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_08bad98a-62b8-4216-b243-0b409067e943","id":"QR_08bad98a-62b8-4216-b243-0b409067e943","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:46:26][351199554419460][4470 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-08-24 12:46:26][351199554419460][4470 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-08-24 12:46:26][351199554419460][4470 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:46:27][357962507108587][0 ms][INFO] === Request start === [2025-08-24 12:46:27][357962507108587][1 ms][DEBUG] START check_scloud [2025-08-24 12:46:27][357962507108587][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:46:27][357962507108587][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 10935 5014 24296736 110448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:46:27][357962507108587][322 ms][DEBUG] targetPkg: running [2025-08-24 12:46:27][357962507108587][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-24 12:46:27][357962507108587][322 ms][DEBUG] START check_boot_completed [2025-08-24 12:46:27][357962507108587][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:46:28][357962507108587][368 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:46:28][357962507108587][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:46:28][357962507108587][415 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:46:28][357962507108587][415 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 12:46:28][357962507108587][415 ms][DEBUG] START check_internet [2025-08-24 12:46:28][357962507108587][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:46:28][357962507108587][681 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.372/141.372/141.372/0.000 ms\n [2025-08-24 12:46:28][357962507108587][681 ms][DEBUG] check_internet: online [2025-08-24 12:46:28][357962507108587][681 ms][DEBUG] END check_internet in 265 ms [2025-08-24 12:46:28][357962507108587][681 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:46:28][357962507108587][681 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507108587\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6046\"}'\'' -e'"" [2025-08-24 12:46:28][357962507108587][681 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:46:28][357962507108587][681 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507108587\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6046\"}'\'' -e'"" [2025-08-24 12:46:32][357962507108587][4430 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_df92f852-1274-418c-88b4-ed471d413a08","id":"QR_df92f852-1274-418c-88b4-ed471d413a08","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:46:32][357962507108587][4586 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-24 12:46:32][357962507108587][4586 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-24 12:46:32][357962507108587][4586 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:53:03][350471128652988][1 ms][INFO] === Request start === [2025-08-24 12:53:03][350471128652988][1 ms][DEBUG] START check_scloud [2025-08-24 12:53:03][350471128652988][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:53:04][350471128652988][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 10935 5014 24348324 123364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:53:04][350471128652988][258 ms][DEBUG] targetPkg: running [2025-08-24 12:53:04][350471128652988][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-24 12:53:04][350471128652988][258 ms][DEBUG] START check_boot_completed [2025-08-24 12:53:04][350471128652988][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:53:04][350471128652988][289 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 12:53:04][350471128652988][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:53:04][350471128652988][337 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:53:04][350471128652988][337 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 12:53:04][350471128652988][337 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:53:04][350471128652988][337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471128652988\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6219\"}'\'' -e'"" [2025-08-24 12:53:04][350471128652988][337 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:53:04][350471128652988][337 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471128652988\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6219\"}'\'' -e'"" [2025-08-24 12:53:08][350471128652988][4741 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_99870126-4324-42e0-86cf-2e3e71b891b8","id":"QR_99870126-4324-42e0-86cf-2e3e71b891b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:53:08][350471128652988][4898 ms][DEBUG] proc_open done in 4560 ms; code=255; res.len=3343 [2025-08-24 12:53:08][350471128652988][4898 ms][DEBUG] END runCmdUntilRes#1 in 4561 ms [2025-08-24 12:53:08][350471128652988][4898 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:54:03][350938281496759][0 ms][INFO] === Request start === [2025-08-24 12:54:03][350938281496759][1 ms][DEBUG] START check_scloud [2025-08-24 12:54:03][350938281496759][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:54:04][350938281496759][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 10935 5014 24483668 134100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:54:04][350938281496759][321 ms][DEBUG] targetPkg: running [2025-08-24 12:54:04][350938281496759][321 ms][DEBUG] END check_scloud in 321 ms [2025-08-24 12:54:04][350938281496759][322 ms][DEBUG] START check_boot_completed [2025-08-24 12:54:04][350938281496759][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:54:04][350938281496759][368 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:54:04][350938281496759][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:54:04][350938281496759][415 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:54:04][350938281496759][415 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 12:54:04][350938281496759][415 ms][DEBUG] START check_internet [2025-08-24 12:54:04][350938281496759][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:54:04][350938281496759][915 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.103/200.103/200.103/0.000 ms\n [2025-08-24 12:54:04][350938281496759][915 ms][DEBUG] check_internet: online [2025-08-24 12:54:04][350938281496759][915 ms][DEBUG] END check_internet in 500 ms [2025-08-24 12:54:04][350938281496759][915 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:54:04][350938281496759][915 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938281496759\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8212\"}'\'' -e'"" [2025-08-24 12:54:04][350938281496759][915 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:54:04][350938281496759][915 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938281496759\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8212\"}'\'' -e'"" [2025-08-24 12:54:08][350938281496759][5101 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c697917f-6f46-4a43-bcce-11c4ce0bc014","id":"QR_c697917f-6f46-4a43-bcce-11c4ce0bc014","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:54:09][350938281496759][5257 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-08-24 12:54:09][350938281496759][5257 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-24 12:54:09][350938281496759][5257 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:56:03][355506800499573][1 ms][INFO] === Request start === [2025-08-24 12:56:03][355506800499573][1 ms][DEBUG] START check_scloud [2025-08-24 12:56:03][355506800499573][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:56:03][355506800499573][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 10935 5014 24636472 146076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:56:03][355506800499573][276 ms][DEBUG] targetPkg: running [2025-08-24 12:56:03][355506800499573][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-24 12:56:03][355506800499573][277 ms][DEBUG] START check_boot_completed [2025-08-24 12:56:03][355506800499573][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:56:03][355506800499573][322 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:56:03][355506800499573][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:56:03][355506800499573][369 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:56:03][355506800499573][369 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 12:56:03][355506800499573][369 ms][DEBUG] START check_internet [2025-08-24 12:56:03][355506800499573][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:56:04][355506800499573][713 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=236 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 236.557/236.557/236.557/0.000 ms\n [2025-08-24 12:56:04][355506800499573][713 ms][DEBUG] check_internet: online [2025-08-24 12:56:04][355506800499573][713 ms][DEBUG] END check_internet in 344 ms [2025-08-24 12:56:04][355506800499573][713 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:56:04][355506800499573][713 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506800499573\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5677\"}'\'' -e'"" [2025-08-24 12:56:04][355506800499573][714 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:56:04][355506800499573][714 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506800499573\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5677\"}'\'' -e'"" [2025-08-24 12:56:08][355506800499573][5055 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_377b639c-77ea-459b-aa99-6e0d0eee0b31","id":"QR_377b639c-77ea-459b-aa99-6e0d0eee0b31","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:56:08][355506800499573][5212 ms][DEBUG] proc_open done in 4498 ms; code=255; res.len=3343 [2025-08-24 12:56:08][355506800499573][5212 ms][DEBUG] END runCmdUntilRes#1 in 4498 ms [2025-08-24 12:56:08][355506800499573][5212 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:56:11][352469855807807][0 ms][INFO] === Request start === [2025-08-24 12:56:11][352469855807807][1 ms][DEBUG] START check_scloud [2025-08-24 12:56:11][352469855807807][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:56:11][352469855807807][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 10935 5014 24772864 156408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:56:11][352469855807807][263 ms][DEBUG] targetPkg: running [2025-08-24 12:56:11][352469855807807][263 ms][DEBUG] END check_scloud in 263 ms [2025-08-24 12:56:11][352469855807807][263 ms][DEBUG] START check_boot_completed [2025-08-24 12:56:11][352469855807807][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:56:11][352469855807807][310 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:56:11][352469855807807][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:56:11][352469855807807][357 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:56:11][352469855807807][357 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 12:56:11][352469855807807][357 ms][DEBUG] START check_internet [2025-08-24 12:56:11][352469855807807][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:56:11][352469855807807][669 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=207 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 207.484/207.484/207.484/0.000 ms\n [2025-08-24 12:56:11][352469855807807][669 ms][DEBUG] check_internet: online [2025-08-24 12:56:11][352469855807807][669 ms][DEBUG] END check_internet in 313 ms [2025-08-24 12:56:11][352469855807807][669 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:56:11][352469855807807][670 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469855807807\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6928\"}'\'' -e'"" [2025-08-24 12:56:11][352469855807807][670 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:56:11][352469855807807][670 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469855807807\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6928\"}'\'' -e'"" [2025-08-24 12:56:15][352469855807807][4340 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1d231a21-6682-4a49-b1a3-ee4fbc9958ba","id":"QR_1d231a21-6682-4a49-b1a3-ee4fbc9958ba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:56:15][352469855807807][4496 ms][DEBUG] proc_open done in 3826 ms; code=255; res.len=3343 [2025-08-24 12:56:15][352469855807807][4496 ms][DEBUG] END runCmdUntilRes#1 in 3826 ms [2025-08-24 12:56:15][352469855807807][4496 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:56:18][356414813599639][0 ms][INFO] === Request start === [2025-08-24 12:56:18][356414813599639][1 ms][DEBUG] START check_scloud [2025-08-24 12:56:18][356414813599639][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:56:18][356414813599639][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 10935 5014 24949252 168184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:56:18][356414813599639][272 ms][DEBUG] targetPkg: running [2025-08-24 12:56:18][356414813599639][272 ms][DEBUG] END check_scloud in 271 ms [2025-08-24 12:56:18][356414813599639][272 ms][DEBUG] START check_boot_completed [2025-08-24 12:56:18][356414813599639][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:56:18][356414813599639][319 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:56:18][356414813599639][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:56:18][356414813599639][365 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:56:18][356414813599639][365 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 12:56:18][356414813599639][365 ms][DEBUG] START check_internet [2025-08-24 12:56:18][356414813599639][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:56:18][356414813599639][740 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=262 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 262.271/262.271/262.271/0.000 ms\n [2025-08-24 12:56:18][356414813599639][741 ms][DEBUG] check_internet: online [2025-08-24 12:56:18][356414813599639][741 ms][DEBUG] END check_internet in 375 ms [2025-08-24 12:56:18][356414813599639][741 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:56:18][356414813599639][741 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414813599639\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6985\"}'\'' -e'"" [2025-08-24 12:56:18][356414813599639][741 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:56:18][356414813599639][741 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414813599639\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6985\"}'\'' -e'"" [2025-08-24 12:56:23][356414813599639][5099 ms][DEBUG] proc_open done in 4358 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 12:56:23][356414813599639][5099 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-24 12:56:23][356414813599639][5099 ms][WARN] Detected error: Process with pid 10935 either refused to load frida-agent, or terminated during injection [2025-08-24 12:56:23][356414813599639][5099 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 12:56:23][356414813599639][5239 ms][DEBUG] SU: done in 141 ms; out [2025-08-24 12:56:23][356414813599639][5239 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 12:56:23][356414813599639][5240 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 12:56:23][356414813599639][5380 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 12:56:23][356414813599639][5380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 12:56:23][356414813599639][5583 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 12:56:25][356414813599639][7598 ms][DEBUG] START check_boot_completed [2025-08-24 12:56:25][356414813599639][7598 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:56:25][356414813599639][7645 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:56:25][356414813599639][7645 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:56:25][356414813599639][7692 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:56:25][356414813599639][7692 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 12:56:28][356414813599639][10707 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 12:56:28][356414813599639][10707 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414813599639\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6985\"}'\'' -e'"" [2025-08-24 12:56:32][356414813599639][14675 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a49edd9d-ebb7-4c1a-9d3e-45ee4db29e10","id":"QR_a49edd9d-ebb7-4c1a-9d3e-45ee4db29e10","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:56:32][356414813599639][14831 ms][DEBUG] proc_open done in 4124 ms; code=255; res.len=3343 [2025-08-24 12:56:32][356414813599639][14831 ms][DEBUG] END runCmdUntilRes#2 in 4124 ms [2025-08-24 12:56:32][356414813599639][14831 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:57:03][356769546373226][0 ms][INFO] === Request start === [2025-08-24 12:57:03][356769546373226][1 ms][DEBUG] START check_scloud [2025-08-24 12:57:03][356769546373226][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:57:04][356769546373226][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 19052 5014 23507860 130076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:57:04][356769546373226][311 ms][DEBUG] targetPkg: running [2025-08-24 12:57:04][356769546373226][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-24 12:57:04][356769546373226][311 ms][DEBUG] START check_boot_completed [2025-08-24 12:57:04][356769546373226][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:57:04][356769546373226][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:57:04][356769546373226][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:57:04][356769546373226][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:57:04][356769546373226][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 12:57:04][356769546373226][404 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:57:04][356769546373226][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356769546373226\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1077\"}'\'' -e'"" [2025-08-24 12:57:04][356769546373226][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:57:04][356769546373226][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356769546373226\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1077\"}'\'' -e'"" [2025-08-24 12:57:07][356769546373226][3965 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-24 12:57:07][356769546373226][4122 ms][DEBUG] proc_open done in 3718 ms; code=255; res.len=115 [2025-08-24 12:57:07][356769546373226][4122 ms][DEBUG] END runCmdUntilRes#1 in 3718 ms [2025-08-24 12:57:07][356769546373226][4122 ms][INFO] SUCCESS response from frida (len=115) [2025-08-24 12:57:08][][0 ms][INFO] === Request start === [2025-08-24 12:57:08][][1 ms][DEBUG] START check_scloud [2025-08-24 12:57:08][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:57:08][][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 19052 5014 23646236 140632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:57:08][][314 ms][DEBUG] targetPkg: running [2025-08-24 12:57:08][][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-24 12:57:08][][314 ms][DEBUG] START check_boot_completed [2025-08-24 12:57:08][][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:57:08][][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:57:08][][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:57:08][][454 ms][DEBUG] SU: done in 94 ms; out [2025-08-24 12:57:08][][455 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-24 12:57:08][][455 ms][DEBUG] rawBody.length=1129 [2025-08-24 12:57:08][][455 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W604J5RT\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9011\"}'\'' -e'"" [2025-08-24 12:57:08][][455 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:57:08][][455 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W604J5RT\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9011\"}'\'' -e'"" [2025-08-24 12:57:12][][4063 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 12:57:12][][4219 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=107 [2025-08-24 12:57:12][][4219 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-08-24 12:57:12][][4219 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 12:57:14][356769546373226][0 ms][INFO] === Request start === [2025-08-24 12:57:14][356769546373226][1 ms][DEBUG] START check_scloud [2025-08-24 12:57:14][356769546373226][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:57:14][356769546373226][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 19052 5014 23809252 152416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:57:14][356769546373226][259 ms][DEBUG] targetPkg: running [2025-08-24 12:57:14][356769546373226][259 ms][DEBUG] END check_scloud in 259 ms [2025-08-24 12:57:14][356769546373226][259 ms][DEBUG] START check_boot_completed [2025-08-24 12:57:14][356769546373226][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:57:14][356769546373226][306 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 12:57:14][356769546373226][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:57:15][356769546373226][353 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:57:15][356769546373226][353 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 12:57:15][356769546373226][353 ms][DEBUG] rawBody.length=1149 [2025-08-24 12:57:15][356769546373226][353 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356769546373226\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1990\"}'\'' -e'"" [2025-08-24 12:57:15][356769546373226][353 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:57:15][356769546373226][353 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356769546373226\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1990\"}'\'' -e'"" [2025-08-24 12:57:20][356769546373226][5695 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_adda15ce-fcce-4396-80da-4ab27d0ba15b","id":"QR_adda15ce-fcce-4396-80da-4ab27d0ba15b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:57:20][356769546373226][5851 ms][DEBUG] proc_open done in 5499 ms; code=255; res.len=3343 [2025-08-24 12:57:20][356769546373226][5852 ms][DEBUG] END runCmdUntilRes#1 in 5499 ms [2025-08-24 12:57:20][356769546373226][5852 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:58:02][356694920764966][0 ms][INFO] === Request start === [2025-08-24 12:58:02][356694920764966][1 ms][DEBUG] START check_scloud [2025-08-24 12:58:02][356694920764966][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:58:02][356694920764966][318 ms][DEBUG] SU: done in 318 ms; outu0_a118 19052 5014 23920896 163152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:58:02][356694920764966][318 ms][DEBUG] targetPkg: running [2025-08-24 12:58:02][356694920764966][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-24 12:58:02][356694920764966][319 ms][DEBUG] START check_boot_completed [2025-08-24 12:58:02][356694920764966][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:58:02][356694920764966][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:58:02][356694920764966][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:58:02][356694920764966][412 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:58:02][356694920764966][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 12:58:02][356694920764966][412 ms][DEBUG] START check_internet [2025-08-24 12:58:02][356694920764966][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 12:58:03][356694920764966][896 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.475/202.475/202.475/0.000 ms\n [2025-08-24 12:58:03][356694920764966][896 ms][DEBUG] check_internet: online [2025-08-24 12:58:03][356694920764966][897 ms][DEBUG] END check_internet in 485 ms [2025-08-24 12:58:03][356694920764966][897 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:58:03][356694920764966][897 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356694920764966\",\"model\":\"SM-S721N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4072\"}'\'' -e'"" [2025-08-24 12:58:03][356694920764966][897 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:58:03][356694920764966][897 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356694920764966\",\"model\":\"SM-S721N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4072\"}'\'' -e'"" [2025-08-24 12:58:06][356694920764966][4770 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4ee90eed-1723-4e14-bc5b-5c0990335ea0","id":"QR_4ee90eed-1723-4e14-bc5b-5c0990335ea0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:58:07][356694920764966][4926 ms][DEBUG] proc_open done in 4029 ms; code=255; res.len=3343 [2025-08-24 12:58:07][356694920764966][4926 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-24 12:58:07][356694920764966][4926 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:59:03][350832441962927][1 ms][INFO] === Request start === [2025-08-24 12:59:03][350832441962927][1 ms][DEBUG] START check_scloud [2025-08-24 12:59:03][350832441962927][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:59:03][350832441962927][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 19052 5014 24056216 175276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:59:03][350832441962927][290 ms][DEBUG] targetPkg: running [2025-08-24 12:59:03][350832441962927][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-24 12:59:03][350832441962927][290 ms][DEBUG] START check_boot_completed [2025-08-24 12:59:03][350832441962927][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:59:03][350832441962927][337 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:59:03][350832441962927][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:59:04][350832441962927][385 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 12:59:04][350832441962927][385 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 12:59:04][350832441962927][385 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:59:04][350832441962927][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832441962927\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9011\"}'\'' -e'"" [2025-08-24 12:59:04][350832441962927][385 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:59:04][350832441962927][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832441962927\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9011\"}'\'' -e'"" [2025-08-24 12:59:08][350832441962927][4398 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f900cd27-9999-4425-9350-e5c403e447f1","id":"QR_f900cd27-9999-4425-9350-e5c403e447f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:59:08][350832441962927][4555 ms][DEBUG] proc_open done in 4169 ms; code=255; res.len=3343 [2025-08-24 12:59:08][350832441962927][4555 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-24 12:59:08][350832441962927][4555 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 12:59:10][354251677068950][0 ms][INFO] === Request start === [2025-08-24 12:59:10][354251677068950][1 ms][DEBUG] START check_scloud [2025-08-24 12:59:10][354251677068950][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 12:59:10][354251677068950][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 19052 5014 24181920 186164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 12:59:10][354251677068950][257 ms][DEBUG] targetPkg: running [2025-08-24 12:59:10][354251677068950][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-24 12:59:10][354251677068950][257 ms][DEBUG] START check_boot_completed [2025-08-24 12:59:10][354251677068950][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 12:59:11][354251677068950][303 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 12:59:11][354251677068950][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 12:59:11][354251677068950][350 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 12:59:11][354251677068950][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 12:59:11][354251677068950][350 ms][DEBUG] rawBody.length=1148 [2025-08-24 12:59:11][354251677068950][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354251677068950\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2998\"}'\'' -e'"" [2025-08-24 12:59:11][354251677068950][350 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 12:59:11][354251677068950][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354251677068950\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2998\"}'\'' -e'"" [2025-08-24 12:59:15][354251677068950][4490 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_80496947-4e82-4f6d-a508-2c9c1f378d7a","id":"QR_80496947-4e82-4f6d-a508-2c9c1f378d7a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 12:59:15][354251677068950][4646 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-08-24 12:59:15][354251677068950][4646 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-08-24 12:59:15][354251677068950][4646 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:00:31][357157887029236][1 ms][INFO] === Request start === [2025-08-24 13:00:31][357157887029236][1 ms][DEBUG] START check_scloud [2025-08-24 13:00:31][357157887029236][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:00:31][357157887029236][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 19052 5014 24341876 198232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:00:31][357157887029236][306 ms][DEBUG] targetPkg: running [2025-08-24 13:00:31][357157887029236][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-24 13:00:31][357157887029236][306 ms][DEBUG] START check_boot_completed [2025-08-24 13:00:31][357157887029236][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:00:31][357157887029236][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:00:31][357157887029236][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:00:31][357157887029236][415 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 13:00:31][357157887029236][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 13:00:31][357157887029236][416 ms][DEBUG] START check_internet [2025-08-24 13:00:31][357157887029236][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:00:31][357157887029236][838 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.705/200.705/200.705/0.000 ms\n [2025-08-24 13:00:31][357157887029236][838 ms][DEBUG] check_internet: online [2025-08-24 13:00:31][357157887029236][838 ms][DEBUG] END check_internet in 422 ms [2025-08-24 13:00:31][357157887029236][838 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:00:31][357157887029236][838 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357157887029236\",\"model\":\"SM-A326U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4472\"}'\'' -e'"" [2025-08-24 13:00:31][357157887029236][838 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:00:31][357157887029236][838 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357157887029236\",\"model\":\"SM-A326U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4472\"}'\'' -e'"" [2025-08-24 13:00:39][357157887029236][8757 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3835d69d-c3a7-480c-8372-f8ee504120df","id":"QR_3835d69d-c3a7-480c-8372-f8ee504120df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:00:39][357157887029236][8913 ms][DEBUG] proc_open done in 8075 ms; code=255; res.len=3343 [2025-08-24 13:00:39][357157887029236][8913 ms][DEBUG] END runCmdUntilRes#1 in 8075 ms [2025-08-24 13:00:39][357157887029236][8913 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:02:03][352001419145299][0 ms][INFO] === Request start === [2025-08-24 13:02:03][352001419145299][1 ms][DEBUG] START check_scloud [2025-08-24 13:02:03][352001419145299][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:02:03][352001419145299][278 ms][DEBUG] SU: done in 278 ms; outu0_a118 19052 5014 24518260 209568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:02:03][352001419145299][278 ms][DEBUG] targetPkg: running [2025-08-24 13:02:03][352001419145299][278 ms][DEBUG] END check_scloud in 278 ms [2025-08-24 13:02:03][352001419145299][279 ms][DEBUG] START check_boot_completed [2025-08-24 13:02:03][352001419145299][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:02:03][352001419145299][325 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:02:03][352001419145299][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:02:03][352001419145299][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:02:03][352001419145299][372 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:02:03][352001419145299][372 ms][DEBUG] START check_internet [2025-08-24 13:02:03][352001419145299][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:02:04][352001419145299][716 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=239 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 239.148/239.148/239.148/0.000 ms\n [2025-08-24 13:02:04][352001419145299][716 ms][DEBUG] check_internet: online [2025-08-24 13:02:04][352001419145299][716 ms][DEBUG] END check_internet in 344 ms [2025-08-24 13:02:04][352001419145299][716 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:02:04][352001419145299][716 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001419145299\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7771\"}'\'' -e'"" [2025-08-24 13:02:04][352001419145299][716 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:02:04][352001419145299][716 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352001419145299\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7771\"}'\'' -e'"" [2025-08-24 13:02:08][352001419145299][4777 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_06ba1dc1-fea1-4256-a644-1a4a6a44158c","id":"QR_06ba1dc1-fea1-4256-a644-1a4a6a44158c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:02:08][352001419145299][4933 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-24 13:02:08][352001419145299][4933 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-24 13:02:08][352001419145299][4933 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:03:02][350673972578793][1 ms][INFO] === Request start === [2025-08-24 13:03:02][350673972578793][1 ms][DEBUG] START check_scloud [2025-08-24 13:03:02][350673972578793][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:03:02][350673972578793][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 19052 5014 24628056 220904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:03:02][350673972578793][305 ms][DEBUG] targetPkg: running [2025-08-24 13:03:02][350673972578793][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-24 13:03:02][350673972578793][305 ms][DEBUG] START check_boot_completed [2025-08-24 13:03:02][350673972578793][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:03:02][350673972578793][350 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 13:03:02][350673972578793][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:03:02][350673972578793][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 13:03:02][350673972578793][413 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-24 13:03:02][350673972578793][413 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:03:02][350673972578793][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350673972578793\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9665\"}'\'' -e'"" [2025-08-24 13:03:02][350673972578793][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:03:02][350673972578793][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350673972578793\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9665\"}'\'' -e'"" [2025-08-24 13:03:06][350673972578793][4459 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f0c82bb1-5153-402c-b3dc-52f87d5e8701","id":"QR_f0c82bb1-5153-402c-b3dc-52f87d5e8701","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:03:06][350673972578793][4615 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-24 13:03:06][350673972578793][4615 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-24 13:03:06][350673972578793][4615 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:04:03][351069502513443][0 ms][INFO] === Request start === [2025-08-24 13:04:03][351069502513443][1 ms][DEBUG] START check_scloud [2025-08-24 13:04:03][351069502513443][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:04:03][351069502513443][332 ms][DEBUG] SU: done in 331 ms; outu0_a118 19052 5014 24766524 232632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:04:03][351069502513443][332 ms][DEBUG] targetPkg: running [2025-08-24 13:04:03][351069502513443][332 ms][DEBUG] END check_scloud in 331 ms [2025-08-24 13:04:03][351069502513443][332 ms][DEBUG] START check_boot_completed [2025-08-24 13:04:03][351069502513443][332 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:04:03][351069502513443][379 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:04:03][351069502513443][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:04:03][351069502513443][426 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:04:03][351069502513443][426 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 13:04:03][351069502513443][426 ms][DEBUG] START check_internet [2025-08-24 13:04:03][351069502513443][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:04:04][351069502513443][879 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.797/201.797/201.797/0.000 ms\n [2025-08-24 13:04:04][351069502513443][879 ms][DEBUG] check_internet: online [2025-08-24 13:04:04][351069502513443][879 ms][DEBUG] END check_internet in 453 ms [2025-08-24 13:04:04][351069502513443][879 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:04:04][351069502513443][879 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351069502513443\",\"model\":\"SM-M536B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1953\"}'\'' -e'"" [2025-08-24 13:04:04][351069502513443][879 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:04:04][351069502513443][879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351069502513443\",\"model\":\"SM-M536B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1953\"}'\'' -e'"" [2025-08-24 13:04:13][351069502513443][9923 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1cb0c807-cdd9-41b4-8303-9a0201de3ed6","id":"QR_1cb0c807-cdd9-41b4-8303-9a0201de3ed6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:04:13][351069502513443][10079 ms][DEBUG] proc_open done in 9200 ms; code=255; res.len=3343 [2025-08-24 13:04:13][351069502513443][10080 ms][DEBUG] END runCmdUntilRes#1 in 9200 ms [2025-08-24 13:04:13][351069502513443][10080 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:05:02][350386304818148][0 ms][INFO] === Request start === [2025-08-24 13:05:02][350386304818148][1 ms][DEBUG] START check_scloud [2025-08-24 13:05:02][350386304818148][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:05:02][350386304818148][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 19052 5014 24908964 243788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:05:02][350386304818148][328 ms][DEBUG] targetPkg: running [2025-08-24 13:05:02][350386304818148][328 ms][DEBUG] END check_scloud in 328 ms [2025-08-24 13:05:02][350386304818148][328 ms][DEBUG] START check_boot_completed [2025-08-24 13:05:02][350386304818148][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:05:02][350386304818148][375 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:05:02][350386304818148][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:05:02][350386304818148][437 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 13:05:02][350386304818148][437 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 13:05:02][350386304818148][437 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:05:02][350386304818148][437 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350386304818148\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9091\"}'\'' -e'"" [2025-08-24 13:05:02][350386304818148][437 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:05:02][350386304818148][437 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350386304818148\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9091\"}'\'' -e'"" [2025-08-24 13:05:06][350386304818148][4280 ms][DEBUG] proc_open done in 3843 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 13:05:06][350386304818148][4280 ms][DEBUG] END runCmdUntilRes#1 in 3843 ms [2025-08-24 13:05:06][350386304818148][4280 ms][WARN] Detected error: Process with pid 19052 either refused to load frida-agent, or terminated during injection [2025-08-24 13:05:06][350386304818148][4280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 13:05:06][350386304818148][4436 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 13:05:06][350386304818148][4437 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 13:05:06][350386304818148][4437 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 13:05:07][350386304818148][4561 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 13:05:07][350386304818148][4562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 13:05:07][350386304818148][4719 ms][DEBUG] SU: done in 158 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 13:05:09][350386304818148][6733 ms][DEBUG] START check_boot_completed [2025-08-24 13:05:09][350386304818148][6733 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:05:09][350386304818148][6780 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:05:09][350386304818148][6780 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:05:09][350386304818148][6827 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:05:09][350386304818148][6827 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 13:05:12][350386304818148][9841 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 13:05:12][350386304818148][9841 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350386304818148\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9091\"}'\'' -e'"" [2025-08-24 13:05:16][350386304818148][13731 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_64b86ea2-267c-4541-9418-639e9ff9f7c7","id":"QR_64b86ea2-267c-4541-9418-639e9ff9f7c7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:05:16][350386304818148][13887 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-08-24 13:05:16][350386304818148][13887 ms][DEBUG] END runCmdUntilRes#2 in 4046 ms [2025-08-24 13:05:16][350386304818148][13887 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:05:17][354529383857877][1 ms][INFO] === Request start === [2025-08-24 13:05:17][354529383857877][1 ms][DEBUG] START check_scloud [2025-08-24 13:05:17][354529383857877][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:05:17][354529383857877][236 ms][DEBUG] SU: done in 235 ms; outu0_a118 20753 5014 23666396 126656 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:05:17][354529383857877][236 ms][DEBUG] targetPkg: running [2025-08-24 13:05:17][354529383857877][236 ms][DEBUG] END check_scloud in 235 ms [2025-08-24 13:05:17][354529383857877][236 ms][DEBUG] START check_boot_completed [2025-08-24 13:05:17][354529383857877][236 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:05:17][354529383857877][267 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 13:05:17][354529383857877][267 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:05:17][354529383857877][314 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:05:17][354529383857877][314 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 13:05:17][354529383857877][314 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:05:17][354529383857877][314 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529383857877\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4814\"}'\'' -e'"" [2025-08-24 13:05:17][354529383857877][314 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:05:17][354529383857877][314 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529383857877\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4814\"}'\'' -e'"" [2025-08-24 13:05:21][354529383857877][3672 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-24 13:05:21][354529383857877][3828 ms][DEBUG] proc_open done in 3514 ms; code=255; res.len=115 [2025-08-24 13:05:21][354529383857877][3829 ms][DEBUG] END runCmdUntilRes#1 in 3514 ms [2025-08-24 13:05:21][354529383857877][3829 ms][INFO] SUCCESS response from frida (len=115) [2025-08-24 13:05:21][][0 ms][INFO] === Request start === [2025-08-24 13:05:21][][1 ms][DEBUG] START check_scloud [2025-08-24 13:05:21][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:05:22][][239 ms][DEBUG] SU: done in 238 ms; outu0_a118 20753 5014 23806756 138300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:05:22][][239 ms][DEBUG] targetPkg: running [2025-08-24 13:05:22][][239 ms][DEBUG] END check_scloud in 239 ms [2025-08-24 13:05:22][][239 ms][DEBUG] START check_boot_completed [2025-08-24 13:05:22][][239 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:05:22][][286 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:05:22][][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:05:22][][333 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:05:22][][333 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:05:22][][333 ms][DEBUG] rawBody.length=1129 [2025-08-24 13:05:22][][333 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8TB02WFMD\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9927\"}'\'' -e'"" [2025-08-24 13:05:22][][333 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:05:22][][333 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8TB02WFMD\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9927\"}'\'' -e'"" [2025-08-24 13:05:25][][3816 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 13:05:25][][3973 ms][DEBUG] proc_open done in 3640 ms; code=255; res.len=107 [2025-08-24 13:05:25][][3973 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-08-24 13:05:25][][3973 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 13:07:03][350561450293060][0 ms][INFO] === Request start === [2025-08-24 13:07:03][350561450293060][1 ms][DEBUG] START check_scloud [2025-08-24 13:07:03][350561450293060][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:07:03][350561450293060][304 ms][DEBUG] SU: done in 304 ms; outu0_a118 20753 5014 23855772 152192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:07:03][350561450293060][304 ms][DEBUG] targetPkg: running [2025-08-24 13:07:03][350561450293060][304 ms][DEBUG] END check_scloud in 304 ms [2025-08-24 13:07:03][350561450293060][304 ms][DEBUG] START check_boot_completed [2025-08-24 13:07:03][350561450293060][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:07:03][350561450293060][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 13:07:03][350561450293060][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:07:03][350561450293060][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:07:03][350561450293060][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 13:07:03][350561450293060][383 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:07:03][350561450293060][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350561450293060\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3180\"}'\'' -e'"" [2025-08-24 13:07:03][350561450293060][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:07:03][350561450293060][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350561450293060\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3180\"}'\'' -e'"" [2025-08-24 13:07:08][350561450293060][4506 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6a519977-fa80-4c28-9eea-f314dbe19c33","id":"QR_6a519977-fa80-4c28-9eea-f314dbe19c33","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:07:08][350561450293060][4663 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-24 13:07:08][350561450293060][4663 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-24 13:07:08][350561450293060][4663 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:07:11][359156947417546][0 ms][INFO] === Request start === [2025-08-24 13:07:11][359156947417546][1 ms][DEBUG] START check_scloud [2025-08-24 13:07:11][359156947417546][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:07:11][359156947417546][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 20753 5014 24017752 163344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:07:11][359156947417546][309 ms][DEBUG] targetPkg: running [2025-08-24 13:07:11][359156947417546][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-24 13:07:11][359156947417546][309 ms][DEBUG] START check_boot_completed [2025-08-24 13:07:11][359156947417546][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:07:11][359156947417546][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:07:11][359156947417546][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:07:11][359156947417546][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 13:07:11][359156947417546][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 13:07:11][359156947417546][418 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:07:11][359156947417546][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947417546\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9587\"}'\'' -e'"" [2025-08-24 13:07:11][359156947417546][419 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:07:11][359156947417546][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947417546\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9587\"}'\'' -e'"" [2025-08-24 13:07:16][359156947417546][5464 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c7870642-3cb1-4352-8eb2-0d1ea23ff563","id":"QR_c7870642-3cb1-4352-8eb2-0d1ea23ff563","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:07:16][359156947417546][5620 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-08-24 13:07:16][359156947417546][5620 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-08-24 13:07:16][359156947417546][5620 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:07:21][354401160883973][1 ms][INFO] === Request start === [2025-08-24 13:07:21][354401160883973][1 ms][DEBUG] START check_scloud [2025-08-24 13:07:21][354401160883973][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:07:22][354401160883973][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 20753 5014 24176608 174152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:07:22][354401160883973][301 ms][DEBUG] targetPkg: running [2025-08-24 13:07:22][354401160883973][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-24 13:07:22][354401160883973][301 ms][DEBUG] START check_boot_completed [2025-08-24 13:07:22][354401160883973][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:07:22][354401160883973][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:07:22][354401160883973][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:07:22][354401160883973][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:07:22][354401160883973][394 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:07:22][354401160883973][395 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:07:22][354401160883973][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354401160883973\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7131\"}'\'' -e'"" [2025-08-24 13:07:22][354401160883973][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:07:22][354401160883973][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354401160883973\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7131\"}'\'' -e'"" [2025-08-24 13:07:27][354401160883973][5768 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 13:07:27][354401160883973][5924 ms][DEBUG] proc_open done in 5529 ms; code=255; res.len=107 [2025-08-24 13:07:27][354401160883973][5924 ms][DEBUG] END runCmdUntilRes#1 in 5529 ms [2025-08-24 13:07:27][354401160883973][5924 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 13:07:28][][0 ms][INFO] === Request start === [2025-08-24 13:07:28][][1 ms][DEBUG] START check_scloud [2025-08-24 13:07:28][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:07:28][][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 20753 5014 24337476 185772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:07:28][][260 ms][DEBUG] targetPkg: running [2025-08-24 13:07:28][][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-24 13:07:28][][260 ms][DEBUG] START check_boot_completed [2025-08-24 13:07:28][][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:07:28][][305 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 13:07:28][][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:07:28][][383 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 13:07:28][][383 ms][DEBUG] END check_boot_completed in 123 ms [2025-08-24 13:07:28][][383 ms][DEBUG] rawBody.length=1130 [2025-08-24 13:07:28][][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58X90L7MRE\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5324\"}'\'' -e'"" [2025-08-24 13:07:28][][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:07:28][][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58X90L7MRE\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5324\"}'\'' -e'"" [2025-08-24 13:07:32][][4101 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 13:07:32][][4257 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=107 [2025-08-24 13:07:32][][4257 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-24 13:07:32][][4257 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 13:08:03][350178730671245][0 ms][INFO] === Request start === [2025-08-24 13:08:03][350178730671245][1 ms][DEBUG] START check_scloud [2025-08-24 13:08:03][350178730671245][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:08:03][350178730671245][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 20753 5014 24457376 196992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:08:03][350178730671245][316 ms][DEBUG] targetPkg: running [2025-08-24 13:08:03][350178730671245][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-24 13:08:03][350178730671245][316 ms][DEBUG] START check_boot_completed [2025-08-24 13:08:03][350178730671245][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:08:03][350178730671245][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:08:03][350178730671245][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:08:03][350178730671245][425 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 13:08:03][350178730671245][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 13:08:03][350178730671245][425 ms][DEBUG] START check_internet [2025-08-24 13:08:03][350178730671245][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:08:04][350178730671245][878 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.805/201.805/201.805/0.000 ms\n [2025-08-24 13:08:04][350178730671245][878 ms][DEBUG] check_internet: online [2025-08-24 13:08:04][350178730671245][878 ms][DEBUG] END check_internet in 453 ms [2025-08-24 13:08:04][350178730671245][878 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:08:04][350178730671245][878 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178730671245\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5765\"}'\'' -e'"" [2025-08-24 13:08:04][350178730671245][878 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:08:04][350178730671245][878 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178730671245\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5765\"}'\'' -e'"" [2025-08-24 13:08:08][350178730671245][4830 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bee0349a-71e0-482b-8a6c-3edff8114c9f","id":"QR_bee0349a-71e0-482b-8a6c-3edff8114c9f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:08:08][350178730671245][4986 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-24 13:08:08][350178730671245][4986 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-24 13:08:08][350178730671245][4986 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:08:11][352600220612742][0 ms][INFO] === Request start === [2025-08-24 13:08:11][352600220612742][1 ms][DEBUG] START check_scloud [2025-08-24 13:08:11][352600220612742][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:08:11][352600220612742][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 20753 5014 24626472 204920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:08:11][352600220612742][315 ms][DEBUG] targetPkg: running [2025-08-24 13:08:11][352600220612742][315 ms][DEBUG] END check_scloud in 315 ms [2025-08-24 13:08:11][352600220612742][316 ms][DEBUG] START check_boot_completed [2025-08-24 13:08:11][352600220612742][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:08:11][352600220612742][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:08:11][352600220612742][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:08:11][352600220612742][425 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 13:08:11][352600220612742][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 13:08:11][352600220612742][425 ms][DEBUG] START check_internet [2025-08-24 13:08:11][352600220612742][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:08:11][352600220612742][690 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=134 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 134.106/134.106/134.106/0.000 ms\n [2025-08-24 13:08:11][352600220612742][690 ms][DEBUG] check_internet: online [2025-08-24 13:08:11][352600220612742][690 ms][DEBUG] END check_internet in 266 ms [2025-08-24 13:08:11][352600220612742][690 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:08:11][352600220612742][690 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600220612742\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5490\"}'\'' -e'"" [2025-08-24 13:08:11][352600220612742][690 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:08:11][352600220612742][691 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600220612742\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5490\"}'\'' -e'"" [2025-08-24 13:08:15][352600220612742][4861 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_54dc2730-9243-417e-8c47-fd2fa42670c5","id":"QR_54dc2730-9243-417e-8c47-fd2fa42670c5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:08:16][352600220612742][5017 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=3343 [2025-08-24 13:08:16][352600220612742][5017 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-24 13:08:16][352600220612742][5017 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:08:19][350656771529778][0 ms][INFO] === Request start === [2025-08-24 13:08:19][350656771529778][1 ms][DEBUG] START check_scloud [2025-08-24 13:08:19][350656771529778][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:08:19][350656771529778][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 20753 5014 24763952 215872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:08:19][350656771529778][315 ms][DEBUG] targetPkg: running [2025-08-24 13:08:19][350656771529778][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-24 13:08:19][350656771529778][316 ms][DEBUG] START check_boot_completed [2025-08-24 13:08:19][350656771529778][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:08:19][350656771529778][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:08:19][350656771529778][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:08:19][350656771529778][425 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 13:08:19][350656771529778][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 13:08:19][350656771529778][425 ms][DEBUG] START check_internet [2025-08-24 13:08:19][350656771529778][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:08:20][350656771529778][784 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=232 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 232.420/232.420/232.420/0.000 ms\n [2025-08-24 13:08:20][350656771529778][784 ms][DEBUG] check_internet: online [2025-08-24 13:08:20][350656771529778][784 ms][DEBUG] END check_internet in 359 ms [2025-08-24 13:08:20][350656771529778][784 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:08:20][350656771529778][784 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350656771529778\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9408\"}'\'' -e'"" [2025-08-24 13:08:20][350656771529778][784 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:08:20][350656771529778][784 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350656771529778\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9408\"}'\'' -e'"" [2025-08-24 13:08:25][350656771529778][6439 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_854f4ef5-1a4b-4c02-b79a-15b63188148d","id":"QR_854f4ef5-1a4b-4c02-b79a-15b63188148d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:08:25][350656771529778][6595 ms][DEBUG] proc_open done in 5811 ms; code=255; res.len=3343 [2025-08-24 13:08:25][350656771529778][6595 ms][DEBUG] END runCmdUntilRes#1 in 5811 ms [2025-08-24 13:08:25][350656771529778][6595 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:09:02][355088850351749][0 ms][INFO] === Request start === [2025-08-24 13:09:02][355088850351749][1 ms][DEBUG] START check_scloud [2025-08-24 13:09:02][355088850351749][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:09:02][355088850351749][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 20753 5014 24909544 227936 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:09:02][355088850351749][302 ms][DEBUG] targetPkg: running [2025-08-24 13:09:02][355088850351749][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-24 13:09:02][355088850351749][302 ms][DEBUG] START check_boot_completed [2025-08-24 13:09:02][355088850351749][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:09:02][355088850351749][349 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:09:02][355088850351749][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:09:02][355088850351749][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 13:09:02][355088850351749][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 13:09:02][355088850351749][411 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:09:02][355088850351749][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355088850351749\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9708\"}'\'' -e'"" [2025-08-24 13:09:02][355088850351749][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:09:02][355088850351749][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355088850351749\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9708\"}'\'' -e'"" [2025-08-24 13:09:06][355088850351749][4363 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4db48c5b-d592-4821-93cc-34453f58523a","id":"QR_4db48c5b-d592-4821-93cc-34453f58523a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:09:06][355088850351749][4519 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-24 13:09:06][355088850351749][4519 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-24 13:09:06][355088850351749][4519 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:09:08][356494472050421][0 ms][INFO] === Request start === [2025-08-24 13:09:08][356494472050421][1 ms][DEBUG] START check_scloud [2025-08-24 13:09:08][356494472050421][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:09:09][356494472050421][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 20753 5014 25035764 239832 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:09:09][356494472050421][292 ms][DEBUG] targetPkg: running [2025-08-24 13:09:09][356494472050421][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-24 13:09:09][356494472050421][292 ms][DEBUG] START check_boot_completed [2025-08-24 13:09:09][356494472050421][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:09:09][356494472050421][336 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 13:09:09][356494472050421][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:09:09][356494472050421][399 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 13:09:09][356494472050421][399 ms][DEBUG] END check_boot_completed in 107 ms [2025-08-24 13:09:09][356494472050421][399 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:09:09][356494472050421][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356494472050421\",\"model\":\"SM-E156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7223\"}'\'' -e'"" [2025-08-24 13:09:09][356494472050421][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:09:09][356494472050421][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356494472050421\",\"model\":\"SM-E156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7223\"}'\'' -e'"" [2025-08-24 13:09:13][356494472050421][4117 ms][DEBUG] proc_open done in 3718 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 13:09:13][356494472050421][4117 ms][DEBUG] END runCmdUntilRes#1 in 3718 ms [2025-08-24 13:09:13][356494472050421][4117 ms][WARN] Detected error: Process with pid 20753 either refused to load frida-agent, or terminated during injection [2025-08-24 13:09:13][356494472050421][4117 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 13:09:13][356494472050421][4273 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 13:09:13][356494472050421][4273 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 13:09:13][356494472050421][4273 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 13:09:13][356494472050421][4414 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 13:09:13][356494472050421][4414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 13:09:13][356494472050421][4554 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 13:09:15][356494472050421][6569 ms][DEBUG] START check_boot_completed [2025-08-24 13:09:15][356494472050421][6569 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:09:15][356494472050421][6616 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:09:15][356494472050421][6616 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:09:15][356494472050421][6664 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 13:09:15][356494472050421][6664 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 13:09:18][356494472050421][9678 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 13:09:18][356494472050421][9678 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356494472050421\",\"model\":\"SM-E156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7223\"}'\'' -e'"" [2025-08-24 13:09:22][356494472050421][13755 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd5dffff-8c47-4c4d-9e9e-6cf7c44edc8c","id":"QR_dd5dffff-8c47-4c4d-9e9e-6cf7c44edc8c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:09:22][356494472050421][13911 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-24 13:09:22][356494472050421][13911 ms][DEBUG] END runCmdUntilRes#2 in 4233 ms [2025-08-24 13:09:22][356494472050421][13911 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:09:25][356927260422294][1 ms][INFO] === Request start === [2025-08-24 13:09:25][356927260422294][1 ms][DEBUG] START check_scloud [2025-08-24 13:09:25][356927260422294][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:09:25][356927260422294][290 ms][DEBUG] SU: done in 288 ms; outu0_a118 21895 5014 23601240 126624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:09:25][356927260422294][290 ms][DEBUG] targetPkg: running [2025-08-24 13:09:25][356927260422294][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-24 13:09:25][356927260422294][290 ms][DEBUG] START check_boot_completed [2025-08-24 13:09:25][356927260422294][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:09:25][356927260422294][336 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:09:25][356927260422294][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:09:26][356927260422294][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:09:26][356927260422294][383 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:09:26][356927260422294][383 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:09:26][356927260422294][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927260422294\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"BVO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1221\"}'\'' -e'"" [2025-08-24 13:09:26][356927260422294][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:09:26][356927260422294][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927260422294\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"BVO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1221\"}'\'' -e'"" [2025-08-24 13:09:32][356927260422294][6413 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_248298a3-2415-4b62-a571-8eeca22115b2","id":"QR_248298a3-2415-4b62-a571-8eeca22115b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:09:32][356927260422294][6569 ms][DEBUG] proc_open done in 6186 ms; code=255; res.len=3343 [2025-08-24 13:09:32][356927260422294][6569 ms][DEBUG] END runCmdUntilRes#1 in 6186 ms [2025-08-24 13:09:32][356927260422294][6569 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:10:02][357026894599350][0 ms][INFO] === Request start === [2025-08-24 13:10:02][357026894599350][1 ms][DEBUG] START check_scloud [2025-08-24 13:10:02][357026894599350][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:10:02][357026894599350][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 21895 5014 23698196 140184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:10:02][357026894599350][319 ms][DEBUG] targetPkg: running [2025-08-24 13:10:02][357026894599350][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-24 13:10:02][357026894599350][319 ms][DEBUG] START check_boot_completed [2025-08-24 13:10:02][357026894599350][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:10:02][357026894599350][366 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:10:02][357026894599350][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:10:02][357026894599350][414 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 13:10:02][357026894599350][414 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 13:10:02][357026894599350][414 ms][DEBUG] START check_internet [2025-08-24 13:10:02][357026894599350][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:10:03][357026894599350][928 ms][DEBUG] SU: done in 514 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.325/202.325/202.325/0.000 ms\n [2025-08-24 13:10:03][357026894599350][928 ms][DEBUG] check_internet: online [2025-08-24 13:10:03][357026894599350][928 ms][DEBUG] END check_internet in 514 ms [2025-08-24 13:10:03][357026894599350][928 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:10:03][357026894599350][928 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357026894599350\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6345\"}'\'' -e'"" [2025-08-24 13:10:03][357026894599350][928 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:10:03][357026894599350][928 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357026894599350\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6345\"}'\'' -e'"" [2025-08-24 13:10:07][357026894599350][4708 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0bbaf150-f1b3-49df-880c-8dfd7a91195b","id":"QR_0bbaf150-f1b3-49df-880c-8dfd7a91195b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:10:07][357026894599350][4864 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-24 13:10:07][357026894599350][4864 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-24 13:10:07][357026894599350][4864 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:10:10][358615316177370][0 ms][INFO] === Request start === [2025-08-24 13:10:10][358615316177370][1 ms][DEBUG] START check_scloud [2025-08-24 13:10:10][358615316177370][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:10:10][358615316177370][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 21895 5014 23828188 151620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:10:10][358615316177370][313 ms][DEBUG] targetPkg: running [2025-08-24 13:10:10][358615316177370][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-24 13:10:10][358615316177370][314 ms][DEBUG] START check_boot_completed [2025-08-24 13:10:10][358615316177370][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:10:10][358615316177370][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:10:10][358615316177370][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:10:10][358615316177370][423 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 13:10:10][358615316177370][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 13:10:10][358615316177370][423 ms][DEBUG] START check_internet [2025-08-24 13:10:10][358615316177370][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:10:10][358615316177370][673 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=146 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 146.791/146.791/146.791/0.000 ms\n [2025-08-24 13:10:10][358615316177370][673 ms][DEBUG] check_internet: online [2025-08-24 13:10:10][358615316177370][673 ms][DEBUG] END check_internet in 250 ms [2025-08-24 13:10:10][358615316177370][673 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:10:10][358615316177370][673 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615316177370\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8782\"}'\'' -e'"" [2025-08-24 13:10:10][358615316177370][673 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:10:10][358615316177370][673 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615316177370\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8782\"}'\'' -e'"" [2025-08-24 13:10:16][358615316177370][5968 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b4c1a6ab-fa96-412d-9acb-45245ee24d3f","id":"QR_b4c1a6ab-fa96-412d-9acb-45245ee24d3f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:10:16][358615316177370][6124 ms][DEBUG] proc_open done in 5451 ms; code=255; res.len=3343 [2025-08-24 13:10:16][358615316177370][6124 ms][DEBUG] END runCmdUntilRes#1 in 5451 ms [2025-08-24 13:10:16][358615316177370][6124 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:10:21][355317515135472][0 ms][INFO] === Request start === [2025-08-24 13:10:21][355317515135472][1 ms][DEBUG] START check_scloud [2025-08-24 13:10:21][355317515135472][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:10:21][355317515135472][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 21895 5014 23972132 162192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:10:21][355317515135472][328 ms][DEBUG] targetPkg: running [2025-08-24 13:10:21][355317515135472][328 ms][DEBUG] END check_scloud in 327 ms [2025-08-24 13:10:21][355317515135472][328 ms][DEBUG] START check_boot_completed [2025-08-24 13:10:21][355317515135472][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:10:21][355317515135472][374 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:10:21][355317515135472][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:10:21][355317515135472][422 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:10:21][355317515135472][422 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 13:10:21][355317515135472][422 ms][DEBUG] START check_internet [2025-08-24 13:10:21][355317515135472][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:10:22][355317515135472][749 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.170/202.170/202.170/0.000 ms\n [2025-08-24 13:10:22][355317515135472][750 ms][DEBUG] check_internet: online [2025-08-24 13:10:22][355317515135472][750 ms][DEBUG] END check_internet in 328 ms [2025-08-24 13:10:22][355317515135472][750 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:10:22][355317515135472][750 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355317515135472\",\"model\":\"SM-G996B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1996\"}'\'' -e'"" [2025-08-24 13:10:22][355317515135472][750 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:10:22][355317515135472][750 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355317515135472\",\"model\":\"SM-G996B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1996\"}'\'' -e'"" [2025-08-24 13:10:28][355317515135472][6607 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_26cb0dee-9e80-4ca3-9ddf-116137f522e9","id":"QR_26cb0dee-9e80-4ca3-9ddf-116137f522e9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:10:28][355317515135472][6763 ms][DEBUG] proc_open done in 6013 ms; code=255; res.len=3343 [2025-08-24 13:10:28][355317515135472][6764 ms][DEBUG] END runCmdUntilRes#1 in 6014 ms [2025-08-24 13:10:28][355317515135472][6764 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:10:33][353335860255465][0 ms][INFO] === Request start === [2025-08-24 13:10:33][353335860255465][1 ms][DEBUG] START check_scloud [2025-08-24 13:10:33][353335860255465][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:10:34][353335860255465][281 ms][DEBUG] SU: done in 281 ms; outu0_a118 21895 5014 24110564 174228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:10:34][353335860255465][281 ms][DEBUG] targetPkg: running [2025-08-24 13:10:34][353335860255465][282 ms][DEBUG] END check_scloud in 281 ms [2025-08-24 13:10:34][353335860255465][282 ms][DEBUG] START check_boot_completed [2025-08-24 13:10:34][353335860255465][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:10:34][353335860255465][328 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:10:34][353335860255465][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:10:34][353335860255465][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:10:34][353335860255465][375 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:10:34][353335860255465][375 ms][DEBUG] START check_internet [2025-08-24 13:10:34][353335860255465][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:10:34][353335860255465][703 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=219 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 219.589/219.589/219.589/0.000 ms\n [2025-08-24 13:10:34][353335860255465][703 ms][DEBUG] check_internet: online [2025-08-24 13:10:34][353335860255465][703 ms][DEBUG] END check_internet in 328 ms [2025-08-24 13:10:34][353335860255465][703 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:10:34][353335860255465][703 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353335860255465\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7104\"}'\'' -e'"" [2025-08-24 13:10:34][353335860255465][704 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:10:34][353335860255465][704 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353335860255465\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7104\"}'\'' -e'"" [2025-08-24 13:10:40][353335860255465][6061 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_81db8c07-f1d8-472b-abce-4e217039681a","id":"QR_81db8c07-f1d8-472b-abce-4e217039681a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:10:40][353335860255465][6217 ms][DEBUG] proc_open done in 5513 ms; code=255; res.len=3343 [2025-08-24 13:10:40][353335860255465][6217 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-24 13:10:40][353335860255465][6217 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:11:02][351550581527701][0 ms][INFO] === Request start === [2025-08-24 13:11:02][351550581527701][1 ms][DEBUG] START check_scloud [2025-08-24 13:11:02][351550581527701][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:11:02][351550581527701][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 21895 5014 24242660 186216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:11:02][351550581527701][308 ms][DEBUG] targetPkg: running [2025-08-24 13:11:02][351550581527701][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-24 13:11:02][351550581527701][308 ms][DEBUG] START check_boot_completed [2025-08-24 13:11:02][351550581527701][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:11:02][351550581527701][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:11:02][351550581527701][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:11:02][351550581527701][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:11:02][351550581527701][402 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 13:11:02][351550581527701][402 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:11:02][351550581527701][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351550581527701\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6870\"}'\'' -e'"" [2025-08-24 13:11:02][351550581527701][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:11:02][351550581527701][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351550581527701\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6870\"}'\'' -e'"" [2025-08-24 13:11:06][351550581527701][4572 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e25dba21-e2ef-4777-84f9-c4e6fa9600d3","id":"QR_e25dba21-e2ef-4777-84f9-c4e6fa9600d3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:11:06][351550581527701][4729 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=3343 [2025-08-24 13:11:06][351550581527701][4729 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-24 13:11:06][351550581527701][4729 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:11:09][352349696875132][0 ms][INFO] === Request start === [2025-08-24 13:11:09][352349696875132][1 ms][DEBUG] START check_scloud [2025-08-24 13:11:09][352349696875132][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:11:10][352349696875132][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 21895 5014 24378988 197988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:11:10][352349696875132][259 ms][DEBUG] targetPkg: running [2025-08-24 13:11:10][352349696875132][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-24 13:11:10][352349696875132][259 ms][DEBUG] START check_boot_completed [2025-08-24 13:11:10][352349696875132][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:11:10][352349696875132][290 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 13:11:10][352349696875132][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:11:10][352349696875132][337 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:11:10][352349696875132][337 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 13:11:10][352349696875132][337 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:11:10][352349696875132][337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349696875132\",\"model\":\"SM-G781W\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6904\"}'\'' -e'"" [2025-08-24 13:11:10][352349696875132][337 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:11:10][352349696875132][337 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349696875132\",\"model\":\"SM-G781W\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6904\"}'\'' -e'"" [2025-08-24 13:11:15][352349696875132][5445 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e36785bc-7092-4472-9e7c-12a78b4564d7","id":"QR_e36785bc-7092-4472-9e7c-12a78b4564d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:11:15][352349696875132][5601 ms][DEBUG] proc_open done in 5263 ms; code=255; res.len=3343 [2025-08-24 13:11:15][352349696875132][5601 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-08-24 13:11:15][352349696875132][5601 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:11:19][354106242562673][0 ms][INFO] === Request start === [2025-08-24 13:11:19][354106242562673][1 ms][DEBUG] START check_scloud [2025-08-24 13:11:19][354106242562673][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:11:19][354106242562673][297 ms][DEBUG] SU: done in 297 ms; outu0_a118 21895 5014 24512168 210128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:11:19][354106242562673][298 ms][DEBUG] targetPkg: running [2025-08-24 13:11:19][354106242562673][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-24 13:11:19][354106242562673][298 ms][DEBUG] START check_boot_completed [2025-08-24 13:11:19][354106242562673][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:11:19][354106242562673][343 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 13:11:19][354106242562673][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:11:19][354106242562673][421 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 13:11:19][354106242562673][421 ms][DEBUG] END check_boot_completed in 123 ms [2025-08-24 13:11:19][354106242562673][421 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:11:19][354106242562673][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106242562673\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8083\"}'\'' -e'"" [2025-08-24 13:11:19][354106242562673][421 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:11:19][354106242562673][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106242562673\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8083\"}'\'' -e'"" [2025-08-24 13:11:23][354106242562673][4139 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8f159c61-f70c-4ee6-964d-325d0f66745d","id":"QR_8f159c61-f70c-4ee6-964d-325d0f66745d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:11:23][354106242562673][4295 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-08-24 13:11:23][354106242562673][4295 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-24 13:11:23][354106242562673][4295 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:11:26][352271520672305][1 ms][INFO] === Request start === [2025-08-24 13:11:26][352271520672305][1 ms][DEBUG] START check_scloud [2025-08-24 13:11:26][352271520672305][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:11:26][352271520672305][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 21895 5014 24630156 222076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:11:26][352271520672305][280 ms][DEBUG] targetPkg: running [2025-08-24 13:11:26][352271520672305][280 ms][DEBUG] END check_scloud in 279 ms [2025-08-24 13:11:26][352271520672305][280 ms][DEBUG] START check_boot_completed [2025-08-24 13:11:26][352271520672305][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:11:26][352271520672305][312 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 13:11:26][352271520672305][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:11:26][352271520672305][374 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 13:11:26][352271520672305][374 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 13:11:26][352271520672305][374 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:11:26][352271520672305][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352271520672305\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"BST\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3183\"}'\'' -e'"" [2025-08-24 13:11:26][352271520672305][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:11:26][352271520672305][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352271520672305\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"BST\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3183\"}'\'' -e'"" [2025-08-24 13:11:33][352271520672305][7872 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8ae50d5-1e44-49f0-8815-ba5689d8d9d0","id":"QR_b8ae50d5-1e44-49f0-8815-ba5689d8d9d0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:11:34][352271520672305][8029 ms][DEBUG] proc_open done in 7654 ms; code=255; res.len=3343 [2025-08-24 13:11:34][352271520672305][8029 ms][DEBUG] END runCmdUntilRes#1 in 7654 ms [2025-08-24 13:11:34][352271520672305][8029 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:12:02][355705440779218][0 ms][INFO] === Request start === [2025-08-24 13:12:02][355705440779218][1 ms][DEBUG] START check_scloud [2025-08-24 13:12:02][355705440779218][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:12:02][355705440779218][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 21895 5014 24763432 231392 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:12:02][355705440779218][269 ms][DEBUG] targetPkg: running [2025-08-24 13:12:02][355705440779218][269 ms][DEBUG] END check_scloud in 268 ms [2025-08-24 13:12:02][355705440779218][269 ms][DEBUG] START check_boot_completed [2025-08-24 13:12:02][355705440779218][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:12:02][355705440779218][300 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 13:12:02][355705440779218][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:12:02][355705440779218][347 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:12:02][355705440779218][347 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 13:12:02][355705440779218][347 ms][DEBUG] START check_internet [2025-08-24 13:12:02][355705440779218][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:12:02][355705440779218][644 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=185 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 185.931/185.931/185.931/0.000 ms\n [2025-08-24 13:12:02][355705440779218][644 ms][DEBUG] check_internet: online [2025-08-24 13:12:02][355705440779218][644 ms][DEBUG] END check_internet in 297 ms [2025-08-24 13:12:02][355705440779218][644 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:12:02][355705440779218][644 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355705440779218\",\"model\":\"SM-S906E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5179\"}'\'' -e'"" [2025-08-24 13:12:02][355705440779218][645 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:12:02][355705440779218][645 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355705440779218\",\"model\":\"SM-S906E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5179\"}'\'' -e'"" [2025-08-24 13:12:06][355705440779218][4643 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f583af8-5797-493b-90e7-0e2d6aba5a6e","id":"QR_2f583af8-5797-493b-90e7-0e2d6aba5a6e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:12:06][355705440779218][4799 ms][DEBUG] proc_open done in 4154 ms; code=255; res.len=3343 [2025-08-24 13:12:06][355705440779218][4799 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-24 13:12:06][355705440779218][4799 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:12:08][352927940571449][0 ms][INFO] === Request start === [2025-08-24 13:12:08][352927940571449][1 ms][DEBUG] START check_scloud [2025-08-24 13:12:08][352927940571449][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:12:08][352927940571449][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 21895 5014 24910128 242784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:12:08][352927940571449][319 ms][DEBUG] targetPkg: running [2025-08-24 13:12:08][352927940571449][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-24 13:12:08][352927940571449][319 ms][DEBUG] START check_boot_completed [2025-08-24 13:12:08][352927940571449][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:12:08][352927940571449][366 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:12:08][352927940571449][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:12:08][352927940571449][413 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:12:08][352927940571449][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:12:08][352927940571449][413 ms][DEBUG] START check_internet [2025-08-24 13:12:08][352927940571449][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:12:08][352927940571449][756 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=241 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 241.065/241.065/241.065/0.000 ms\n [2025-08-24 13:12:08][352927940571449][757 ms][DEBUG] check_internet: online [2025-08-24 13:12:08][352927940571449][757 ms][DEBUG] END check_internet in 344 ms [2025-08-24 13:12:08][352927940571449][757 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:12:08][352927940571449][757 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927940571449\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5390\"}'\'' -e'"" [2025-08-24 13:12:08][352927940571449][757 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:12:08][352927940571449][757 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927940571449\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5390\"}'\'' -e'"" [2025-08-24 13:12:12][352927940571449][4365 ms][DEBUG] proc_open done in 3608 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 13:12:12][352927940571449][4365 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-08-24 13:12:12][352927940571449][4365 ms][WARN] Detected error: Process with pid 21895 either refused to load frida-agent, or terminated during injection [2025-08-24 13:12:12][352927940571449][4365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 13:12:12][352927940571449][4506 ms][DEBUG] SU: done in 141 ms; out [2025-08-24 13:12:12][352927940571449][4506 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 13:12:12][352927940571449][4506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 13:12:12][352927940571449][4631 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 13:12:12][352927940571449][4631 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 13:12:13][352927940571449][4787 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 13:12:15][352927940571449][6802 ms][DEBUG] START check_boot_completed [2025-08-24 13:12:15][352927940571449][6802 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:12:15][352927940571449][6849 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:12:15][352927940571449][6849 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:12:15][352927940571449][6896 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:12:15][352927940571449][6896 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 13:12:18][352927940571449][9910 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 13:12:18][352927940571449][9911 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927940571449\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5390\"}'\'' -e'"" [2025-08-24 13:12:21][352927940571449][13613 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 13:12:22][352927940571449][13769 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=107 [2025-08-24 13:12:22][352927940571449][13769 ms][DEBUG] END runCmdUntilRes#2 in 3859 ms [2025-08-24 13:12:22][352927940571449][13769 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 13:12:22][][0 ms][INFO] === Request start === [2025-08-24 13:12:22][][1 ms][DEBUG] START check_scloud [2025-08-24 13:12:22][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:12:22][][247 ms][DEBUG] SU: done in 246 ms; outu0_a118 23139 5014 23534748 126300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:12:22][][247 ms][DEBUG] targetPkg: running [2025-08-24 13:12:22][][247 ms][DEBUG] END check_scloud in 247 ms [2025-08-24 13:12:22][][247 ms][DEBUG] START check_boot_completed [2025-08-24 13:12:22][][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:12:22][][294 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:12:22][][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:12:22][][341 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:12:22][][341 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 13:12:22][][341 ms][DEBUG] START check_internet [2025-08-24 13:12:22][][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:12:22][][575 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.628/142.628/142.628/0.000 ms\n [2025-08-24 13:12:22][][575 ms][DEBUG] check_internet: online [2025-08-24 13:12:22][][575 ms][DEBUG] END check_internet in 234 ms [2025-08-24 13:12:22][][575 ms][DEBUG] rawBody.length=1129 [2025-08-24 13:12:22][][575 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9ZY40V9SPE\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7207\"}'\'' -e'"" [2025-08-24 13:12:22][][575 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:12:22][][575 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9ZY40V9SPE\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7207\"}'\'' -e'"" [2025-08-24 13:12:26][][3918 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 13:12:26][][4074 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=107 [2025-08-24 13:12:26][][4074 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-08-24 13:12:26][][4074 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 13:12:27][350250411931477][0 ms][INFO] === Request start === [2025-08-24 13:12:27][350250411931477][1 ms][DEBUG] START check_scloud [2025-08-24 13:12:27][350250411931477][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:12:27][350250411931477][257 ms][DEBUG] SU: done in 257 ms; outu0_a118 23139 5014 23665828 137284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:12:27][350250411931477][258 ms][DEBUG] targetPkg: running [2025-08-24 13:12:27][350250411931477][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-24 13:12:27][350250411931477][258 ms][DEBUG] START check_boot_completed [2025-08-24 13:12:27][350250411931477][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:12:27][350250411931477][304 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:12:27][350250411931477][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:12:27][350250411931477][351 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:12:27][350250411931477][351 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 13:12:27][350250411931477][351 ms][DEBUG] START check_internet [2025-08-24 13:12:27][350250411931477][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:12:27][350250411931477][601 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=146 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 146.750/146.750/146.750/0.000 ms\n [2025-08-24 13:12:27][350250411931477][602 ms][DEBUG] check_internet: online [2025-08-24 13:12:27][350250411931477][602 ms][DEBUG] END check_internet in 250 ms [2025-08-24 13:12:27][350250411931477][602 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:12:27][350250411931477][602 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250411931477\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5905\"}'\'' -e'"" [2025-08-24 13:12:27][350250411931477][602 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:12:27][350250411931477][602 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250411931477\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5905\"}'\'' -e'"" [2025-08-24 13:12:31][350250411931477][3913 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 13:12:31][350250411931477][4069 ms][DEBUG] proc_open done in 3467 ms; code=255; res.len=107 [2025-08-24 13:12:31][350250411931477][4069 ms][DEBUG] END runCmdUntilRes#1 in 3467 ms [2025-08-24 13:12:31][350250411931477][4069 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 13:12:31][][0 ms][INFO] === Request start === [2025-08-24 13:12:31][][1 ms][DEBUG] START check_scloud [2025-08-24 13:12:31][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:12:31][][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 23139 5014 23817592 150544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:12:31][][252 ms][DEBUG] targetPkg: running [2025-08-24 13:12:31][][252 ms][DEBUG] END check_scloud in 251 ms [2025-08-24 13:12:31][][252 ms][DEBUG] START check_boot_completed [2025-08-24 13:12:31][][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:12:31][][283 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 13:12:31][][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:12:31][][330 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:12:31][][330 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 13:12:31][][330 ms][DEBUG] START check_internet [2025-08-24 13:12:31][][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:12:32][][580 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=139 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 139.150/139.150/139.150/0.000 ms\n [2025-08-24 13:12:32][][580 ms][DEBUG] check_internet: online [2025-08-24 13:12:32][][580 ms][DEBUG] END check_internet in 250 ms [2025-08-24 13:12:32][][580 ms][DEBUG] rawBody.length=1129 [2025-08-24 13:12:32][][580 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX9157GNX\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8074\"}'\'' -e'"" [2025-08-24 13:12:32][][581 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:12:32][][581 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX9157GNX\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8074\"}'\'' -e'"" [2025-08-24 13:12:35][][4235 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 13:12:35][][4391 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=107 [2025-08-24 13:12:35][][4391 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-24 13:12:35][][4391 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 13:13:02][352133644980933][0 ms][INFO] === Request start === [2025-08-24 13:13:02][352133644980933][1 ms][DEBUG] START check_scloud [2025-08-24 13:13:02][352133644980933][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:13:03][352133644980933][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 23139 5014 23841920 162392 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:13:03][352133644980933][300 ms][DEBUG] targetPkg: running [2025-08-24 13:13:03][352133644980933][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-24 13:13:03][352133644980933][300 ms][DEBUG] START check_boot_completed [2025-08-24 13:13:03][352133644980933][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:13:03][352133644980933][331 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 13:13:03][352133644980933][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:13:03][352133644980933][378 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:13:03][352133644980933][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 13:13:03][352133644980933][378 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:13:03][352133644980933][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352133644980933\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2063\"}'\'' -e'"" [2025-08-24 13:13:03][352133644980933][378 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:13:03][352133644980933][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352133644980933\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2063\"}'\'' -e'"" [2025-08-24 13:13:07][352133644980933][4252 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_401d759f-b7eb-4969-b29c-db454af6df5d","id":"QR_401d759f-b7eb-4969-b29c-db454af6df5d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:13:07][352133644980933][4408 ms][DEBUG] proc_open done in 4029 ms; code=255; res.len=3343 [2025-08-24 13:13:07][352133644980933][4408 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-24 13:13:07][352133644980933][4408 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:13:10][355707113004221][0 ms][INFO] === Request start === [2025-08-24 13:13:10][355707113004221][1 ms][DEBUG] START check_scloud [2025-08-24 13:13:10][355707113004221][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:13:10][355707113004221][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 23139 5014 23986568 174224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:13:10][355707113004221][310 ms][DEBUG] targetPkg: running [2025-08-24 13:13:10][355707113004221][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-24 13:13:10][355707113004221][310 ms][DEBUG] START check_boot_completed [2025-08-24 13:13:10][355707113004221][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:13:10][355707113004221][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:13:10][355707113004221][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:13:10][355707113004221][405 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 13:13:10][355707113004221][405 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 13:13:10][355707113004221][405 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:13:10][355707113004221][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707113004221\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1908\"}'\'' -e'"" [2025-08-24 13:13:10][355707113004221][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:13:10][355707113004221][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707113004221\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1908\"}'\'' -e'"" [2025-08-24 13:13:15][355707113004221][5652 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_867a854e-1c20-4f4a-9372-672075e23b8b","id":"QR_867a854e-1c20-4f4a-9372-672075e23b8b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:13:16][355707113004221][5808 ms][DEBUG] proc_open done in 5403 ms; code=255; res.len=3343 [2025-08-24 13:13:16][355707113004221][5808 ms][DEBUG] END runCmdUntilRes#1 in 5403 ms [2025-08-24 13:13:16][355707113004221][5808 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:13:20][353475121767146][0 ms][INFO] === Request start === [2025-08-24 13:13:20][353475121767146][1 ms][DEBUG] START check_scloud [2025-08-24 13:13:20][353475121767146][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:13:20][353475121767146][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 23139 5014 24147600 184552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:13:20][353475121767146][273 ms][DEBUG] targetPkg: running [2025-08-24 13:13:20][353475121767146][273 ms][DEBUG] END check_scloud in 273 ms [2025-08-24 13:13:20][353475121767146][273 ms][DEBUG] START check_boot_completed [2025-08-24 13:13:20][353475121767146][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:13:20][353475121767146][320 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:13:20][353475121767146][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:13:20][353475121767146][367 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:13:20][353475121767146][367 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:13:20][353475121767146][367 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:13:20][353475121767146][367 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475121767146\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3069\"}'\'' -e'"" [2025-08-24 13:13:20][353475121767146][367 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:13:20][353475121767146][367 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475121767146\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3069\"}'\'' -e'"" [2025-08-24 13:13:24][353475121767146][4459 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a25d8d72-8e1e-4bd5-b4b1-53f70ef24930","id":"QR_a25d8d72-8e1e-4bd5-b4b1-53f70ef24930","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:13:24][353475121767146][4616 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-08-24 13:13:24][353475121767146][4616 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-24 13:13:24][353475121767146][4616 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:13:26][354890382286876][0 ms][INFO] === Request start === [2025-08-24 13:13:26][354890382286876][1 ms][DEBUG] START check_scloud [2025-08-24 13:13:26][354890382286876][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:13:26][354890382286876][256 ms][DEBUG] SU: done in 256 ms; outu0_a118 23139 5014 24268780 196528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:13:26][354890382286876][257 ms][DEBUG] targetPkg: running [2025-08-24 13:13:26][354890382286876][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-24 13:13:26][354890382286876][257 ms][DEBUG] START check_boot_completed [2025-08-24 13:13:26][354890382286876][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:13:26][354890382286876][303 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:13:26][354890382286876][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:13:26][354890382286876][350 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:13:26][354890382286876][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:13:26][354890382286876][350 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:13:26][354890382286876][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354890382286876\",\"model\":\"SM-A125F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6682\"}'\'' -e'"" [2025-08-24 13:13:26][354890382286876][350 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:13:26][354890382286876][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354890382286876\",\"model\":\"SM-A125F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6682\"}'\'' -e'"" [2025-08-24 13:13:30][354890382286876][4068 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8742f03-5d1b-4d55-a0c2-c9521b72620b","id":"QR_e8742f03-5d1b-4d55-a0c2-c9521b72620b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:13:30][354890382286876][4224 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-08-24 13:13:30][354890382286876][4224 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-24 13:13:30][354890382286876][4224 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:13:32][354255812283069][1 ms][INFO] === Request start === [2025-08-24 13:13:32][354255812283069][1 ms][DEBUG] START check_scloud [2025-08-24 13:13:32][354255812283069][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:13:32][354255812283069][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 23139 5014 24417360 207496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:13:32][354255812283069][298 ms][DEBUG] targetPkg: running [2025-08-24 13:13:32][354255812283069][298 ms][DEBUG] END check_scloud in 296 ms [2025-08-24 13:13:32][354255812283069][298 ms][DEBUG] START check_boot_completed [2025-08-24 13:13:32][354255812283069][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:13:32][354255812283069][344 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:13:32][354255812283069][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:13:32][354255812283069][407 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 13:13:32][354255812283069][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 13:13:32][354255812283069][407 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:13:32][354255812283069][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255812283069\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KSA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8940\"}'\'' -e'"" [2025-08-24 13:13:32][354255812283069][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:13:32][354255812283069][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255812283069\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KSA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8940\"}'\'' -e'"" [2025-08-24 13:13:36][354255812283069][4124 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_76f1ccba-ea85-4803-8492-bd9c6a2ce8fb","id":"QR_76f1ccba-ea85-4803-8492-bd9c6a2ce8fb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:13:36][354255812283069][4281 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-08-24 13:13:36][354255812283069][4281 ms][DEBUG] END runCmdUntilRes#1 in 3873 ms [2025-08-24 13:13:36][354255812283069][4281 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:14:04][352053267871807][0 ms][INFO] === Request start === [2025-08-24 13:14:04][352053267871807][1 ms][DEBUG] START check_scloud [2025-08-24 13:14:04][352053267871807][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:14:04][352053267871807][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 23139 5014 24512108 218548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:14:04][352053267871807][316 ms][DEBUG] targetPkg: running [2025-08-24 13:14:04][352053267871807][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-24 13:14:04][352053267871807][316 ms][DEBUG] START check_boot_completed [2025-08-24 13:14:04][352053267871807][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:14:04][352053267871807][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:14:04][352053267871807][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:14:04][352053267871807][410 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 13:14:04][352053267871807][410 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 13:14:04][352053267871807][410 ms][DEBUG] START check_internet [2025-08-24 13:14:04][352053267871807][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:14:05][352053267871807][722 ms][DEBUG] SU: done in 311 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=207 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 207.746/207.746/207.746/0.000 ms\n [2025-08-24 13:14:05][352053267871807][722 ms][DEBUG] check_internet: online [2025-08-24 13:14:05][352053267871807][722 ms][DEBUG] END check_internet in 312 ms [2025-08-24 13:14:05][352053267871807][722 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:14:05][352053267871807][722 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053267871807\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4052\"}'\'' -e'"" [2025-08-24 13:14:05][352053267871807][722 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:14:05][352053267871807][722 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053267871807\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4052\"}'\'' -e'"" [2025-08-24 13:14:10][352053267871807][5970 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_238dbd67-b924-4e85-a0a7-6b952d77c9c5","id":"QR_238dbd67-b924-4e85-a0a7-6b952d77c9c5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:14:10][352053267871807][6126 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-08-24 13:14:10][352053267871807][6126 ms][DEBUG] END runCmdUntilRes#1 in 5405 ms [2025-08-24 13:14:10][352053267871807][6126 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:14:14][358212587006700][0 ms][INFO] === Request start === [2025-08-24 13:14:14][358212587006700][0 ms][DEBUG] START check_scloud [2025-08-24 13:14:14][358212587006700][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:14:14][358212587006700][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 23139 5014 24622760 230912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:14:14][358212587006700][311 ms][DEBUG] targetPkg: running [2025-08-24 13:14:14][358212587006700][311 ms][DEBUG] END check_scloud in 311 ms [2025-08-24 13:14:14][358212587006700][311 ms][DEBUG] START check_boot_completed [2025-08-24 13:14:14][358212587006700][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:14:14][358212587006700][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:14:14][358212587006700][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:14:14][358212587006700][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:14:14][358212587006700][405 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 13:14:14][358212587006700][405 ms][DEBUG] START check_internet [2025-08-24 13:14:14][358212587006700][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:14:15][358212587006700][686 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=166 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 166.595/166.595/166.595/0.000 ms\n [2025-08-24 13:14:15][358212587006700][686 ms][DEBUG] check_internet: online [2025-08-24 13:14:15][358212587006700][686 ms][DEBUG] END check_internet in 281 ms [2025-08-24 13:14:15][358212587006700][686 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:14:15][358212587006700][686 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212587006700\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2789\"}'\'' -e'"" [2025-08-24 13:14:15][358212587006700][686 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:14:15][358212587006700][686 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212587006700\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2789\"}'\'' -e'"" [2025-08-24 13:14:18][358212587006700][4326 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c2147232-ccb5-4410-b5f0-86c5d96ffef8","id":"QR_c2147232-ccb5-4410-b5f0-86c5d96ffef8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:14:18][358212587006700][4482 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=3343 [2025-08-24 13:14:18][358212587006700][4482 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-24 13:14:18][358212587006700][4482 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:14:20][354916446809559][0 ms][INFO] === Request start === [2025-08-24 13:14:20][354916446809559][1 ms][DEBUG] START check_scloud [2025-08-24 13:14:20][354916446809559][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:14:20][354916446809559][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 23139 5014 24748976 241876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:14:20][354916446809559][324 ms][DEBUG] targetPkg: running [2025-08-24 13:14:20][354916446809559][324 ms][DEBUG] END check_scloud in 324 ms [2025-08-24 13:14:20][354916446809559][324 ms][DEBUG] START check_boot_completed [2025-08-24 13:14:20][354916446809559][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:14:20][354916446809559][371 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:14:20][354916446809559][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:14:20][354916446809559][449 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 13:14:20][354916446809559][449 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-24 13:14:20][354916446809559][449 ms][DEBUG] START check_internet [2025-08-24 13:14:20][354916446809559][449 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:14:21][354916446809559][808 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=256 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 256.789/256.789/256.789/0.000 ms\n [2025-08-24 13:14:21][354916446809559][808 ms][DEBUG] check_internet: online [2025-08-24 13:14:21][354916446809559][809 ms][DEBUG] END check_internet in 360 ms [2025-08-24 13:14:21][354916446809559][809 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:14:21][354916446809559][809 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916446809559\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5454\"}'\'' -e'"" [2025-08-24 13:14:21][354916446809559][809 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:14:21][354916446809559][809 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916446809559\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5454\"}'\'' -e'"" [2025-08-24 13:14:24][354916446809559][4479 ms][DEBUG] proc_open done in 3670 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 13:14:24][354916446809559][4479 ms][DEBUG] END runCmdUntilRes#1 in 3670 ms [2025-08-24 13:14:24][354916446809559][4479 ms][WARN] Detected error: Process with pid 23139 either refused to load frida-agent, or terminated during injection [2025-08-24 13:14:24][354916446809559][4479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 13:14:24][354916446809559][4620 ms][DEBUG] SU: done in 141 ms; out [2025-08-24 13:14:24][354916446809559][4620 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 13:14:24][354916446809559][4620 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 13:14:25][354916446809559][4745 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 13:14:25][354916446809559][4745 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 13:14:25][354916446809559][4901 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 13:14:27][354916446809559][6916 ms][DEBUG] START check_boot_completed [2025-08-24 13:14:27][354916446809559][6916 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:14:27][354916446809559][6963 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:14:27][354916446809559][6963 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:14:27][354916446809559][7010 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:14:27][354916446809559][7010 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 13:14:30][354916446809559][10025 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 13:14:30][354916446809559][10025 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916446809559\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5454\"}'\'' -e'"" [2025-08-24 13:14:34][354916446809559][13883 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c76560df-2a09-402a-899d-c997b2640a89","id":"QR_c76560df-2a09-402a-899d-c997b2640a89","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:14:34][354916446809559][14039 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-24 13:14:34][354916446809559][14039 ms][DEBUG] END runCmdUntilRes#2 in 4015 ms [2025-08-24 13:14:34][354916446809559][14040 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:15:04][352755851455264][1 ms][INFO] === Request start === [2025-08-24 13:15:04][352755851455264][1 ms][DEBUG] START check_scloud [2025-08-24 13:15:04][352755851455264][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:15:04][352755851455264][272 ms][DEBUG] SU: done in 270 ms; outu0_a118 24356 5014 23520632 128708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:15:04][352755851455264][272 ms][DEBUG] targetPkg: running [2025-08-24 13:15:04][352755851455264][272 ms][DEBUG] END check_scloud in 271 ms [2025-08-24 13:15:04][352755851455264][272 ms][DEBUG] START check_boot_completed [2025-08-24 13:15:04][352755851455264][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:15:04][352755851455264][317 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 13:15:04][352755851455264][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:15:04][352755851455264][363 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:15:04][352755851455264][363 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-24 13:15:04][352755851455264][363 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:15:04][352755851455264][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352755851455264\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EON\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3454\"}'\'' -e'"" [2025-08-24 13:15:04][352755851455264][363 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:15:04][352755851455264][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352755851455264\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EON\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3454\"}'\'' -e'"" [2025-08-24 13:15:10][352755851455264][6549 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c2dc235a-bfd8-41cf-b281-8efd883193be","id":"QR_c2dc235a-bfd8-41cf-b281-8efd883193be","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:15:11][352755851455264][6706 ms][DEBUG] proc_open done in 6342 ms; code=255; res.len=3343 [2025-08-24 13:15:11][352755851455264][6706 ms][DEBUG] END runCmdUntilRes#1 in 6342 ms [2025-08-24 13:15:11][352755851455264][6706 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:15:15][355857115449211][0 ms][INFO] === Request start === [2025-08-24 13:15:15][355857115449211][1 ms][DEBUG] START check_scloud [2025-08-24 13:15:15][355857115449211][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:15:16][355857115449211][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 24356 5014 23662912 139384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:15:16][355857115449211][317 ms][DEBUG] targetPkg: running [2025-08-24 13:15:16][355857115449211][317 ms][DEBUG] END check_scloud in 317 ms [2025-08-24 13:15:16][355857115449211][317 ms][DEBUG] START check_boot_completed [2025-08-24 13:15:16][355857115449211][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:15:16][355857115449211][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:15:16][355857115449211][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:15:16][355857115449211][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:15:16][355857115449211][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:15:16][355857115449211][411 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:15:16][355857115449211][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857115449211\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1144\"}'\'' -e'"" [2025-08-24 13:15:16][355857115449211][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:15:16][355857115449211][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857115449211\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1144\"}'\'' -e'"" [2025-08-24 13:15:20][355857115449211][4550 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_49aab8ef-ecd8-42f1-9c36-c7d2baca0a86","id":"QR_49aab8ef-ecd8-42f1-9c36-c7d2baca0a86","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:15:20][355857115449211][4707 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-08-24 13:15:20][355857115449211][4707 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-08-24 13:15:20][355857115449211][4707 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:15:22][355382707431600][0 ms][INFO] === Request start === [2025-08-24 13:15:22][355382707431600][1 ms][DEBUG] START check_scloud [2025-08-24 13:15:22][355382707431600][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:15:22][355382707431600][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 24356 5014 23840200 151084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:15:22][355382707431600][306 ms][DEBUG] targetPkg: running [2025-08-24 13:15:22][355382707431600][306 ms][DEBUG] END check_scloud in 306 ms [2025-08-24 13:15:22][355382707431600][306 ms][DEBUG] START check_boot_completed [2025-08-24 13:15:22][355382707431600][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:15:22][355382707431600][337 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 13:15:22][355382707431600][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:15:22][355382707431600][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:15:22][355382707431600][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 13:15:22][355382707431600][384 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:15:22][355382707431600][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382707431600\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9595\"}'\'' -e'"" [2025-08-24 13:15:22][355382707431600][384 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:15:22][355382707431600][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382707431600\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9595\"}'\'' -e'"" [2025-08-24 13:15:26][355382707431600][4024 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_920b06c6-a324-4577-a083-a8b72d581b52","id":"QR_920b06c6-a324-4577-a083-a8b72d581b52","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:15:26][355382707431600][4180 ms][DEBUG] proc_open done in 3796 ms; code=255; res.len=3343 [2025-08-24 13:15:26][355382707431600][4180 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-24 13:15:26][355382707431600][4180 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:15:29][359496124846590][0 ms][INFO] === Request start === [2025-08-24 13:15:29][359496124846590][1 ms][DEBUG] START check_scloud [2025-08-24 13:15:29][359496124846590][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:15:29][359496124846590][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 24356 5014 23990828 161540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:15:29][359496124846590][282 ms][DEBUG] targetPkg: running [2025-08-24 13:15:29][359496124846590][282 ms][DEBUG] END check_scloud in 281 ms [2025-08-24 13:15:29][359496124846590][282 ms][DEBUG] START check_boot_completed [2025-08-24 13:15:29][359496124846590][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:15:29][359496124846590][329 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:15:29][359496124846590][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:15:29][359496124846590][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:15:29][359496124846590][375 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:15:29][359496124846590][375 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:15:29][359496124846590][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359496124846590\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4502\"}'\'' -e'"" [2025-08-24 13:15:29][359496124846590][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:15:29][359496124846590][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359496124846590\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4502\"}'\'' -e'"" [2025-08-24 13:15:34][359496124846590][5499 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cd8141fb-0abb-4b29-b1f8-c2e8c3a10568","id":"QR_cd8141fb-0abb-4b29-b1f8-c2e8c3a10568","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:15:34][359496124846590][5655 ms][DEBUG] proc_open done in 5280 ms; code=255; res.len=3343 [2025-08-24 13:15:34][359496124846590][5655 ms][DEBUG] END runCmdUntilRes#1 in 5280 ms [2025-08-24 13:15:34][359496124846590][5656 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:16:02][355241321095250][0 ms][INFO] === Request start === [2025-08-24 13:16:02][355241321095250][1 ms][DEBUG] START check_scloud [2025-08-24 13:16:02][355241321095250][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:16:02][355241321095250][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 24356 5014 24082120 173704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:16:02][355241321095250][304 ms][DEBUG] targetPkg: running [2025-08-24 13:16:02][355241321095250][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-24 13:16:02][355241321095250][304 ms][DEBUG] START check_boot_completed [2025-08-24 13:16:02][355241321095250][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:16:02][355241321095250][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:16:02][355241321095250][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:16:02][355241321095250][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:16:02][355241321095250][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:16:02][355241321095250][397 ms][DEBUG] START check_internet [2025-08-24 13:16:02][355241321095250][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:16:02][355241321095250][694 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=189 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 189.833/189.833/189.833/0.000 ms\n [2025-08-24 13:16:02][355241321095250][694 ms][DEBUG] check_internet: online [2025-08-24 13:16:02][355241321095250][694 ms][DEBUG] END check_internet in 297 ms [2025-08-24 13:16:02][355241321095250][694 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:16:02][355241321095250][695 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355241321095250\",\"model\":\"SM-G556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9648\"}'\'' -e'"" [2025-08-24 13:16:02][355241321095250][695 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:16:02][355241321095250][695 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355241321095250\",\"model\":\"SM-G556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9648\"}'\'' -e'"" [2025-08-24 13:16:06][355241321095250][4537 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 13:16:06][355241321095250][4693 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=107 [2025-08-24 13:16:06][355241321095250][4693 ms][DEBUG] END runCmdUntilRes#1 in 3998 ms [2025-08-24 13:16:06][355241321095250][4693 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 13:16:07][][0 ms][INFO] === Request start === [2025-08-24 13:16:07][][1 ms][DEBUG] START check_scloud [2025-08-24 13:16:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:16:07][][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 24356 5014 24259408 184600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:16:07][][295 ms][DEBUG] targetPkg: running [2025-08-24 13:16:07][][295 ms][DEBUG] END check_scloud in 295 ms [2025-08-24 13:16:07][][295 ms][DEBUG] START check_boot_completed [2025-08-24 13:16:07][][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:16:07][][342 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:16:07][][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:16:07][][404 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 13:16:07][][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 13:16:07][][405 ms][DEBUG] START check_internet [2025-08-24 13:16:07][][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:16:07][][670 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=136 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 136.963/136.963/136.963/0.000 ms\n [2025-08-24 13:16:07][][670 ms][DEBUG] check_internet: online [2025-08-24 13:16:07][][670 ms][DEBUG] END check_internet in 266 ms [2025-08-24 13:16:07][][670 ms][DEBUG] rawBody.length=1129 [2025-08-24 13:16:07][][670 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX21CNPRM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2611\"}'\'' -e'"" [2025-08-24 13:16:07][][670 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:16:07][][670 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX21CNPRM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2611\"}'\'' -e'"" [2025-08-24 13:16:11][][4013 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 13:16:11][][4169 ms][DEBUG] proc_open done in 3498 ms; code=255; res.len=107 [2025-08-24 13:16:11][][4169 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-08-24 13:16:11][][4169 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 13:16:13][354453180182993][0 ms][INFO] === Request start === [2025-08-24 13:16:13][354453180182993][1 ms][DEBUG] START check_scloud [2025-08-24 13:16:13][354453180182993][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:16:14][354453180182993][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 24356 5014 24413300 196500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:16:14][354453180182993][304 ms][DEBUG] targetPkg: running [2025-08-24 13:16:14][354453180182993][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-24 13:16:14][354453180182993][304 ms][DEBUG] START check_boot_completed [2025-08-24 13:16:14][354453180182993][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:16:14][354453180182993][335 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 13:16:14][354453180182993][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:16:14][354453180182993][397 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 13:16:14][354453180182993][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:16:14][354453180182993][397 ms][DEBUG] START check_internet [2025-08-24 13:16:14][354453180182993][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:16:14][354453180182993][647 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=133 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 133.125/133.125/133.125/0.000 ms\n [2025-08-24 13:16:14][354453180182993][647 ms][DEBUG] check_internet: online [2025-08-24 13:16:14][354453180182993][647 ms][DEBUG] END check_internet in 250 ms [2025-08-24 13:16:14][354453180182993][647 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:16:14][354453180182993][647 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354453180182993\",\"model\":\"SM-F741U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8205\"}'\'' -e'"" [2025-08-24 13:16:14][354453180182993][647 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:16:14][354453180182993][647 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354453180182993\",\"model\":\"SM-F741U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8205\"}'\'' -e'"" [2025-08-24 13:16:19][354453180182993][5943 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_761b7d91-219c-4c15-99fb-aebef3d9bb6a","id":"QR_761b7d91-219c-4c15-99fb-aebef3d9bb6a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:16:19][354453180182993][6099 ms][DEBUG] proc_open done in 5452 ms; code=255; res.len=3343 [2025-08-24 13:16:19][354453180182993][6099 ms][DEBUG] END runCmdUntilRes#1 in 5452 ms [2025-08-24 13:16:19][354453180182993][6099 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:16:24][352600227422913][0 ms][INFO] === Request start === [2025-08-24 13:16:24][352600227422913][1 ms][DEBUG] START check_scloud [2025-08-24 13:16:24][352600227422913][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:16:24][352600227422913][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 24356 5014 24545624 207560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:16:24][352600227422913][318 ms][DEBUG] targetPkg: running [2025-08-24 13:16:24][352600227422913][318 ms][DEBUG] END check_scloud in 318 ms [2025-08-24 13:16:24][352600227422913][318 ms][DEBUG] START check_boot_completed [2025-08-24 13:16:24][352600227422913][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:16:24][352600227422913][365 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:16:24][352600227422913][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:16:24][352600227422913][427 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 13:16:24][352600227422913][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 13:16:24][352600227422913][427 ms][DEBUG] START check_internet [2025-08-24 13:16:24][352600227422913][427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:16:24][352600227422913][771 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=236 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 236.427/236.427/236.427/0.000 ms\n [2025-08-24 13:16:24][352600227422913][771 ms][DEBUG] check_internet: online [2025-08-24 13:16:24][352600227422913][771 ms][DEBUG] END check_internet in 344 ms [2025-08-24 13:16:24][352600227422913][771 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:16:24][352600227422913][771 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227422913\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MDA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3463\"}'\'' -e'"" [2025-08-24 13:16:24][352600227422913][771 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:16:24][352600227422913][771 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227422913\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MDA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3463\"}'\'' -e'"" [2025-08-24 13:16:28][352600227422913][4536 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_056abe5d-d74d-4d47-b83c-8b1d7d7bd9a9","id":"QR_056abe5d-d74d-4d47-b83c-8b1d7d7bd9a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:16:28][352600227422913][4692 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-08-24 13:16:28][352600227422913][4692 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-08-24 13:16:28][352600227422913][4692 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:16:31][352838659064882][0 ms][INFO] === Request start === [2025-08-24 13:16:31][352838659064882][1 ms][DEBUG] START check_scloud [2025-08-24 13:16:31][352838659064882][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:16:32][352838659064882][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 24356 5014 24662512 219816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:16:32][352838659064882][283 ms][DEBUG] targetPkg: running [2025-08-24 13:16:32][352838659064882][283 ms][DEBUG] END check_scloud in 283 ms [2025-08-24 13:16:32][352838659064882][283 ms][DEBUG] START check_boot_completed [2025-08-24 13:16:32][352838659064882][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:16:32][352838659064882][330 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:16:32][352838659064882][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:16:32][352838659064882][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:16:32][352838659064882][377 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:16:32][352838659064882][377 ms][DEBUG] START check_internet [2025-08-24 13:16:32][352838659064882][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:16:32][352838659064882][689 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=212 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 212.546/212.546/212.546/0.000 ms\n [2025-08-24 13:16:32][352838659064882][689 ms][DEBUG] check_internet: online [2025-08-24 13:16:32][352838659064882][689 ms][DEBUG] END check_internet in 313 ms [2025-08-24 13:16:32][352838659064882][689 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:16:32][352838659064882][689 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838659064882\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3427\"}'\'' -e'"" [2025-08-24 13:16:32][352838659064882][689 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:16:32][352838659064882][689 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838659064882\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3427\"}'\'' -e'"" [2025-08-24 13:16:37][352838659064882][5953 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_deae78d4-7082-4140-b9c9-c585d46165d3","id":"QR_deae78d4-7082-4140-b9c9-c585d46165d3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:16:37][352838659064882][6110 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-08-24 13:16:37][352838659064882][6110 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-08-24 13:16:37][352838659064882][6110 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:17:03][353994911593215][1 ms][INFO] === Request start === [2025-08-24 13:17:03][353994911593215][1 ms][DEBUG] START check_scloud [2025-08-24 13:17:03][353994911593215][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:17:04][353994911593215][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 24356 5014 24741516 231200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:17:04][353994911593215][303 ms][DEBUG] targetPkg: running [2025-08-24 13:17:04][353994911593215][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-24 13:17:04][353994911593215][304 ms][DEBUG] START check_boot_completed [2025-08-24 13:17:04][353994911593215][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:17:04][353994911593215][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:17:04][353994911593215][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:17:04][353994911593215][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:17:04][353994911593215][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:17:04][353994911593215][397 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:17:04][353994911593215][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353994911593215\",\"model\":\"SM-A166U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2430\"}'\'' -e'"" [2025-08-24 13:17:04][353994911593215][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:17:04][353994911593215][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353994911593215\",\"model\":\"SM-A166U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2430\"}'\'' -e'"" [2025-08-24 13:17:10][353994911593215][7052 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9746c7ba-8778-4ae8-97bc-9f4769f2e2da","id":"QR_9746c7ba-8778-4ae8-97bc-9f4769f2e2da","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:17:10][353994911593215][7208 ms][DEBUG] proc_open done in 6811 ms; code=255; res.len=3343 [2025-08-24 13:17:10][353994911593215][7208 ms][DEBUG] END runCmdUntilRes#1 in 6811 ms [2025-08-24 13:17:10][353994911593215][7208 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:17:14][351317840822046][0 ms][INFO] === Request start === [2025-08-24 13:17:14][351317840822046][1 ms][DEBUG] START check_scloud [2025-08-24 13:17:14][351317840822046][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:17:15][351317840822046][283 ms][DEBUG] SU: done in 283 ms; outu0_a118 24356 5014 24883988 242980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:17:15][351317840822046][283 ms][DEBUG] targetPkg: running [2025-08-24 13:17:15][351317840822046][284 ms][DEBUG] END check_scloud in 283 ms [2025-08-24 13:17:15][351317840822046][284 ms][DEBUG] START check_boot_completed [2025-08-24 13:17:15][351317840822046][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:17:15][351317840822046][330 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:17:15][351317840822046][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:17:15][351317840822046][394 ms][DEBUG] SU: done in 64 ms; out [2025-08-24 13:17:15][351317840822046][394 ms][DEBUG] END check_boot_completed in 111 ms [2025-08-24 13:17:15][351317840822046][394 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:17:15][351317840822046][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351317840822046\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4734\"}'\'' -e'"" [2025-08-24 13:17:15][351317840822046][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:17:15][351317840822046][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351317840822046\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4734\"}'\'' -e'"" [2025-08-24 13:17:18][351317840822046][4001 ms][DEBUG] proc_open done in 3607 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 13:17:18][351317840822046][4001 ms][DEBUG] END runCmdUntilRes#1 in 3607 ms [2025-08-24 13:17:18][351317840822046][4001 ms][WARN] Detected error: Process with pid 24356 either refused to load frida-agent, or terminated during injection [2025-08-24 13:17:18][351317840822046][4001 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 13:17:18][351317840822046][4142 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 13:17:18][351317840822046][4142 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 13:17:18][351317840822046][4142 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 13:17:19][351317840822046][4267 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 13:17:19][351317840822046][4267 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 13:17:19][351317840822046][4423 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 13:17:21][351317840822046][6438 ms][DEBUG] START check_boot_completed [2025-08-24 13:17:21][351317840822046][6438 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:17:21][351317840822046][6485 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:17:21][351317840822046][6485 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:17:21][351317840822046][6532 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:17:21][351317840822046][6532 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 13:17:24][351317840822046][9547 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 13:17:24][351317840822046][9547 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351317840822046\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4734\"}'\'' -e'"" [2025-08-24 13:17:28][351317840822046][13624 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_40c921e6-488c-42b0-a1ec-b68294b7f0ba","id":"QR_40c921e6-488c-42b0-a1ec-b68294b7f0ba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:17:28][351317840822046][13780 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-24 13:17:28][351317840822046][13780 ms][DEBUG] END runCmdUntilRes#2 in 4233 ms [2025-08-24 13:17:28][351317840822046][13780 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:17:31][358543583430720][0 ms][INFO] === Request start === [2025-08-24 13:17:31][358543583430720][1 ms][DEBUG] START check_scloud [2025-08-24 13:17:31][358543583430720][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:17:31][358543583430720][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 25635 5014 23535260 125812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:17:31][358543583430720][257 ms][DEBUG] targetPkg: running [2025-08-24 13:17:31][358543583430720][257 ms][DEBUG] END check_scloud in 257 ms [2025-08-24 13:17:31][358543583430720][257 ms][DEBUG] START check_boot_completed [2025-08-24 13:17:31][358543583430720][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:17:31][358543583430720][304 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:17:31][358543583430720][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:17:31][358543583430720][351 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:17:31][358543583430720][351 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:17:31][358543583430720][351 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:17:31][358543583430720][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358543583430720\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6341\"}'\'' -e'"" [2025-08-24 13:17:31][358543583430720][351 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:17:31][358543583430720][351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358543583430720\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6341\"}'\'' -e'"" [2025-08-24 13:17:37][358543583430720][6146 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e3048b63-afff-4af4-a9fe-facfe499b76b","id":"QR_e3048b63-afff-4af4-a9fe-facfe499b76b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:17:37][358543583430720][6303 ms][DEBUG] proc_open done in 5952 ms; code=255; res.len=3343 [2025-08-24 13:17:37][358543583430720][6303 ms][DEBUG] END runCmdUntilRes#1 in 5952 ms [2025-08-24 13:17:37][358543583430720][6303 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:18:03][353472170444644][1 ms][INFO] === Request start === [2025-08-24 13:18:03][353472170444644][1 ms][DEBUG] START check_scloud [2025-08-24 13:18:03][353472170444644][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:18:03][353472170444644][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 25635 5014 23614840 139508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:18:03][353472170444644][300 ms][DEBUG] targetPkg: running [2025-08-24 13:18:03][353472170444644][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-24 13:18:03][353472170444644][300 ms][DEBUG] START check_boot_completed [2025-08-24 13:18:03][353472170444644][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:18:04][353472170444644][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:18:04][353472170444644][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:18:04][353472170444644][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:18:04][353472170444644][394 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:18:04][353472170444644][394 ms][DEBUG] START check_internet [2025-08-24 13:18:04][353472170444644][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:18:04][353472170444644][831 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.168/201.168/201.168/0.000 ms\n [2025-08-24 13:18:04][353472170444644][831 ms][DEBUG] check_internet: online [2025-08-24 13:18:04][353472170444644][831 ms][DEBUG] END check_internet in 437 ms [2025-08-24 13:18:04][353472170444644][831 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:18:04][353472170444644][831 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353472170444644\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4037\"}'\'' -e'"" [2025-08-24 13:18:04][353472170444644][831 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:18:04][353472170444644][831 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353472170444644\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4037\"}'\'' -e'"" [2025-08-24 13:18:13][353472170444644][9782 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1b8b7b55-87f1-453f-8a49-8e316bbd99f8","id":"QR_1b8b7b55-87f1-453f-8a49-8e316bbd99f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:18:13][353472170444644][9938 ms][DEBUG] proc_open done in 9107 ms; code=255; res.len=3343 [2025-08-24 13:18:13][353472170444644][9938 ms][DEBUG] END runCmdUntilRes#1 in 9107 ms [2025-08-24 13:18:13][353472170444644][9938 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:18:19][354775290247849][0 ms][INFO] === Request start === [2025-08-24 13:18:19][354775290247849][1 ms][DEBUG] START check_scloud [2025-08-24 13:18:19][354775290247849][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:18:19][354775290247849][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 25635 5014 23767616 150900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:18:19][354775290247849][322 ms][DEBUG] targetPkg: running [2025-08-24 13:18:19][354775290247849][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-24 13:18:19][354775290247849][322 ms][DEBUG] START check_boot_completed [2025-08-24 13:18:19][354775290247849][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:18:19][354775290247849][368 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:18:19][354775290247849][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:18:19][354775290247849][417 ms][DEBUG] SU: done in 49 ms; out [2025-08-24 13:18:19][354775290247849][417 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 13:18:19][354775290247849][417 ms][DEBUG] START check_internet [2025-08-24 13:18:19][354775290247849][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:18:20][354775290247849][759 ms][DEBUG] SU: done in 342 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.858/226.858/226.858/0.000 ms\n [2025-08-24 13:18:20][354775290247849][760 ms][DEBUG] check_internet: online [2025-08-24 13:18:20][354775290247849][760 ms][DEBUG] END check_internet in 342 ms [2025-08-24 13:18:20][354775290247849][760 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:18:20][354775290247849][760 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354775290247849\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2589\"}'\'' -e'"" [2025-08-24 13:18:20][354775290247849][760 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:18:20][354775290247849][760 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354775290247849\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2589\"}'\'' -e'"" [2025-08-24 13:18:26][354775290247849][6726 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-24 13:18:26][354775290247849][6883 ms][DEBUG] proc_open done in 6123 ms; code=255; res.len=115 [2025-08-24 13:18:26][354775290247849][6883 ms][DEBUG] END runCmdUntilRes#1 in 6123 ms [2025-08-24 13:18:26][354775290247849][6883 ms][INFO] SUCCESS response from frida (len=115) [2025-08-24 13:18:26][][0 ms][INFO] === Request start === [2025-08-24 13:18:26][][1 ms][DEBUG] START check_scloud [2025-08-24 13:18:26][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:18:27][][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 25635 5014 23922376 161672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:18:27][][291 ms][DEBUG] targetPkg: running [2025-08-24 13:18:27][][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-24 13:18:27][][291 ms][DEBUG] START check_boot_completed [2025-08-24 13:18:27][][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:18:27][][338 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:18:27][][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:18:27][][416 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 13:18:27][][416 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-24 13:18:27][][416 ms][DEBUG] START check_internet [2025-08-24 13:18:27][][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:18:27][][822 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=239 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 239.140/239.140/239.140/0.000 ms\n [2025-08-24 13:18:27][][822 ms][DEBUG] check_internet: online [2025-08-24 13:18:27][][822 ms][DEBUG] END check_internet in 406 ms [2025-08-24 13:18:27][][822 ms][DEBUG] rawBody.length=1130 [2025-08-24 13:18:27][][823 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CXA2C5B0J\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8747\"}'\'' -e'"" [2025-08-24 13:18:27][][823 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:18:27][][823 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CXA2C5B0J\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8747\"}'\'' -e'"" [2025-08-24 13:18:33][][6570 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-24 13:18:33][][6727 ms][DEBUG] proc_open done in 5904 ms; code=255; res.len=115 [2025-08-24 13:18:33][][6727 ms][DEBUG] END runCmdUntilRes#1 in 5904 ms [2025-08-24 13:18:33][][6727 ms][INFO] SUCCESS response from frida (len=115) [2025-08-24 13:19:02][353074282314176][0 ms][INFO] === Request start === [2025-08-24 13:19:02][353074282314176][1 ms][DEBUG] START check_scloud [2025-08-24 13:19:02][353074282314176][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:19:02][353074282314176][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 25635 5014 24032100 173836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:19:02][353074282314176][315 ms][DEBUG] targetPkg: running [2025-08-24 13:19:02][353074282314176][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-24 13:19:02][353074282314176][315 ms][DEBUG] START check_boot_completed [2025-08-24 13:19:02][353074282314176][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:19:02][353074282314176][346 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 13:19:02][353074282314176][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:19:02][353074282314176][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:19:02][353074282314176][394 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 13:19:02][353074282314176][394 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:19:02][353074282314176][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074282314176\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7749\"}'\'' -e'"" [2025-08-24 13:19:02][353074282314176][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:19:02][353074282314176][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074282314176\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7749\"}'\'' -e'"" [2025-08-24 13:19:06][353074282314176][4142 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 13:19:06][353074282314176][4298 ms][DEBUG] proc_open done in 3904 ms; code=255; res.len=107 [2025-08-24 13:19:06][353074282314176][4298 ms][DEBUG] END runCmdUntilRes#1 in 3904 ms [2025-08-24 13:19:06][353074282314176][4298 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 13:19:07][][0 ms][INFO] === Request start === [2025-08-24 13:19:07][][1 ms][DEBUG] START check_scloud [2025-08-24 13:19:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:19:07][][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 25635 5014 24203244 184588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:19:07][][329 ms][DEBUG] targetPkg: running [2025-08-24 13:19:07][][329 ms][DEBUG] END check_scloud in 328 ms [2025-08-24 13:19:07][][329 ms][DEBUG] START check_boot_completed [2025-08-24 13:19:07][][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:19:07][][360 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 13:19:07][][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:19:07][][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:19:07][][407 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 13:19:07][][407 ms][DEBUG] rawBody.length=1129 [2025-08-24 13:19:07][][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT62R1VXE\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1744\"}'\'' -e'"" [2025-08-24 13:19:07][][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:19:07][][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT62R1VXE\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1744\"}'\'' -e'"" [2025-08-24 13:19:10][][3828 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 13:19:11][][3984 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=107 [2025-08-24 13:19:11][][3984 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-08-24 13:19:11][][3984 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 13:19:11][356663760665245][0 ms][INFO] === Request start === [2025-08-24 13:19:11][356663760665245][1 ms][DEBUG] START check_scloud [2025-08-24 13:19:11][356663760665245][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:19:12][356663760665245][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 25635 5014 24351860 196372 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:19:12][356663760665245][308 ms][DEBUG] targetPkg: running [2025-08-24 13:19:12][356663760665245][308 ms][DEBUG] END check_scloud in 308 ms [2025-08-24 13:19:12][356663760665245][309 ms][DEBUG] START check_boot_completed [2025-08-24 13:19:12][356663760665245][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:19:12][356663760665245][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:19:12][356663760665245][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:19:12][356663760665245][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:19:12][356663760665245][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:19:12][356663760665245][402 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:19:12][356663760665245][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663760665245\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9224\"}'\'' -e'"" [2025-08-24 13:19:12][356663760665245][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:19:12][356663760665245][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663760665245\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9224\"}'\'' -e'"" [2025-08-24 13:19:16][356663760665245][4323 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5368b53-231e-4263-9af5-0d4a8ab1d61d","id":"QR_a5368b53-231e-4263-9af5-0d4a8ab1d61d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:19:16][356663760665245][4479 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-24 13:19:16][356663760665245][4479 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-24 13:19:16][356663760665245][4479 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:19:19][350896383621577][1 ms][INFO] === Request start === [2025-08-24 13:19:19][350896383621577][1 ms][DEBUG] START check_scloud [2025-08-24 13:19:19][350896383621577][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:19:19][350896383621577][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 25635 5014 24480104 207388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:19:19][350896383621577][286 ms][DEBUG] targetPkg: running [2025-08-24 13:19:19][350896383621577][286 ms][DEBUG] END check_scloud in 285 ms [2025-08-24 13:19:19][350896383621577][286 ms][DEBUG] START check_boot_completed [2025-08-24 13:19:19][350896383621577][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:19:19][350896383621577][333 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:19:19][350896383621577][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:19:19][350896383621577][411 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 13:19:19][350896383621577][411 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-24 13:19:19][350896383621577][411 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:19:19][350896383621577][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350896383621577\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PGU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1294\"}'\'' -e'"" [2025-08-24 13:19:19][350896383621577][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:19:19][350896383621577][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350896383621577\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PGU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1294\"}'\'' -e'"" [2025-08-24 13:19:26][350896383621577][6800 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-24 13:19:26][350896383621577][6956 ms][DEBUG] proc_open done in 6545 ms; code=255; res.len=101 [2025-08-24 13:19:26][350896383621577][6956 ms][DEBUG] END runCmdUntilRes#1 in 6545 ms [2025-08-24 13:19:26][350896383621577][6956 ms][INFO] SUCCESS response from frida (len=101) [2025-08-24 13:19:26][][0 ms][INFO] === Request start === [2025-08-24 13:19:26][][0 ms][DEBUG] START check_scloud [2025-08-24 13:19:26][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:19:26][][255 ms][DEBUG] SU: done in 255 ms; outu0_a118 25635 5014 24573480 219364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:19:26][][255 ms][DEBUG] targetPkg: running [2025-08-24 13:19:26][][255 ms][DEBUG] END check_scloud in 255 ms [2025-08-24 13:19:26][][255 ms][DEBUG] START check_boot_completed [2025-08-24 13:19:26][][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:19:26][][302 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:19:26][][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:19:27][][364 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 13:19:27][][364 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 13:19:27][][364 ms][DEBUG] rawBody.length=1130 [2025-08-24 13:19:27][][364 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8Y40C9ENA\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PGU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5993\"}'\'' -e'"" [2025-08-24 13:19:27][][364 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:19:27][][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8Y40C9ENA\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PGU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5993\"}'\'' -e'"" [2025-08-24 13:19:31][][4426 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-24 13:19:31][][4582 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=101 [2025-08-24 13:19:31][][4582 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-24 13:19:31][][4582 ms][INFO] SUCCESS response from frida (len=101) [2025-08-24 13:19:31][353310802943460][0 ms][INFO] === Request start === [2025-08-24 13:19:31][353310802943460][1 ms][DEBUG] START check_scloud [2025-08-24 13:19:31][353310802943460][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:19:32][353310802943460][266 ms][DEBUG] SU: done in 266 ms; outu0_a118 25635 5014 24718092 230492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:19:32][353310802943460][267 ms][DEBUG] targetPkg: running [2025-08-24 13:19:32][353310802943460][267 ms][DEBUG] END check_scloud in 266 ms [2025-08-24 13:19:32][353310802943460][267 ms][DEBUG] START check_boot_completed [2025-08-24 13:19:32][353310802943460][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:19:32][353310802943460][313 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:19:32][353310802943460][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:19:32][353310802943460][360 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:19:32][353310802943460][360 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:19:32][353310802943460][360 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:19:32][353310802943460][360 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310802943460\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3651\"}'\'' -e'"" [2025-08-24 13:19:32][353310802943460][360 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:19:32][353310802943460][360 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310802943460\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3651\"}'\'' -e'"" [2025-08-24 13:19:35][353310802943460][4015 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eaa072f1-1ba8-4d36-8445-0b90b692f8f6","id":"QR_eaa072f1-1ba8-4d36-8445-0b90b692f8f6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:19:36][353310802943460][4172 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-24 13:19:36][353310802943460][4172 ms][DEBUG] END runCmdUntilRes#1 in 3812 ms [2025-08-24 13:19:36][353310802943460][4172 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:20:02][351199551980282][0 ms][INFO] === Request start === [2025-08-24 13:20:02][351199551980282][1 ms][DEBUG] START check_scloud [2025-08-24 13:20:02][351199551980282][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:20:03][351199551980282][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 25635 5014 24803112 242576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:20:03][351199551980282][302 ms][DEBUG] targetPkg: running [2025-08-24 13:20:03][351199551980282][302 ms][DEBUG] END check_scloud in 302 ms [2025-08-24 13:20:03][351199551980282][302 ms][DEBUG] START check_boot_completed [2025-08-24 13:20:03][351199551980282][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:20:03][351199551980282][333 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 13:20:03][351199551980282][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:20:03][351199551980282][380 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:20:03][351199551980282][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 13:20:03][351199551980282][380 ms][DEBUG] START check_internet [2025-08-24 13:20:03][351199551980282][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:20:03][351199551980282][724 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=238 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 238.287/238.287/238.287/0.000 ms\n [2025-08-24 13:20:03][351199551980282][724 ms][DEBUG] check_internet: online [2025-08-24 13:20:03][351199551980282][724 ms][DEBUG] END check_internet in 343 ms [2025-08-24 13:20:03][351199551980282][724 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:20:03][351199551980282][724 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199551980282\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8278\"}'\'' -e'"" [2025-08-24 13:20:03][351199551980282][724 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:20:03][351199551980282][724 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199551980282\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8278\"}'\'' -e'"" [2025-08-24 13:20:07][351199551980282][4332 ms][DEBUG] proc_open done in 3608 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 13:20:07][351199551980282][4332 ms][DEBUG] END runCmdUntilRes#1 in 3609 ms [2025-08-24 13:20:07][351199551980282][4332 ms][WARN] Detected error: Process with pid 25635 either refused to load frida-agent, or terminated during injection [2025-08-24 13:20:07][351199551980282][4332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 13:20:07][351199551980282][4457 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 13:20:07][351199551980282][4458 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 13:20:07][351199551980282][4458 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 13:20:07][351199551980282][4598 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 13:20:07][351199551980282][4598 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 13:20:07][351199551980282][4754 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 13:20:09][351199551980282][6769 ms][DEBUG] START check_boot_completed [2025-08-24 13:20:09][351199551980282][6769 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:20:09][351199551980282][6816 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:20:09][351199551980282][6816 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:20:09][351199551980282][6910 ms][DEBUG] SU: done in 94 ms; out [2025-08-24 13:20:09][351199551980282][6910 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-24 13:20:12][351199551980282][9925 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 13:20:12][351199551980282][9925 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199551980282\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8278\"}'\'' -e'"" [2025-08-24 13:20:16][351199551980282][13908 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_142e712a-991b-4648-b0a4-209f44419f62","id":"QR_142e712a-991b-4648-b0a4-209f44419f62","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:20:16][351199551980282][14064 ms][DEBUG] proc_open done in 4140 ms; code=255; res.len=3343 [2025-08-24 13:20:16][351199551980282][14064 ms][DEBUG] END runCmdUntilRes#2 in 4140 ms [2025-08-24 13:20:16][351199551980282][14064 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:20:19][355901956315154][0 ms][INFO] === Request start === [2025-08-24 13:20:19][355901956315154][1 ms][DEBUG] START check_scloud [2025-08-24 13:20:19][355901956315154][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:20:20][355901956315154][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 26862 5014 23613148 125924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:20:20][355901956315154][292 ms][DEBUG] targetPkg: running [2025-08-24 13:20:20][355901956315154][292 ms][DEBUG] END check_scloud in 292 ms [2025-08-24 13:20:20][355901956315154][292 ms][DEBUG] START check_boot_completed [2025-08-24 13:20:20][355901956315154][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:20:20][355901956315154][339 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:20:20][355901956315154][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:20:20][355901956315154][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:20:20][355901956315154][385 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:20:20][355901956315154][385 ms][DEBUG] START check_internet [2025-08-24 13:20:20][355901956315154][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:20:20][355901956315154][715 ms][DEBUG] SU: done in 330 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=241 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 241.299/241.299/241.299/0.000 ms\n [2025-08-24 13:20:20][355901956315154][715 ms][DEBUG] check_internet: online [2025-08-24 13:20:20][355901956315154][715 ms][DEBUG] END check_internet in 330 ms [2025-08-24 13:20:20][355901956315154][715 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:20:20][355901956315154][715 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355901956315154\",\"model\":\"SM-S721U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5851\"}'\'' -e'"" [2025-08-24 13:20:20][355901956315154][716 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:20:20][355901956315154][716 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355901956315154\",\"model\":\"SM-S721U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5851\"}'\'' -e'"" [2025-08-24 13:20:25][355901956315154][5556 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_48a29ad6-a8aa-49b9-ae04-9f992b9f50bd","id":"QR_48a29ad6-a8aa-49b9-ae04-9f992b9f50bd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:20:25][355901956315154][5712 ms][DEBUG] proc_open done in 4997 ms; code=255; res.len=3343 [2025-08-24 13:20:25][355901956315154][5712 ms][DEBUG] END runCmdUntilRes#1 in 4997 ms [2025-08-24 13:20:25][355901956315154][5712 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:20:29][350272257328329][0 ms][INFO] === Request start === [2025-08-24 13:20:29][350272257328329][1 ms][DEBUG] START check_scloud [2025-08-24 13:20:29][350272257328329][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:20:29][350272257328329][321 ms][DEBUG] SU: done in 321 ms; outu0_a118 26862 5014 23773040 139328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:20:29][350272257328329][321 ms][DEBUG] targetPkg: running [2025-08-24 13:20:29][350272257328329][321 ms][DEBUG] END check_scloud in 321 ms [2025-08-24 13:20:29][350272257328329][322 ms][DEBUG] START check_boot_completed [2025-08-24 13:20:29][350272257328329][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:20:29][350272257328329][368 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:20:29][350272257328329][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:20:30][350272257328329][415 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:20:30][350272257328329][415 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 13:20:30][350272257328329][416 ms][DEBUG] START check_internet [2025-08-24 13:20:30][350272257328329][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:20:30][350272257328329][712 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=184 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 184.385/184.385/184.385/0.000 ms\n [2025-08-24 13:20:30][350272257328329][712 ms][DEBUG] check_internet: online [2025-08-24 13:20:30][350272257328329][712 ms][DEBUG] END check_internet in 297 ms [2025-08-24 13:20:30][350272257328329][712 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:20:30][350272257328329][712 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350272257328329\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9017\"}'\'' -e'"" [2025-08-24 13:20:30][350272257328329][712 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:20:30][350272257328329][712 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350272257328329\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9017\"}'\'' -e'"" [2025-08-24 13:20:33][350272257328329][4117 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 13:20:33][350272257328329][4273 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=107 [2025-08-24 13:20:33][350272257328329][4273 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-08-24 13:20:33][350272257328329][4273 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 13:20:34][][0 ms][INFO] === Request start === [2025-08-24 13:20:34][][0 ms][DEBUG] START check_scloud [2025-08-24 13:20:34][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:20:34][][254 ms][DEBUG] SU: done in 254 ms; outu0_a118 26862 5014 23915476 151188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:20:34][][254 ms][DEBUG] targetPkg: running [2025-08-24 13:20:34][][254 ms][DEBUG] END check_scloud in 254 ms [2025-08-24 13:20:34][][255 ms][DEBUG] START check_boot_completed [2025-08-24 13:20:34][][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:20:34][][299 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 13:20:34][][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:20:34][][393 ms][DEBUG] SU: done in 94 ms; out [2025-08-24 13:20:34][][393 ms][DEBUG] END check_boot_completed in 139 ms [2025-08-24 13:20:34][][393 ms][DEBUG] START check_internet [2025-08-24 13:20:34][][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:20:34][][659 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=140 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 140.529/140.529/140.529/0.000 ms\n [2025-08-24 13:20:34][][659 ms][DEBUG] check_internet: online [2025-08-24 13:20:34][][659 ms][DEBUG] END check_internet in 266 ms [2025-08-24 13:20:34][][659 ms][DEBUG] rawBody.length=1129 [2025-08-24 13:20:34][][659 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT603L2GY\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2269\"}'\'' -e'"" [2025-08-24 13:20:34][][659 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:20:34][][659 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT603L2GY\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2269\"}'\'' -e'"" [2025-08-24 13:20:38][][3970 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 13:20:38][][4126 ms][DEBUG] proc_open done in 3467 ms; code=255; res.len=107 [2025-08-24 13:20:38][][4126 ms][DEBUG] END runCmdUntilRes#1 in 3467 ms [2025-08-24 13:20:38][][4126 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 13:21:02][355322291571882][0 ms][INFO] === Request start === [2025-08-24 13:21:02][355322291571882][1 ms][DEBUG] START check_scloud [2025-08-24 13:21:02][355322291571882][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:21:02][355322291571882][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 26862 5014 23937756 162720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:21:02][355322291571882][279 ms][DEBUG] targetPkg: running [2025-08-24 13:21:02][355322291571882][279 ms][DEBUG] END check_scloud in 278 ms [2025-08-24 13:21:02][355322291571882][279 ms][DEBUG] START check_boot_completed [2025-08-24 13:21:02][355322291571882][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:21:02][355322291571882][326 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:21:02][355322291571882][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:21:02][355322291571882][388 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 13:21:02][355322291571882][388 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 13:21:02][355322291571882][388 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:21:02][355322291571882][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355322291571882\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7739\"}'\'' -e'"" [2025-08-24 13:21:02][355322291571882][388 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:21:02][355322291571882][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355322291571882\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7739\"}'\'' -e'"" [2025-08-24 13:21:06][355322291571882][4215 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_50a49128-7445-4595-bd80-9753c2fadd81","id":"QR_50a49128-7445-4595-bd80-9753c2fadd81","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:21:06][355322291571882][4372 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-24 13:21:06][355322291571882][4372 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-24 13:21:06][355322291571882][4372 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:21:07][352539599402766][0 ms][INFO] === Request start === [2025-08-24 13:21:07][352539599402766][1 ms][DEBUG] START check_scloud [2025-08-24 13:21:07][352539599402766][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:21:08][352539599402766][338 ms][DEBUG] SU: done in 337 ms; outu0_a118 26862 5014 24080228 173248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:21:08][352539599402766][338 ms][DEBUG] targetPkg: running [2025-08-24 13:21:08][352539599402766][338 ms][DEBUG] END check_scloud in 338 ms [2025-08-24 13:21:08][352539599402766][338 ms][DEBUG] START check_boot_completed [2025-08-24 13:21:08][352539599402766][338 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:21:08][352539599402766][385 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:21:08][352539599402766][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:21:08][352539599402766][447 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 13:21:08][352539599402766][447 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 13:21:08][352539599402766][447 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:21:08][352539599402766][447 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539599402766\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9252\"}'\'' -e'"" [2025-08-24 13:21:08][352539599402766][448 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:21:08][352539599402766][448 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539599402766\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9252\"}'\'' -e'"" [2025-08-24 13:21:12][352539599402766][4399 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ecad2d93-b7fb-49e1-8a6f-654f11f38615","id":"QR_ecad2d93-b7fb-49e1-8a6f-654f11f38615","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:21:12][352539599402766][4555 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-24 13:21:12][352539599402766][4556 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-24 13:21:12][352539599402766][4556 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:21:13][350616255444936][0 ms][INFO] === Request start === [2025-08-24 13:21:13][350616255444936][1 ms][DEBUG] START check_scloud [2025-08-24 13:21:13][350616255444936][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:21:14][350616255444936][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 26862 5014 24249260 185376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:21:14][350616255444936][299 ms][DEBUG] targetPkg: running [2025-08-24 13:21:14][350616255444936][299 ms][DEBUG] END check_scloud in 299 ms [2025-08-24 13:21:14][350616255444936][299 ms][DEBUG] START check_boot_completed [2025-08-24 13:21:14][350616255444936][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:21:14][350616255444936][346 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:21:14][350616255444936][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:21:14][350616255444936][408 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 13:21:14][350616255444936][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 13:21:14][350616255444936][409 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:21:14][350616255444936][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616255444936\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6407\"}'\'' -e'"" [2025-08-24 13:21:14][350616255444936][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:21:14][350616255444936][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616255444936\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6407\"}'\'' -e'"" [2025-08-24 13:21:18][350616255444936][4438 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a50c0364-cac4-4f76-967d-05e56018ff03","id":"QR_a50c0364-cac4-4f76-967d-05e56018ff03","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:21:18][350616255444936][4595 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-24 13:21:18][350616255444936][4595 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-24 13:21:18][350616255444936][4595 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:21:20][352350278469963][0 ms][INFO] === Request start === [2025-08-24 13:21:20][352350278469963][1 ms][DEBUG] START check_scloud [2025-08-24 13:21:20][352350278469963][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:21:20][352350278469963][295 ms][DEBUG] SU: done in 295 ms; outu0_a118 26862 5014 24418356 196260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:21:20][352350278469963][296 ms][DEBUG] targetPkg: running [2025-08-24 13:21:20][352350278469963][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-24 13:21:20][352350278469963][296 ms][DEBUG] START check_boot_completed [2025-08-24 13:21:20][352350278469963][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:21:20][352350278469963][342 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:21:20][352350278469963][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:21:20][352350278469963][405 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 13:21:20][352350278469963][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 13:21:20][352350278469963][405 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:21:20][352350278469963][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350278469963\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3010\"}'\'' -e'"" [2025-08-24 13:21:20][352350278469963][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:21:20][352350278469963][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350278469963\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3010\"}'\'' -e'"" [2025-08-24 13:21:24][352350278469963][4263 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_75947a74-8341-4fbf-9e85-32b0f9503821","id":"QR_75947a74-8341-4fbf-9e85-32b0f9503821","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:21:24][352350278469963][4419 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-24 13:21:24][352350278469963][4419 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-24 13:21:24][352350278469963][4419 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:21:27][353357976720612][1 ms][INFO] === Request start === [2025-08-24 13:21:27][353357976720612][1 ms][DEBUG] START check_scloud [2025-08-24 13:21:27][353357976720612][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:21:27][353357976720612][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 26862 5014 24536344 207528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:21:27][353357976720612][292 ms][DEBUG] targetPkg: running [2025-08-24 13:21:27][353357976720612][292 ms][DEBUG] END check_scloud in 290 ms [2025-08-24 13:21:27][353357976720612][292 ms][DEBUG] START check_boot_completed [2025-08-24 13:21:27][353357976720612][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:21:27][353357976720612][337 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 13:21:27][353357976720612][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:21:27][353357976720612][399 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 13:21:27][353357976720612][400 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-24 13:21:27][353357976720612][400 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:21:27][353357976720612][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353357976720612\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8576\"}'\'' -e'"" [2025-08-24 13:21:27][353357976720612][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:21:27][353357976720612][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353357976720612\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8576\"}'\'' -e'"" [2025-08-24 13:21:34][353357976720612][7351 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_97a1f933-bfaa-4c66-9982-5331df2040f5","id":"QR_97a1f933-bfaa-4c66-9982-5331df2040f5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:21:34][353357976720612][7507 ms][DEBUG] proc_open done in 7107 ms; code=255; res.len=3343 [2025-08-24 13:21:34][353357976720612][7507 ms][DEBUG] END runCmdUntilRes#1 in 7107 ms [2025-08-24 13:21:34][353357976720612][7507 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:22:03][354068193112298][0 ms][INFO] === Request start === [2025-08-24 13:22:03][354068193112298][1 ms][DEBUG] START check_scloud [2025-08-24 13:22:03][354068193112298][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:22:03][354068193112298][330 ms][DEBUG] SU: done in 330 ms; outu0_a118 26862 5014 24629648 218052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:22:03][354068193112298][330 ms][DEBUG] targetPkg: running [2025-08-24 13:22:03][354068193112298][331 ms][DEBUG] END check_scloud in 330 ms [2025-08-24 13:22:03][354068193112298][331 ms][DEBUG] START check_boot_completed [2025-08-24 13:22:03][354068193112298][331 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:22:03][354068193112298][377 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:22:03][354068193112298][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:22:03][354068193112298][440 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 13:22:03][354068193112298][440 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 13:22:03][354068193112298][440 ms][DEBUG] START check_internet [2025-08-24 13:22:03][354068193112298][440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:22:03][354068193112298][783 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=222 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 222.471/222.471/222.471/0.000 ms\n [2025-08-24 13:22:03][354068193112298][783 ms][DEBUG] check_internet: online [2025-08-24 13:22:03][354068193112298][784 ms][DEBUG] END check_internet in 344 ms [2025-08-24 13:22:03][354068193112298][784 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:22:03][354068193112298][784 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068193112298\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9622\"}'\'' -e'"" [2025-08-24 13:22:03][354068193112298][784 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:22:03][354068193112298][784 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068193112298\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9622\"}'\'' -e'"" [2025-08-24 13:22:07][354068193112298][4626 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2390e146-7c5b-4cba-824d-b29132352b97","id":"QR_2390e146-7c5b-4cba-824d-b29132352b97","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:22:07][354068193112298][4782 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-08-24 13:22:07][354068193112298][4782 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-24 13:22:07][354068193112298][4782 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:22:10][357450476117854][0 ms][INFO] === Request start === [2025-08-24 13:22:10][357450476117854][1 ms][DEBUG] START check_scloud [2025-08-24 13:22:10][357450476117854][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:22:10][357450476117854][285 ms][DEBUG] SU: done in 285 ms; outu0_a118 26862 5014 24785356 227448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:22:10][357450476117854][286 ms][DEBUG] targetPkg: running [2025-08-24 13:22:10][357450476117854][286 ms][DEBUG] END check_scloud in 285 ms [2025-08-24 13:22:10][357450476117854][286 ms][DEBUG] START check_boot_completed [2025-08-24 13:22:10][357450476117854][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:22:10][357450476117854][332 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:22:10][357450476117854][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:22:10][357450476117854][395 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 13:22:10][357450476117854][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 13:22:10][357450476117854][395 ms][DEBUG] START check_internet [2025-08-24 13:22:10][357450476117854][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:22:11][357450476117854][709 ms][DEBUG] SU: done in 314 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=208 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 208.728/208.728/208.728/0.000 ms\n [2025-08-24 13:22:11][357450476117854][709 ms][DEBUG] check_internet: online [2025-08-24 13:22:11][357450476117854][709 ms][DEBUG] END check_internet in 314 ms [2025-08-24 13:22:11][357450476117854][709 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:22:11][357450476117854][709 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450476117854\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4506\"}'\'' -e'"" [2025-08-24 13:22:11][357450476117854][709 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:22:11][357450476117854][709 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450476117854\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4506\"}'\'' -e'"" [2025-08-24 13:22:14][357450476117854][4472 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c8e02309-17d6-4c2b-8c4a-eb335e2f2788","id":"QR_c8e02309-17d6-4c2b-8c4a-eb335e2f2788","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:22:15][357450476117854][4628 ms][DEBUG] proc_open done in 3919 ms; code=255; res.len=3343 [2025-08-24 13:22:15][357450476117854][4628 ms][DEBUG] END runCmdUntilRes#1 in 3919 ms [2025-08-24 13:22:15][357450476117854][4628 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:22:17][354068193114997][0 ms][INFO] === Request start === [2025-08-24 13:22:17][354068193114997][1 ms][DEBUG] START check_scloud [2025-08-24 13:22:17][354068193114997][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:22:17][354068193114997][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 26862 5014 24957772 239252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:22:17][354068193114997][313 ms][DEBUG] targetPkg: running [2025-08-24 13:22:17][354068193114997][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-24 13:22:17][354068193114997][314 ms][DEBUG] START check_boot_completed [2025-08-24 13:22:17][354068193114997][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:22:17][354068193114997][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:22:17][354068193114997][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:22:17][354068193114997][454 ms][DEBUG] SU: done in 93 ms; out [2025-08-24 13:22:17][354068193114997][454 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-24 13:22:17][354068193114997][454 ms][DEBUG] START check_internet [2025-08-24 13:22:17][354068193114997][454 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:22:18][354068193114997][766 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=184 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 184.842/184.842/184.842/0.000 ms\n [2025-08-24 13:22:18][354068193114997][766 ms][DEBUG] check_internet: online [2025-08-24 13:22:18][354068193114997][766 ms][DEBUG] END check_internet in 312 ms [2025-08-24 13:22:18][354068193114997][766 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:22:18][354068193114997][767 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068193114997\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6402\"}'\'' -e'"" [2025-08-24 13:22:18][354068193114997][767 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:22:18][354068193114997][767 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068193114997\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6402\"}'\'' -e'"" [2025-08-24 13:22:22][354068193114997][4500 ms][DEBUG] proc_open done in 3733 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 13:22:22][354068193114997][4500 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-08-24 13:22:22][354068193114997][4500 ms][WARN] Detected error: Process with pid 26862 either refused to load frida-agent, or terminated during injection [2025-08-24 13:22:22][354068193114997][4500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 13:22:22][354068193114997][4641 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 13:22:22][354068193114997][4641 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 13:22:22][354068193114997][4641 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 13:22:22][354068193114997][4798 ms][DEBUG] SU: done in 157 ms; out [2025-08-24 13:22:22][354068193114997][4798 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 13:22:22][354068193114997][4968 ms][DEBUG] SU: done in 171 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 13:22:24][354068193114997][6983 ms][DEBUG] START check_boot_completed [2025-08-24 13:22:24][354068193114997][6983 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:22:24][354068193114997][7030 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:22:24][354068193114997][7030 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:22:24][354068193114997][7077 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:22:24][354068193114997][7077 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 13:22:27][354068193114997][10092 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 13:22:27][354068193114997][10092 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068193114997\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6402\"}'\'' -e'"" [2025-08-24 13:22:31][354068193114997][14091 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fb5efbbf-3fac-424a-ad48-33ebd202904a","id":"QR_fb5efbbf-3fac-424a-ad48-33ebd202904a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:22:31][354068193114997][14247 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-24 13:22:31][354068193114997][14247 ms][DEBUG] END runCmdUntilRes#2 in 4155 ms [2025-08-24 13:22:31][354068193114997][14247 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:24:03][351272337749816][1 ms][INFO] === Request start === [2025-08-24 13:24:03][351272337749816][1 ms][DEBUG] START check_scloud [2025-08-24 13:24:03][351272337749816][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:24:04][351272337749816][311 ms][DEBUG] SU: done in 309 ms; outu0_a118 28630 5014 23595468 128704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:24:04][351272337749816][311 ms][DEBUG] targetPkg: running [2025-08-24 13:24:04][351272337749816][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-24 13:24:04][351272337749816][311 ms][DEBUG] START check_boot_completed [2025-08-24 13:24:04][351272337749816][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:24:04][351272337749816][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:24:04][351272337749816][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:24:04][351272337749816][406 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 13:24:04][351272337749816][406 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 13:24:04][351272337749816][406 ms][DEBUG] START check_internet [2025-08-24 13:24:04][351272337749816][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:24:04][351272337749816][935 ms][DEBUG] SU: done in 529 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.973/201.973/201.973/0.000 ms\n [2025-08-24 13:24:04][351272337749816][936 ms][DEBUG] check_internet: online [2025-08-24 13:24:04][351272337749816][936 ms][DEBUG] END check_internet in 530 ms [2025-08-24 13:24:04][351272337749816][936 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:24:04][351272337749816][936 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272337749816\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8547\"}'\'' -e'"" [2025-08-24 13:24:04][351272337749816][936 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:24:04][351272337749816][936 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272337749816\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8547\"}'\'' -e'"" [2025-08-24 13:24:08][351272337749816][4919 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e575c321-12a6-4430-8c7f-d8ab2da5be36","id":"QR_e575c321-12a6-4430-8c7f-d8ab2da5be36","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:24:08][351272337749816][5075 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-08-24 13:24:08][351272337749816][5075 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-08-24 13:24:08][351272337749816][5075 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:24:10][353881489514808][0 ms][INFO] === Request start === [2025-08-24 13:24:10][353881489514808][1 ms][DEBUG] START check_scloud [2025-08-24 13:24:10][353881489514808][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:24:10][353881489514808][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 28630 5014 23774804 139168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:24:10][353881489514808][285 ms][DEBUG] targetPkg: running [2025-08-24 13:24:10][353881489514808][285 ms][DEBUG] END check_scloud in 285 ms [2025-08-24 13:24:10][353881489514808][285 ms][DEBUG] START check_boot_completed [2025-08-24 13:24:10][353881489514808][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:24:10][353881489514808][332 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:24:10][353881489514808][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:24:10][353881489514808][379 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:24:10][353881489514808][379 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 13:24:10][353881489514808][379 ms][DEBUG] START check_internet [2025-08-24 13:24:10][353881489514808][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:24:11][353881489514808][629 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=135 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 135.114/135.114/135.114/0.000 ms\n [2025-08-24 13:24:11][353881489514808][629 ms][DEBUG] check_internet: online [2025-08-24 13:24:11][353881489514808][629 ms][DEBUG] END check_internet in 250 ms [2025-08-24 13:24:11][353881489514808][629 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:24:11][353881489514808][629 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881489514808\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2022\"}'\'' -e'"" [2025-08-24 13:24:11][353881489514808][629 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:24:11][353881489514808][629 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881489514808\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2022\"}'\'' -e'"" [2025-08-24 13:24:14][353881489514808][4034 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 13:24:14][353881489514808][4190 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=107 [2025-08-24 13:24:14][353881489514808][4190 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-08-24 13:24:14][353881489514808][4190 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 13:24:14][][0 ms][INFO] === Request start === [2025-08-24 13:24:14][][1 ms][DEBUG] START check_scloud [2025-08-24 13:24:14][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:24:15][][304 ms][DEBUG] SU: done in 304 ms; outu0_a118 28630 5014 23896796 150768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:24:15][][305 ms][DEBUG] targetPkg: running [2025-08-24 13:24:15][][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-24 13:24:15][][305 ms][DEBUG] START check_boot_completed [2025-08-24 13:24:15][][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:24:15][][335 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 13:24:15][][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:24:15][][382 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:24:15][][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 13:24:15][][383 ms][DEBUG] START check_internet [2025-08-24 13:24:15][][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:24:15][][617 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.444/142.444/142.444/0.000 ms\n [2025-08-24 13:24:15][][617 ms][DEBUG] check_internet: online [2025-08-24 13:24:15][][617 ms][DEBUG] END check_internet in 234 ms [2025-08-24 13:24:15][][617 ms][DEBUG] rawBody.length=1129 [2025-08-24 13:24:15][][617 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCTB1Q6CCA\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4178\"}'\'' -e'"" [2025-08-24 13:24:15][][617 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:24:15][][617 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCTB1Q6CCA\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4178\"}'\'' -e'"" [2025-08-24 13:24:19][][4225 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 13:24:19][][4381 ms][DEBUG] proc_open done in 3765 ms; code=255; res.len=107 [2025-08-24 13:24:19][][4382 ms][DEBUG] END runCmdUntilRes#1 in 3765 ms [2025-08-24 13:24:19][][4382 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 13:27:03][354892910612763][1 ms][INFO] === Request start === [2025-08-24 13:27:03][354892910612763][1 ms][DEBUG] START check_scloud [2025-08-24 13:27:03][354892910612763][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:27:03][354892910612763][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 28630 5014 23970540 162076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:27:03][354892910612763][290 ms][DEBUG] targetPkg: running [2025-08-24 13:27:03][354892910612763][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-24 13:27:03][354892910612763][290 ms][DEBUG] START check_boot_completed [2025-08-24 13:27:03][354892910612763][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:27:03][354892910612763][322 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 13:27:03][354892910612763][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:27:03][354892910612763][369 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:27:03][354892910612763][369 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 13:27:03][354892910612763][369 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:27:03][354892910612763][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354892910612763\",\"model\":\"SM-A336N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7340\"}'\'' -e'"" [2025-08-24 13:27:03][354892910612763][369 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:27:03][354892910612763][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354892910612763\",\"model\":\"SM-A336N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7340\"}'\'' -e'"" [2025-08-24 13:27:08][354892910612763][4524 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5cb6f078-8543-4dcc-b565-e068a6710593","id":"QR_5cb6f078-8543-4dcc-b565-e068a6710593","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:27:08][354892910612763][4680 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-24 13:27:08][354892910612763][4680 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-24 13:27:08][354892910612763][4680 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:27:10][356599313793292][0 ms][INFO] === Request start === [2025-08-24 13:27:10][356599313793292][1 ms][DEBUG] START check_scloud [2025-08-24 13:27:10][356599313793292][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:27:11][356599313793292][275 ms][DEBUG] SU: done in 275 ms; outu0_a118 28630 5014 24131572 173916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:27:11][356599313793292][275 ms][DEBUG] targetPkg: running [2025-08-24 13:27:11][356599313793292][275 ms][DEBUG] END check_scloud in 275 ms [2025-08-24 13:27:11][356599313793292][275 ms][DEBUG] START check_boot_completed [2025-08-24 13:27:11][356599313793292][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:27:11][356599313793292][307 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 13:27:11][356599313793292][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:27:11][356599313793292][369 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 13:27:11][356599313793292][369 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 13:27:11][356599313793292][369 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:27:11][356599313793292][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356599313793292\",\"model\":\"SM-M156S\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7341\"}'\'' -e'"" [2025-08-24 13:27:11][356599313793292][369 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:27:11][356599313793292][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356599313793292\",\"model\":\"SM-M156S\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7341\"}'\'' -e'"" [2025-08-24 13:27:14][356599313793292][4087 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1f73dfec-b6f2-476f-8e6b-5ba95d92962c","id":"QR_1f73dfec-b6f2-476f-8e6b-5ba95d92962c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:27:14][356599313793292][4243 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-08-24 13:27:14][356599313793292][4243 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-24 13:27:14][356599313793292][4243 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:27:17][350637543427244][0 ms][INFO] === Request start === [2025-08-24 13:27:17][350637543427244][1 ms][DEBUG] START check_scloud [2025-08-24 13:27:17][350637543427244][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:27:17][350637543427244][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 28630 5014 24306940 185080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:27:17][350637543427244][250 ms][DEBUG] targetPkg: running [2025-08-24 13:27:17][350637543427244][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-24 13:27:17][350637543427244][251 ms][DEBUG] START check_boot_completed [2025-08-24 13:27:17][350637543427244][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:27:17][350637543427244][297 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:27:17][350637543427244][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:27:17][350637543427244][344 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:27:17][350637543427244][344 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:27:17][350637543427244][344 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:27:17][350637543427244][344 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637543427244\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6055\"}'\'' -e'"" [2025-08-24 13:27:17][350637543427244][344 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:27:17][350637543427244][344 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637543427244\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6055\"}'\'' -e'"" [2025-08-24 13:27:21][350637543427244][4062 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f0c9c6e6-4180-4cda-9483-8da76e3eeaa2","id":"QR_f0c9c6e6-4180-4cda-9483-8da76e3eeaa2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:27:21][350637543427244][4218 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-08-24 13:27:21][350637543427244][4218 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-24 13:27:21][350637543427244][4218 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:29:03][352192665583836][0 ms][INFO] === Request start === [2025-08-24 13:29:03][352192665583836][1 ms][DEBUG] START check_scloud [2025-08-24 13:29:03][352192665583836][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:29:03][352192665583836][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 28630 5014 24420760 197804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:29:03][352192665583836][295 ms][DEBUG] targetPkg: running [2025-08-24 13:29:03][352192665583836][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-24 13:29:03][352192665583836][295 ms][DEBUG] START check_boot_completed [2025-08-24 13:29:03][352192665583836][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:29:03][352192665583836][342 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:29:03][352192665583836][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:29:03][352192665583836][404 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 13:29:03][352192665583836][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 13:29:03][352192665583836][404 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:29:03][352192665583836][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192665583836\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9340\"}'\'' -e'"" [2025-08-24 13:29:03][352192665583836][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:29:03][352192665583836][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192665583836\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9340\"}'\'' -e'"" [2025-08-24 13:29:08][352192665583836][4559 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f68d0acc-5d6b-4c59-9cb8-14aec3301d91","id":"QR_f68d0acc-5d6b-4c59-9cb8-14aec3301d91","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:29:08][352192665583836][4716 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-24 13:29:08][352192665583836][4716 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-24 13:29:08][352192665583836][4716 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:29:10][352842932315442][1 ms][INFO] === Request start === [2025-08-24 13:29:10][352842932315442][1 ms][DEBUG] START check_scloud [2025-08-24 13:29:10][352842932315442][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:29:11][352842932315442][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 28630 5014 24598176 208632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:29:11][352842932315442][308 ms][DEBUG] targetPkg: running [2025-08-24 13:29:11][352842932315442][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-24 13:29:11][352842932315442][309 ms][DEBUG] START check_boot_completed [2025-08-24 13:29:11][352842932315442][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:29:11][352842932315442][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 13:29:11][352842932315442][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:29:11][352842932315442][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:29:11][352842932315442][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 13:29:11][352842932315442][387 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:29:11][352842932315442][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352842932315442\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9225\"}'\'' -e'"" [2025-08-24 13:29:11][352842932315442][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:29:11][352842932315442][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352842932315442\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9225\"}'\'' -e'"" [2025-08-24 13:29:14][352842932315442][4104 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_12e10530-03ea-43c5-819b-0a67bde7f2ad","id":"QR_12e10530-03ea-43c5-819b-0a67bde7f2ad","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:29:15][352842932315442][4261 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-08-24 13:29:15][352842932315442][4261 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-24 13:29:15][352842932315442][4261 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:30:04][356414819726889][0 ms][INFO] === Request start === [2025-08-24 13:30:04][356414819726889][1 ms][DEBUG] START check_scloud [2025-08-24 13:30:04][356414819726889][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:30:04][356414819726889][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 28630 5014 24732512 220740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:30:04][356414819726889][303 ms][DEBUG] targetPkg: running [2025-08-24 13:30:04][356414819726889][303 ms][DEBUG] END check_scloud in 303 ms [2025-08-24 13:30:04][356414819726889][304 ms][DEBUG] START check_boot_completed [2025-08-24 13:30:04][356414819726889][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:30:04][356414819726889][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:30:04][356414819726889][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:30:04][356414819726889][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:30:04][356414819726889][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:30:04][356414819726889][397 ms][DEBUG] START check_internet [2025-08-24 13:30:04][356414819726889][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:30:04][356414819726889][881 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.340/203.340/203.340/0.000 ms\n [2025-08-24 13:30:04][356414819726889][881 ms][DEBUG] check_internet: online [2025-08-24 13:30:04][356414819726889][882 ms][DEBUG] END check_internet in 485 ms [2025-08-24 13:30:04][356414819726889][882 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:30:04][356414819726889][882 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414819726889\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1634\"}'\'' -e'"" [2025-08-24 13:30:04][356414819726889][882 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:30:04][356414819726889][882 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414819726889\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1634\"}'\'' -e'"" [2025-08-24 13:30:09][356414819726889][5036 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d4890108-aaeb-4882-b328-d133f781d89b","id":"QR_d4890108-aaeb-4882-b328-d133f781d89b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:30:09][356414819726889][5192 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-24 13:30:09][356414819726889][5192 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-24 13:30:09][356414819726889][5192 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:33:03][353936441851043][1 ms][INFO] === Request start === [2025-08-24 13:33:03][353936441851043][1 ms][DEBUG] START check_scloud [2025-08-24 13:33:03][353936441851043][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:33:03][353936441851043][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 28630 5014 24845440 231664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:33:03][353936441851043][302 ms][DEBUG] targetPkg: running [2025-08-24 13:33:03][353936441851043][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-24 13:33:03][353936441851043][302 ms][DEBUG] START check_boot_completed [2025-08-24 13:33:03][353936441851043][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:33:03][353936441851043][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:33:03][353936441851043][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:33:03][353936441851043][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:33:03][353936441851043][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:33:03][353936441851043][395 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:33:03][353936441851043][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353936441851043\",\"model\":\"SM-F741B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5228\"}'\'' -e'"" [2025-08-24 13:33:03][353936441851043][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:33:03][353936441851043][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353936441851043\",\"model\":\"SM-F741B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5228\"}'\'' -e'"" [2025-08-24 13:33:07][353936441851043][4676 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f29ea247-5b09-476c-abf2-5bcd87f37ae2","id":"QR_f29ea247-5b09-476c-abf2-5bcd87f37ae2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:33:07][353936441851043][4832 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-08-24 13:33:07][353936441851043][4832 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-08-24 13:33:07][353936441851043][4832 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:33:10][350543334172413][0 ms][INFO] === Request start === [2025-08-24 13:33:10][350543334172413][0 ms][DEBUG] START check_scloud [2025-08-24 13:33:10][350543334172413][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:33:10][350543334172413][297 ms][DEBUG] SU: done in 297 ms; outu0_a118 28630 5014 25024776 243448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:33:10][350543334172413][298 ms][DEBUG] targetPkg: running [2025-08-24 13:33:10][350543334172413][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-24 13:33:10][350543334172413][298 ms][DEBUG] START check_boot_completed [2025-08-24 13:33:10][350543334172413][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:33:10][350543334172413][343 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 13:33:10][350543334172413][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:33:10][350543334172413][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:33:10][350543334172413][390 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-24 13:33:10][350543334172413][390 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:33:10][350543334172413][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350543334172413\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"DKR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2766\"}'\'' -e'"" [2025-08-24 13:33:10][350543334172413][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:33:10][350543334172413][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350543334172413\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"DKR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2766\"}'\'' -e'"" [2025-08-24 13:33:14][350543334172413][4061 ms][DEBUG] proc_open done in 3671 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 13:33:14][350543334172413][4061 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-24 13:33:14][350543334172413][4061 ms][WARN] Detected error: Process with pid 28630 either refused to load frida-agent, or terminated during injection [2025-08-24 13:33:14][350543334172413][4061 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 13:33:14][350543334172413][4201 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 13:33:14][350543334172413][4201 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 13:33:14][350543334172413][4201 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 13:33:14][350543334172413][4311 ms][DEBUG] SU: done in 109 ms; out [2025-08-24 13:33:14][350543334172413][4311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 13:33:14][350543334172413][4451 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 13:33:16][350543334172413][6466 ms][DEBUG] START check_boot_completed [2025-08-24 13:33:16][350543334172413][6466 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:33:16][350543334172413][6498 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 13:33:16][350543334172413][6498 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:33:16][350543334172413][6545 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:33:16][350543334172413][6545 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 13:33:19][350543334172413][9559 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 13:33:19][350543334172413][9559 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350543334172413\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"DKR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2766\"}'\'' -e'"" [2025-08-24 13:33:23][350543334172413][13105 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dab3dd64-da75-4846-9ff3-d53b0abdc075","id":"QR_dab3dd64-da75-4846-9ff3-d53b0abdc075","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:33:23][350543334172413][13262 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-08-24 13:33:23][350543334172413][13262 ms][DEBUG] END runCmdUntilRes#2 in 3702 ms [2025-08-24 13:33:23][350543334172413][13262 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:36:02][352308822916061][1 ms][INFO] === Request start === [2025-08-24 13:36:02][352308822916061][1 ms][DEBUG] START check_scloud [2025-08-24 13:36:02][352308822916061][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:36:02][352308822916061][247 ms][DEBUG] SU: done in 245 ms; outu0_a118 29873 5014 23500104 129180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:36:02][352308822916061][247 ms][DEBUG] targetPkg: running [2025-08-24 13:36:02][352308822916061][247 ms][DEBUG] END check_scloud in 246 ms [2025-08-24 13:36:02][352308822916061][247 ms][DEBUG] START check_boot_completed [2025-08-24 13:36:02][352308822916061][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:36:02][352308822916061][276 ms][DEBUG] ADB: done in 30 ms; out [2025-08-24 13:36:02][352308822916061][276 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:36:02][352308822916061][324 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:36:02][352308822916061][324 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-24 13:36:02][352308822916061][324 ms][DEBUG] START check_internet [2025-08-24 13:36:02][352308822916061][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:36:03][352308822916061][870 ms][DEBUG] SU: done in 546 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.719/201.719/201.719/0.000 ms\n [2025-08-24 13:36:03][352308822916061][870 ms][DEBUG] check_internet: online [2025-08-24 13:36:03][352308822916061][870 ms][DEBUG] END check_internet in 547 ms [2025-08-24 13:36:03][352308822916061][870 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:36:03][352308822916061][871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352308822916061\",\"model\":\"SM-A426N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9055\"}'\'' -e'"" [2025-08-24 13:36:03][352308822916061][871 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:36:03][352308822916061][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352308822916061\",\"model\":\"SM-A426N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9055\"}'\'' -e'"" [2025-08-24 13:36:07][352308822916061][4869 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c05ea268-18f9-474a-94f7-75e51dcfcc94","id":"QR_c05ea268-18f9-474a-94f7-75e51dcfcc94","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:36:07][352308822916061][5025 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-24 13:36:07][352308822916061][5025 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-24 13:36:07][352308822916061][5025 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:39:05][351428310474893][1 ms][INFO] === Request start === [2025-08-24 13:39:05][351428310474893][1 ms][DEBUG] START check_scloud [2025-08-24 13:39:05][351428310474893][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:39:05][351428310474893][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 29873 5014 23615788 139968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:39:05][351428310474893][296 ms][DEBUG] targetPkg: running [2025-08-24 13:39:05][351428310474893][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-24 13:39:05][351428310474893][297 ms][DEBUG] START check_boot_completed [2025-08-24 13:39:05][351428310474893][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:39:05][351428310474893][343 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:39:05][351428310474893][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:39:05][351428310474893][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:39:05][351428310474893][390 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:39:05][351428310474893][390 ms][DEBUG] rawBody.length=1149 [2025-08-24 13:39:05][351428310474893][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351428310474893\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2039\"}'\'' -e'"" [2025-08-24 13:39:05][351428310474893][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:39:05][351428310474893][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351428310474893\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2039\"}'\'' -e'"" [2025-08-24 13:39:12][351428310474893][7107 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6e665868-42ee-4126-a35b-24a956fcd1fa","id":"QR_6e665868-42ee-4126-a35b-24a956fcd1fa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:39:12][351428310474893][7263 ms][DEBUG] proc_open done in 6873 ms; code=255; res.len=3343 [2025-08-24 13:39:12][351428310474893][7263 ms][DEBUG] END runCmdUntilRes#1 in 6873 ms [2025-08-24 13:39:12][351428310474893][7263 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:41:03][352600228507282][0 ms][INFO] === Request start === [2025-08-24 13:41:03][352600228507282][1 ms][DEBUG] START check_scloud [2025-08-24 13:41:03][352600228507282][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:41:03][352600228507282][260 ms][DEBUG] SU: done in 259 ms; out [2025-08-24 13:41:03][352600228507282][260 ms][WARN] targetPkg: not running, restarting [2025-08-24 13:41:03][352600228507282][260 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 13:41:03][352600228507282][385 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 13:41:03][352600228507282][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 13:41:03][352600228507282][573 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 13:41:05][352600228507282][2588 ms][DEBUG] END check_scloud in 2587 ms [2025-08-24 13:41:05][352600228507282][2588 ms][DEBUG] START check_boot_completed [2025-08-24 13:41:05][352600228507282][2588 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:41:05][352600228507282][2635 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:41:05][352600228507282][2635 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:41:05][352600228507282][2697 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 13:41:05][352600228507282][2697 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 13:41:05][352600228507282][2697 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:41:05][352600228507282][2697 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600228507282\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4473\"}'\'' -e'"" [2025-08-24 13:41:05][352600228507282][2698 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:41:05][352600228507282][2698 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600228507282\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4473\"}'\'' -e'"" [2025-08-24 13:41:10][352600228507282][7149 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_63623e9c-3974-4f26-a82a-b86f3d33b97d","id":"QR_63623e9c-3974-4f26-a82a-b86f3d33b97d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:41:10][352600228507282][7305 ms][DEBUG] proc_open done in 4607 ms; code=255; res.len=3343 [2025-08-24 13:41:10][352600228507282][7305 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-08-24 13:41:10][352600228507282][7305 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:42:03][354747951205770][1 ms][INFO] === Request start === [2025-08-24 13:42:03][354747951205770][1 ms][DEBUG] START check_scloud [2025-08-24 13:42:03][354747951205770][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:42:03][354747951205770][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 30350 5014 23588720 128984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:42:03][354747951205770][266 ms][DEBUG] targetPkg: running [2025-08-24 13:42:03][354747951205770][266 ms][DEBUG] END check_scloud in 265 ms [2025-08-24 13:42:03][354747951205770][266 ms][DEBUG] START check_boot_completed [2025-08-24 13:42:03][354747951205770][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:42:03][354747951205770][313 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 13:42:03][354747951205770][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:42:03][354747951205770][360 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:42:03][354747951205770][360 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:42:03][354747951205770][360 ms][DEBUG] START check_internet [2025-08-24 13:42:03][354747951205770][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:42:04][354747951205770][846 ms][DEBUG] SU: done in 486 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.430/200.430/200.430/0.000 ms\n [2025-08-24 13:42:04][354747951205770][846 ms][DEBUG] check_internet: online [2025-08-24 13:42:04][354747951205770][846 ms][DEBUG] END check_internet in 486 ms [2025-08-24 13:42:04][354747951205770][846 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:42:04][354747951205770][846 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747951205770\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9282\"}'\'' -e'"" [2025-08-24 13:42:04][354747951205770][846 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:42:04][354747951205770][846 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747951205770\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9282\"}'\'' -e'"" [2025-08-24 13:42:08][354747951205770][4640 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aba706e6-0acf-46d5-a1ae-516b939071ca","id":"QR_aba706e6-0acf-46d5-a1ae-516b939071ca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:42:08][354747951205770][4796 ms][DEBUG] proc_open done in 3950 ms; code=255; res.len=3343 [2025-08-24 13:42:08][354747951205770][4796 ms][DEBUG] END runCmdUntilRes#1 in 3950 ms [2025-08-24 13:42:08][354747951205770][4796 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:46:03][357962504492356][1 ms][INFO] === Request start === [2025-08-24 13:46:03][357962504492356][1 ms][DEBUG] START check_scloud [2025-08-24 13:46:03][357962504492356][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:46:03][357962504492356][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 30350 5014 23722916 139780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:46:03][357962504492356][305 ms][DEBUG] targetPkg: running [2025-08-24 13:46:03][357962504492356][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-24 13:46:03][357962504492356][305 ms][DEBUG] START check_boot_completed [2025-08-24 13:46:03][357962504492356][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:46:03][357962504492356][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:46:03][357962504492356][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:46:03][357962504492356][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:46:03][357962504492356][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:46:03][357962504492356][398 ms][DEBUG] START check_internet [2025-08-24 13:46:03][357962504492356][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:46:04][357962504492356][960 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.839/199.839/199.839/0.000 ms\n [2025-08-24 13:46:04][357962504492356][960 ms][DEBUG] check_internet: online [2025-08-24 13:46:04][357962504492356][960 ms][DEBUG] END check_internet in 562 ms [2025-08-24 13:46:04][357962504492356][960 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:46:04][357962504492356][960 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962504492356\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6576\"}'\'' -e'"" [2025-08-24 13:46:04][357962504492356][960 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:46:04][357962504492356][960 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962504492356\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6576\"}'\'' -e'"" [2025-08-24 13:46:09][357962504492356][5678 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_263e3545-c5a5-4a92-b672-fe1211de14f8","id":"QR_263e3545-c5a5-4a92-b672-fe1211de14f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:46:09][357962504492356][5834 ms][DEBUG] proc_open done in 4874 ms; code=255; res.len=3343 [2025-08-24 13:46:09][357962504492356][5834 ms][DEBUG] END runCmdUntilRes#1 in 4874 ms [2025-08-24 13:46:09][357962504492356][5834 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:49:03][350637542147256][1 ms][INFO] === Request start === [2025-08-24 13:49:03][350637542147256][1 ms][DEBUG] START check_scloud [2025-08-24 13:49:03][350637542147256][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:49:03][350637542147256][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 30350 5014 23840712 149700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:49:03][350637542147256][317 ms][DEBUG] targetPkg: running [2025-08-24 13:49:03][350637542147256][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-24 13:49:03][350637542147256][317 ms][DEBUG] START check_boot_completed [2025-08-24 13:49:03][350637542147256][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:49:03][350637542147256][348 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 13:49:03][350637542147256][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:49:03][350637542147256][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:49:03][350637542147256][395 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 13:49:03][350637542147256][395 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:49:03][350637542147256][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637542147256\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6278\"}'\'' -e'"" [2025-08-24 13:49:03][350637542147256][396 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:49:03][350637542147256][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637542147256\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6278\"}'\'' -e'"" [2025-08-24 13:49:07][350637542147256][4816 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7815d835-ede9-4ebe-b9c8-e587c8ce7efc","id":"QR_7815d835-ede9-4ebe-b9c8-e587c8ce7efc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:49:08][350637542147256][4972 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=3343 [2025-08-24 13:49:08][350637542147256][4972 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-08-24 13:49:08][350637542147256][4972 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:49:10][350805650602608][1 ms][INFO] === Request start === [2025-08-24 13:49:10][350805650602608][1 ms][DEBUG] START check_scloud [2025-08-24 13:49:10][350805650602608][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:49:10][350805650602608][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 30350 5014 24007760 149320 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:49:10][350805650602608][309 ms][DEBUG] targetPkg: running [2025-08-24 13:49:10][350805650602608][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-24 13:49:10][350805650602608][309 ms][DEBUG] START check_boot_completed [2025-08-24 13:49:10][350805650602608][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:49:11][350805650602608][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:49:11][350805650602608][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:49:11][350805650602608][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:49:11][350805650602608][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:49:11][350805650602608][402 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:49:11][350805650602608][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650602608\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9313\"}'\'' -e'"" [2025-08-24 13:49:11][350805650602608][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:49:11][350805650602608][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650602608\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9313\"}'\'' -e'"" [2025-08-24 13:49:14][350805650602608][4276 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bff65a04-dbcb-4150-a8e7-b2d0a5e91670","id":"QR_bff65a04-dbcb-4150-a8e7-b2d0a5e91670","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:49:15][350805650602608][4433 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-24 13:49:15][350805650602608][4433 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-24 13:49:15][350805650602608][4433 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:51:03][354068191388072][1 ms][INFO] === Request start === [2025-08-24 13:51:03][354068191388072][1 ms][DEBUG] START check_scloud [2025-08-24 13:51:03][354068191388072][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:51:03][354068191388072][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 30350 5014 24151824 145284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:51:03][354068191388072][318 ms][DEBUG] targetPkg: running [2025-08-24 13:51:03][354068191388072][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-24 13:51:03][354068191388072][319 ms][DEBUG] START check_boot_completed [2025-08-24 13:51:03][354068191388072][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:51:03][354068191388072][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:51:03][354068191388072][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:51:03][354068191388072][428 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 13:51:03][354068191388072][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 13:51:03][354068191388072][428 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:51:03][354068191388072][428 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191388072\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9857\"}'\'' -e'"" [2025-08-24 13:51:03][354068191388072][428 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:51:03][354068191388072][428 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068191388072\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9857\"}'\'' -e'"" [2025-08-24 13:51:07][354068191388072][4395 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f7689f1a-ce7b-41c7-839b-4e0531bf2ae3","id":"QR_f7689f1a-ce7b-41c7-839b-4e0531bf2ae3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:51:07][354068191388072][4551 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-08-24 13:51:07][354068191388072][4551 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-24 13:51:07][354068191388072][4552 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:54:03][354360414699033][1 ms][INFO] === Request start === [2025-08-24 13:54:03][354360414699033][1 ms][DEBUG] START check_scloud [2025-08-24 13:54:03][354360414699033][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:54:03][354360414699033][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 30350 5014 24316916 157252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:54:03][354360414699033][308 ms][DEBUG] targetPkg: running [2025-08-24 13:54:03][354360414699033][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-24 13:54:03][354360414699033][308 ms][DEBUG] START check_boot_completed [2025-08-24 13:54:03][354360414699033][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:54:03][354360414699033][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 13:54:03][354360414699033][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:54:03][354360414699033][387 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 13:54:03][354360414699033][387 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 13:54:03][354360414699033][388 ms][DEBUG] START check_internet [2025-08-24 13:54:03][354360414699033][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:54:04][354360414699033][917 ms][DEBUG] SU: done in 530 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.198/203.198/203.198/0.000 ms\n [2025-08-24 13:54:04][354360414699033][918 ms][DEBUG] check_internet: online [2025-08-24 13:54:04][354360414699033][918 ms][DEBUG] END check_internet in 530 ms [2025-08-24 13:54:04][354360414699033][918 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:54:04][354360414699033][918 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360414699033\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1263\"}'\'' -e'"" [2025-08-24 13:54:04][354360414699033][918 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:54:04][354360414699033][918 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360414699033\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1263\"}'\'' -e'"" [2025-08-24 13:54:08][354360414699033][5041 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_52793121-e13c-4422-a825-f72bd2e83a9a","id":"QR_52793121-e13c-4422-a825-f72bd2e83a9a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:54:08][354360414699033][5197 ms][DEBUG] proc_open done in 4279 ms; code=255; res.len=3343 [2025-08-24 13:54:08][354360414699033][5197 ms][DEBUG] END runCmdUntilRes#1 in 4279 ms [2025-08-24 13:54:08][354360414699033][5197 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:54:11][355084250901076][0 ms][INFO] === Request start === [2025-08-24 13:54:11][355084250901076][1 ms][DEBUG] START check_scloud [2025-08-24 13:54:11][355084250901076][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:54:11][355084250901076][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 30350 5014 24443004 168200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:54:11][355084250901076][316 ms][DEBUG] targetPkg: running [2025-08-24 13:54:11][355084250901076][316 ms][DEBUG] END check_scloud in 316 ms [2025-08-24 13:54:11][355084250901076][316 ms][DEBUG] START check_boot_completed [2025-08-24 13:54:11][355084250901076][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:54:11][355084250901076][363 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:54:11][355084250901076][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:54:11][355084250901076][410 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:54:11][355084250901076][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 13:54:11][355084250901076][410 ms][DEBUG] START check_internet [2025-08-24 13:54:11][355084250901076][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 13:54:12][355084250901076][769 ms][DEBUG] SU: done in 360 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=255 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 255.394/255.394/255.394/0.000 ms\n [2025-08-24 13:54:12][355084250901076][770 ms][DEBUG] check_internet: online [2025-08-24 13:54:12][355084250901076][770 ms][DEBUG] END check_internet in 360 ms [2025-08-24 13:54:12][355084250901076][770 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:54:12][355084250901076][770 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355084250901076\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1456\"}'\'' -e'"" [2025-08-24 13:54:12][355084250901076][770 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:54:12][355084250901076][770 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355084250901076\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1456\"}'\'' -e'"" [2025-08-24 13:54:15][355084250901076][4643 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b40ddea6-10b8-4cfb-b15c-74804023dbcf","id":"QR_b40ddea6-10b8-4cfb-b15c-74804023dbcf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:54:16][355084250901076][4799 ms][DEBUG] proc_open done in 4029 ms; code=255; res.len=3343 [2025-08-24 13:54:16][355084250901076][4799 ms][DEBUG] END runCmdUntilRes#1 in 4029 ms [2025-08-24 13:54:16][355084250901076][4799 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:55:03][350938288316000][0 ms][INFO] === Request start === [2025-08-24 13:55:03][350938288316000][1 ms][DEBUG] START check_scloud [2025-08-24 13:55:03][350938288316000][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:55:04][350938288316000][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 30350 5014 24580220 179540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:55:04][350938288316000][309 ms][DEBUG] targetPkg: running [2025-08-24 13:55:04][350938288316000][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-24 13:55:04][350938288316000][309 ms][DEBUG] START check_boot_completed [2025-08-24 13:55:04][350938288316000][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:55:04][350938288316000][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 13:55:04][350938288316000][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:55:04][350938288316000][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:55:04][350938288316000][402 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 13:55:04][350938288316000][403 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:55:04][350938288316000][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938288316000\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9964\"}'\'' -e'"" [2025-08-24 13:55:04][350938288316000][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:55:04][350938288316000][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938288316000\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9964\"}'\'' -e'"" [2025-08-24 13:55:08][350938288316000][4589 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e951ae22-d776-461a-891f-1e04a5118e14","id":"QR_e951ae22-d776-461a-891f-1e04a5118e14","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:55:08][350938288316000][4745 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-08-24 13:55:08][350938288316000][4745 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-24 13:55:08][350938288316000][4745 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 13:57:03][352397453224473][1 ms][INFO] === Request start === [2025-08-24 13:57:03][352397453224473][1 ms][DEBUG] START check_scloud [2025-08-24 13:57:03][352397453224473][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 13:57:03][352397453224473][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 30350 5014 24716512 191152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 13:57:03][352397453224473][302 ms][DEBUG] targetPkg: running [2025-08-24 13:57:03][352397453224473][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-24 13:57:03][352397453224473][302 ms][DEBUG] START check_boot_completed [2025-08-24 13:57:03][352397453224473][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 13:57:03][352397453224473][333 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 13:57:03][352397453224473][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 13:57:03][352397453224473][380 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 13:57:03][352397453224473][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 13:57:03][352397453224473][380 ms][DEBUG] rawBody.length=1148 [2025-08-24 13:57:03][352397453224473][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453224473\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5305\"}'\'' -e'"" [2025-08-24 13:57:03][352397453224473][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 13:57:03][352397453224473][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453224473\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5305\"}'\'' -e'"" [2025-08-24 13:57:07][352397453224473][4785 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0029486c-13c1-44eb-ad8d-618750533dd6","id":"QR_0029486c-13c1-44eb-ad8d-618750533dd6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 13:57:08][352397453224473][4941 ms][DEBUG] proc_open done in 4561 ms; code=255; res.len=3343 [2025-08-24 13:57:08][352397453224473][4941 ms][DEBUG] END runCmdUntilRes#1 in 4561 ms [2025-08-24 13:57:08][352397453224473][4942 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:02:03][350637544819019][1 ms][INFO] === Request start === [2025-08-24 14:02:03][350637544819019][1 ms][DEBUG] START check_scloud [2025-08-24 14:02:03][350637544819019][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:02:04][350637544819019][302 ms][DEBUG] SU: done in 300 ms; outu0_a118 30350 5014 24873284 202876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:02:04][350637544819019][302 ms][DEBUG] targetPkg: running [2025-08-24 14:02:04][350637544819019][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-24 14:02:04][350637544819019][302 ms][DEBUG] START check_boot_completed [2025-08-24 14:02:04][350637544819019][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:02:04][350637544819019][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 14:02:04][350637544819019][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:02:04][350637544819019][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 14:02:04][350637544819019][394 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 14:02:04][350637544819019][394 ms][DEBUG] START check_internet [2025-08-24 14:02:04][350637544819019][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 14:02:04][350637544819019][863 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.585/201.585/201.585/0.000 ms\n [2025-08-24 14:02:04][350637544819019][863 ms][DEBUG] check_internet: online [2025-08-24 14:02:04][350637544819019][863 ms][DEBUG] END check_internet in 469 ms [2025-08-24 14:02:04][350637544819019][863 ms][DEBUG] rawBody.length=1148 [2025-08-24 14:02:04][350637544819019][863 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544819019\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9992\"}'\'' -e'"" [2025-08-24 14:02:04][350637544819019][864 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:02:04][350637544819019][864 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544819019\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9992\"}'\'' -e'"" [2025-08-24 14:02:08][350637544819019][5174 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3eb02233-31ef-4ce8-a9c5-43af1fd2e29d","id":"QR_3eb02233-31ef-4ce8-a9c5-43af1fd2e29d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:02:09][350637544819019][5331 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3343 [2025-08-24 14:02:09][350637544819019][5331 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-08-24 14:02:09][350637544819019][5331 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:02:11][350287315802230][0 ms][INFO] === Request start === [2025-08-24 14:02:11][350287315802230][1 ms][DEBUG] START check_scloud [2025-08-24 14:02:11][350287315802230][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:02:11][350287315802230][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 30350 5014 25040464 206792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:02:11][350287315802230][310 ms][DEBUG] targetPkg: running [2025-08-24 14:02:11][350287315802230][310 ms][DEBUG] END check_scloud in 310 ms [2025-08-24 14:02:11][350287315802230][310 ms][DEBUG] START check_boot_completed [2025-08-24 14:02:11][350287315802230][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:02:11][350287315802230][357 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 14:02:11][350287315802230][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:02:12][350287315802230][419 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 14:02:12][350287315802230][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 14:02:12][350287315802230][419 ms][DEBUG] START check_internet [2025-08-24 14:02:12][350287315802230][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 14:02:12][350287315802230][779 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=241 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 241.645/241.645/241.645/0.000 ms\n [2025-08-24 14:02:12][350287315802230][779 ms][DEBUG] check_internet: online [2025-08-24 14:02:12][350287315802230][779 ms][DEBUG] END check_internet in 360 ms [2025-08-24 14:02:12][350287315802230][779 ms][DEBUG] rawBody.length=1148 [2025-08-24 14:02:12][350287315802230][779 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287315802230\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6498\"}'\'' -e'"" [2025-08-24 14:02:12][350287315802230][779 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:02:12][350287315802230][779 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287315802230\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6498\"}'\'' -e'"" [2025-08-24 14:02:16][350287315802230][4544 ms][DEBUG] proc_open done in 3764 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 14:02:16][350287315802230][4544 ms][DEBUG] END runCmdUntilRes#1 in 3765 ms [2025-08-24 14:02:16][350287315802230][4544 ms][WARN] Detected error: Process with pid 30350 either refused to load frida-agent, or terminated during injection [2025-08-24 14:02:16][350287315802230][4544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 14:02:16][350287315802230][4700 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 14:02:16][350287315802230][4700 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 14:02:16][350287315802230][4700 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 14:02:16][350287315802230][4840 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 14:02:16][350287315802230][4840 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 14:02:16][350287315802230][5028 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 14:02:18][350287315802230][7043 ms][DEBUG] START check_boot_completed [2025-08-24 14:02:18][350287315802230][7043 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:02:18][350287315802230][7090 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 14:02:18][350287315802230][7090 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:02:18][350287315802230][7136 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 14:02:18][350287315802230][7136 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 14:02:21][350287315802230][10151 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 14:02:21][350287315802230][10151 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287315802230\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6498\"}'\'' -e'"" [2025-08-24 14:02:25][350287315802230][13900 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_98c00c0b-4ce1-4875-8be9-dfa6f5a8d3fa","id":"QR_98c00c0b-4ce1-4875-8be9-dfa6f5a8d3fa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:02:25][350287315802230][14057 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-24 14:02:25][350287315802230][14057 ms][DEBUG] END runCmdUntilRes#2 in 3905 ms [2025-08-24 14:02:25][350287315802230][14057 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:03:03][352397450772094][0 ms][INFO] === Request start === [2025-08-24 14:03:03][352397450772094][1 ms][DEBUG] START check_scloud [2025-08-24 14:03:03][352397450772094][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:03:03][352397450772094][267 ms][DEBUG] SU: done in 267 ms; outu0_a118 417 5014 23543024 129164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:03:03][352397450772094][268 ms][DEBUG] targetPkg: running [2025-08-24 14:03:03][352397450772094][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-24 14:03:03][352397450772094][268 ms][DEBUG] START check_boot_completed [2025-08-24 14:03:03][352397450772094][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:03:03][352397450772094][314 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 14:03:03][352397450772094][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:03:03][352397450772094][361 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 14:03:03][352397450772094][361 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 14:03:03][352397450772094][361 ms][DEBUG] rawBody.length=1148 [2025-08-24 14:03:03][352397450772094][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397450772094\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7454\"}'\'' -e'"" [2025-08-24 14:03:03][352397450772094][361 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:03:03][352397450772094][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397450772094\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7454\"}'\'' -e'"" [2025-08-24 14:03:07][352397450772094][4454 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7766986f-17f3-403e-b1ca-b139f638175a","id":"QR_7766986f-17f3-403e-b1ca-b139f638175a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:03:08][352397450772094][4610 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-08-24 14:03:08][352397450772094][4610 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-24 14:03:08][352397450772094][4610 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:13:03][351273096291396][1 ms][INFO] === Request start === [2025-08-24 14:13:03][351273096291396][1 ms][DEBUG] START check_scloud [2025-08-24 14:13:03][351273096291396][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:13:03][351273096291396][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 417 5014 23666748 139984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:13:03][351273096291396][252 ms][DEBUG] targetPkg: running [2025-08-24 14:13:03][351273096291396][252 ms][DEBUG] END check_scloud in 251 ms [2025-08-24 14:13:03][351273096291396][252 ms][DEBUG] START check_boot_completed [2025-08-24 14:13:03][351273096291396][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:13:03][351273096291396][283 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 14:13:03][351273096291396][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:13:03][351273096291396][330 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 14:13:03][351273096291396][330 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 14:13:03][351273096291396][331 ms][DEBUG] rawBody.length=1148 [2025-08-24 14:13:03][351273096291396][331 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351273096291396\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7617\"}'\'' -e'"" [2025-08-24 14:13:03][351273096291396][331 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:13:03][351273096291396][331 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351273096291396\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7617\"}'\'' -e'"" [2025-08-24 14:13:07][351273096291396][4485 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1ddc4220-98dd-4e3a-9759-9c87488a1ab8","id":"QR_1ddc4220-98dd-4e3a-9759-9c87488a1ab8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:13:07][351273096291396][4641 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-24 14:13:07][351273096291396][4642 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-24 14:13:07][351273096291396][4642 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:13:09][352133643659082][0 ms][INFO] === Request start === [2025-08-24 14:13:09][352133643659082][1 ms][DEBUG] START check_scloud [2025-08-24 14:13:09][352133643659082][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:13:09][352133643659082][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 417 5014 23863632 151736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:13:09][352133643659082][304 ms][DEBUG] targetPkg: running [2025-08-24 14:13:09][352133643659082][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-24 14:13:09][352133643659082][304 ms][DEBUG] START check_boot_completed [2025-08-24 14:13:09][352133643659082][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:13:09][352133643659082][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 14:13:09][352133643659082][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:13:09][352133643659082][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 14:13:09][352133643659082][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 14:13:09][352133643659082][397 ms][DEBUG] rawBody.length=1148 [2025-08-24 14:13:09][352133643659082][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352133643659082\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4406\"}'\'' -e'"" [2025-08-24 14:13:09][352133643659082][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:13:09][352133643659082][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352133643659082\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4406\"}'\'' -e'"" [2025-08-24 14:13:13][352133643659082][4084 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c8d5c25b-e642-4c98-a656-8271c59c56a8","id":"QR_c8d5c25b-e642-4c98-a656-8271c59c56a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:13:13][352133643659082][4240 ms][DEBUG] proc_open done in 3843 ms; code=255; res.len=3343 [2025-08-24 14:13:13][352133643659082][4240 ms][DEBUG] END runCmdUntilRes#1 in 3843 ms [2025-08-24 14:13:13][352133643659082][4240 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:14:04][352766390926988][0 ms][INFO] === Request start === [2025-08-24 14:14:04][352766390926988][1 ms][DEBUG] START check_scloud [2025-08-24 14:14:04][352766390926988][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:14:04][352766390926988][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 417 5014 23963088 162900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:14:04][352766390926988][268 ms][DEBUG] targetPkg: running [2025-08-24 14:14:04][352766390926988][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-24 14:14:04][352766390926988][268 ms][DEBUG] START check_boot_completed [2025-08-24 14:14:04][352766390926988][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:14:04][352766390926988][299 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 14:14:04][352766390926988][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:14:04][352766390926988][346 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 14:14:04][352766390926988][346 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 14:14:04][352766390926988][346 ms][DEBUG] START check_internet [2025-08-24 14:14:04][352766390926988][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 14:14:05][352766390926988][783 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.323/201.323/201.323/0.000 ms\n [2025-08-24 14:14:05][352766390926988][783 ms][DEBUG] check_internet: online [2025-08-24 14:14:05][352766390926988][783 ms][DEBUG] END check_internet in 437 ms [2025-08-24 14:14:05][352766390926988][783 ms][DEBUG] rawBody.length=1149 [2025-08-24 14:14:05][352766390926988][784 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352766390926988\",\"model\":\"SM-S911U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5378\"}'\'' -e'"" [2025-08-24 14:14:05][352766390926988][784 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:14:05][352766390926988][784 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352766390926988\",\"model\":\"SM-S911U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5378\"}'\'' -e'"" [2025-08-24 14:14:10][352766390926988][6344 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3c3b222b-ac0b-42f7-863a-a21b6c76bcb7","id":"QR_3c3b222b-ac0b-42f7-863a-a21b6c76bcb7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:14:11][352766390926988][6500 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-08-24 14:14:11][352766390926988][6501 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-08-24 14:14:11][352766390926988][6501 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:18:02][351843261155608][1 ms][INFO] === Request start === [2025-08-24 14:18:02][351843261155608][1 ms][DEBUG] START check_scloud [2025-08-24 14:18:02][351843261155608][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:18:03][351843261155608][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 417 5014 24103604 172924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:18:03][351843261155608][262 ms][DEBUG] targetPkg: running [2025-08-24 14:18:03][351843261155608][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-24 14:18:03][351843261155608][262 ms][DEBUG] START check_boot_completed [2025-08-24 14:18:03][351843261155608][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:18:03][351843261155608][293 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 14:18:03][351843261155608][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:18:03][351843261155608][340 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 14:18:03][351843261155608][341 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 14:18:03][351843261155608][341 ms][DEBUG] START check_internet [2025-08-24 14:18:03][351843261155608][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 14:18:03][351843261155608][809 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.671/201.671/201.671/0.000 ms\n [2025-08-24 14:18:03][351843261155608][809 ms][DEBUG] check_internet: online [2025-08-24 14:18:03][351843261155608][810 ms][DEBUG] END check_internet in 469 ms [2025-08-24 14:18:03][351843261155608][810 ms][DEBUG] rawBody.length=1148 [2025-08-24 14:18:03][351843261155608][810 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351843261155608\",\"model\":\"SM-F936B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7191\"}'\'' -e'"" [2025-08-24 14:18:03][351843261155608][810 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:18:03][351843261155608][810 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351843261155608\",\"model\":\"SM-F936B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7191\"}'\'' -e'"" [2025-08-24 14:18:08][351843261155608][5136 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5cbf51fd-c59d-4acb-a63f-dcd970c3913e","id":"QR_5cbf51fd-c59d-4acb-a63f-dcd970c3913e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:18:08][351843261155608][5292 ms][DEBUG] proc_open done in 4482 ms; code=255; res.len=3343 [2025-08-24 14:18:08][351843261155608][5292 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-24 14:18:08][351843261155608][5292 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:22:03][351632913403825][1 ms][INFO] === Request start === [2025-08-24 14:22:03][351632913403825][1 ms][DEBUG] START check_scloud [2025-08-24 14:22:03][351632913403825][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:22:03][351632913403825][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 417 5014 24244120 184844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:22:03][351632913403825][277 ms][DEBUG] targetPkg: running [2025-08-24 14:22:03][351632913403825][277 ms][DEBUG] END check_scloud in 276 ms [2025-08-24 14:22:03][351632913403825][277 ms][DEBUG] START check_boot_completed [2025-08-24 14:22:03][351632913403825][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:22:03][351632913403825][324 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 14:22:03][351632913403825][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:22:03][351632913403825][386 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 14:22:03][351632913403825][386 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 14:22:03][351632913403825][387 ms][DEBUG] START check_internet [2025-08-24 14:22:03][351632913403825][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 14:22:04][351632913403825][871 ms][DEBUG] SU: done in 485 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.835/201.835/201.835/0.000 ms\n [2025-08-24 14:22:04][351632913403825][871 ms][DEBUG] check_internet: online [2025-08-24 14:22:04][351632913403825][871 ms][DEBUG] END check_internet in 485 ms [2025-08-24 14:22:04][351632913403825][871 ms][DEBUG] rawBody.length=1148 [2025-08-24 14:22:04][351632913403825][872 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632913403825\",\"model\":\"SM-A136B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2265\"}'\'' -e'"" [2025-08-24 14:22:04][351632913403825][872 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:22:04][351632913403825][872 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632913403825\",\"model\":\"SM-A136B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2265\"}'\'' -e'"" [2025-08-24 14:22:08][351632913403825][5213 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4f34d64b-952f-4840-b944-edebbd25389f","id":"QR_4f34d64b-952f-4840-b944-edebbd25389f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:22:08][351632913403825][5370 ms][DEBUG] proc_open done in 4498 ms; code=255; res.len=3343 [2025-08-24 14:22:08][351632913403825][5370 ms][DEBUG] END runCmdUntilRes#1 in 4498 ms [2025-08-24 14:22:08][351632913403825][5370 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:29:03][354747957985375][1 ms][INFO] === Request start === [2025-08-24 14:29:03][354747957985375][1 ms][DEBUG] START check_scloud [2025-08-24 14:29:03][354747957985375][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:29:03][354747957985375][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 417 5014 24334384 196328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:29:03][354747957985375][300 ms][DEBUG] targetPkg: running [2025-08-24 14:29:03][354747957985375][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-24 14:29:03][354747957985375][300 ms][DEBUG] START check_boot_completed [2025-08-24 14:29:03][354747957985375][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:29:03][354747957985375][331 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 14:29:03][354747957985375][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:29:04][354747957985375][378 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 14:29:04][354747957985375][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 14:29:04][354747957985375][379 ms][DEBUG] rawBody.length=1148 [2025-08-24 14:29:04][354747957985375][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747957985375\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6286\"}'\'' -e'"" [2025-08-24 14:29:04][354747957985375][379 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:29:04][354747957985375][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747957985375\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6286\"}'\'' -e'"" [2025-08-24 14:29:08][354747957985375][4627 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_470d4aa3-f843-4547-b6d4-2916e296ff41","id":"QR_470d4aa3-f843-4547-b6d4-2916e296ff41","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:29:08][354747957985375][4783 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-08-24 14:29:08][354747957985375][4783 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-24 14:29:08][354747957985375][4784 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:29:10][351272334441789][0 ms][INFO] === Request start === [2025-08-24 14:29:10][351272334441789][1 ms][DEBUG] START check_scloud [2025-08-24 14:29:10][351272334441789][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:29:11][351272334441789][252 ms][DEBUG] SU: done in 252 ms; outu0_a118 417 5014 24471940 207052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:29:11][351272334441789][252 ms][DEBUG] targetPkg: running [2025-08-24 14:29:11][351272334441789][253 ms][DEBUG] END check_scloud in 252 ms [2025-08-24 14:29:11][351272334441789][253 ms][DEBUG] START check_boot_completed [2025-08-24 14:29:11][351272334441789][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:29:11][351272334441789][299 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 14:29:11][351272334441789][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:29:11][351272334441789][393 ms][DEBUG] SU: done in 94 ms; out [2025-08-24 14:29:11][351272334441789][393 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-24 14:29:11][351272334441789][393 ms][DEBUG] rawBody.length=1148 [2025-08-24 14:29:11][351272334441789][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272334441789\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2108\"}'\'' -e'"" [2025-08-24 14:29:11][351272334441789][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:29:11][351272334441789][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272334441789\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2108\"}'\'' -e'"" [2025-08-24 14:29:15][351272334441789][4064 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bb040733-7a97-4485-8e65-ff4c5ad8ca2e","id":"QR_bb040733-7a97-4485-8e65-ff4c5ad8ca2e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:29:15][351272334441789][4220 ms][DEBUG] proc_open done in 3826 ms; code=255; res.len=3343 [2025-08-24 14:29:15][351272334441789][4220 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-24 14:29:15][351272334441789][4220 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:33:05][350256489037238][1 ms][INFO] === Request start === [2025-08-24 14:33:05][350256489037238][1 ms][DEBUG] START check_scloud [2025-08-24 14:33:05][350256489037238][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:33:05][350256489037238][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 417 5014 24598084 218868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:33:05][350256489037238][295 ms][DEBUG] targetPkg: running [2025-08-24 14:33:05][350256489037238][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-24 14:33:05][350256489037238][296 ms][DEBUG] START check_boot_completed [2025-08-24 14:33:05][350256489037238][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:33:05][350256489037238][342 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 14:33:05][350256489037238][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:33:05][350256489037238][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 14:33:05][350256489037238][389 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 14:33:05][350256489037238][389 ms][DEBUG] rawBody.length=1149 [2025-08-24 14:33:05][350256489037238][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350256489037238\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6027\"}'\'' -e'"" [2025-08-24 14:33:05][350256489037238][389 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:33:05][350256489037238][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350256489037238\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6027\"}'\'' -e'"" [2025-08-24 14:33:11][350256489037238][6325 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a8747992-5339-484c-97c0-0434105aaa08","id":"QR_a8747992-5339-484c-97c0-0434105aaa08","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:33:11][350256489037238][6481 ms][DEBUG] proc_open done in 6092 ms; code=255; res.len=3343 [2025-08-24 14:33:11][350256489037238][6481 ms][DEBUG] END runCmdUntilRes#1 in 6092 ms [2025-08-24 14:33:11][350256489037238][6481 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:33:16][352674520458171][0 ms][INFO] === Request start === [2025-08-24 14:33:16][352674520458171][1 ms][DEBUG] START check_scloud [2025-08-24 14:33:16][352674520458171][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:33:16][352674520458171][245 ms][DEBUG] SU: done in 245 ms; outu0_a118 417 5014 24734540 229780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:33:16][352674520458171][246 ms][DEBUG] targetPkg: running [2025-08-24 14:33:16][352674520458171][246 ms][DEBUG] END check_scloud in 245 ms [2025-08-24 14:33:16][352674520458171][246 ms][DEBUG] START check_boot_completed [2025-08-24 14:33:16][352674520458171][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:33:16][352674520458171][292 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 14:33:16][352674520458171][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:33:16][352674520458171][355 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 14:33:16][352674520458171][355 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 14:33:16][352674520458171][355 ms][DEBUG] rawBody.length=1148 [2025-08-24 14:33:16][352674520458171][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520458171\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4001\"}'\'' -e'"" [2025-08-24 14:33:16][352674520458171][355 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:33:16][352674520458171][355 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520458171\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4001\"}'\'' -e'"" [2025-08-24 14:33:20][352674520458171][4354 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_47068c79-b9b8-4f24-b7cf-0bfa740c69dd","id":"QR_47068c79-b9b8-4f24-b7cf-0bfa740c69dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:33:21][352674520458171][4510 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-24 14:33:21][352674520458171][4510 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-24 14:33:21][352674520458171][4510 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:38:05][350256489006183][1 ms][INFO] === Request start === [2025-08-24 14:38:05][350256489006183][1 ms][DEBUG] START check_scloud [2025-08-24 14:38:05][350256489006183][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:38:05][350256489006183][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 417 5014 24862668 242156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:38:05][350256489006183][262 ms][DEBUG] targetPkg: running [2025-08-24 14:38:05][350256489006183][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-24 14:38:05][350256489006183][262 ms][DEBUG] START check_boot_completed [2025-08-24 14:38:05][350256489006183][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:38:05][350256489006183][309 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 14:38:05][350256489006183][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:38:05][350256489006183][403 ms][DEBUG] SU: done in 94 ms; out [2025-08-24 14:38:05][350256489006183][403 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-24 14:38:05][350256489006183][403 ms][DEBUG] START check_internet [2025-08-24 14:38:05][350256489006183][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 14:38:06][350256489006183][918 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.173/203.173/203.173/0.000 ms\n [2025-08-24 14:38:06][350256489006183][918 ms][DEBUG] check_internet: online [2025-08-24 14:38:06][350256489006183][918 ms][DEBUG] END check_internet in 515 ms [2025-08-24 14:38:06][350256489006183][918 ms][DEBUG] rawBody.length=1149 [2025-08-24 14:38:06][350256489006183][918 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350256489006183\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4802\"}'\'' -e'"" [2025-08-24 14:38:06][350256489006183][918 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:38:06][350256489006183][919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350256489006183\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4802\"}'\'' -e'"" [2025-08-24 14:38:10][350256489006183][4606 ms][DEBUG] proc_open done in 3687 ms (timeout); code=4; out.len=0 err.len=89 [2025-08-24 14:38:10][350256489006183][4606 ms][DEBUG] END runCmdUntilRes#1 in 3687 ms [2025-08-24 14:38:10][350256489006183][4606 ms][WARN] Detected error: Process with pid 417 either refused to load frida-agent, or terminated during injection [2025-08-24 14:38:10][350256489006183][4606 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 14:38:10][350256489006183][4745 ms][DEBUG] SU: done in 139 ms; out [2025-08-24 14:38:10][350256489006183][4745 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 14:38:10][350256489006183][4745 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 14:38:10][350256489006183][4871 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 14:38:10][350256489006183][4871 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 14:38:10][350256489006183][5042 ms][DEBUG] SU: done in 171 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 14:38:12][350256489006183][7057 ms][DEBUG] START check_boot_completed [2025-08-24 14:38:12][350256489006183][7057 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:38:12][350256489006183][7104 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 14:38:12][350256489006183][7104 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:38:12][350256489006183][7151 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 14:38:12][350256489006183][7151 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 14:38:15][350256489006183][10166 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 14:38:15][350256489006183][10166 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350256489006183\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4802\"}'\'' -e'"" [2025-08-24 14:38:23][350256489006183][17617 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bc834ce2-7590-4c2a-b7aa-b9e7b7f2fb6c","id":"QR_bc834ce2-7590-4c2a-b7aa-b9e7b7f2fb6c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:38:23][350256489006183][17773 ms][DEBUG] proc_open done in 7607 ms; code=255; res.len=3343 [2025-08-24 14:38:23][350256489006183][17773 ms][DEBUG] END runCmdUntilRes#2 in 7608 ms [2025-08-24 14:38:23][350256489006183][17773 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:39:02][352737402176987][0 ms][INFO] === Request start === [2025-08-24 14:39:02][352737402176987][1 ms][DEBUG] START check_scloud [2025-08-24 14:39:02][352737402176987][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:39:02][352737402176987][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 2400 5014 23545708 127524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:39:02][352737402176987][291 ms][DEBUG] targetPkg: running [2025-08-24 14:39:02][352737402176987][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-24 14:39:02][352737402176987][291 ms][DEBUG] START check_boot_completed [2025-08-24 14:39:02][352737402176987][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:39:02][352737402176987][338 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 14:39:02][352737402176987][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:39:02][352737402176987][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 14:39:02][352737402176987][385 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 14:39:02][352737402176987][385 ms][DEBUG] rawBody.length=1148 [2025-08-24 14:39:02][352737402176987][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352737402176987\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7331\"}'\'' -e'"" [2025-08-24 14:39:02][352737402176987][385 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:39:02][352737402176987][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352737402176987\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7331\"}'\'' -e'"" [2025-08-24 14:39:06][352737402176987][4383 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b488ac42-e174-498f-a0c0-a2a3b2eb3af7","id":"QR_b488ac42-e174-498f-a0c0-a2a3b2eb3af7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:39:06][352737402176987][4540 ms][DEBUG] proc_open done in 4154 ms; code=255; res.len=3343 [2025-08-24 14:39:06][352737402176987][4540 ms][DEBUG] END runCmdUntilRes#1 in 4154 ms [2025-08-24 14:39:06][352737402176987][4540 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:39:10][353454197149117][0 ms][INFO] === Request start === [2025-08-24 14:39:10][353454197149117][1 ms][DEBUG] START check_scloud [2025-08-24 14:39:10][353454197149117][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:39:10][353454197149117][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 2400 5014 23720884 138324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:39:10][353454197149117][303 ms][DEBUG] targetPkg: running [2025-08-24 14:39:10][353454197149117][303 ms][DEBUG] END check_scloud in 303 ms [2025-08-24 14:39:10][353454197149117][303 ms][DEBUG] START check_boot_completed [2025-08-24 14:39:10][353454197149117][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:39:10][353454197149117][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 14:39:10][353454197149117][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:39:11][353454197149117][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 14:39:11][353454197149117][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 14:39:11][353454197149117][397 ms][DEBUG] rawBody.length=1149 [2025-08-24 14:39:11][353454197149117][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353454197149117\",\"model\":\"SM-A536U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7211\"}'\'' -e'"" [2025-08-24 14:39:11][353454197149117][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:39:11][353454197149117][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353454197149117\",\"model\":\"SM-A536U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7211\"}'\'' -e'"" [2025-08-24 14:39:18][353454197149117][7567 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e63428e-12ef-4e1c-bbe3-1a11c731b869","id":"QR_9e63428e-12ef-4e1c-bbe3-1a11c731b869","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:39:18][353454197149117][7723 ms][DEBUG] proc_open done in 7326 ms; code=255; res.len=3343 [2025-08-24 14:39:18][353454197149117][7723 ms][DEBUG] END runCmdUntilRes#1 in 7326 ms [2025-08-24 14:39:18][353454197149117][7723 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:39:24][357567912491229][0 ms][INFO] === Request start === [2025-08-24 14:39:24][357567912491229][1 ms][DEBUG] START check_scloud [2025-08-24 14:39:24][357567912491229][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:39:25][357567912491229][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 2400 5014 23839568 149184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:39:25][357567912491229][302 ms][DEBUG] targetPkg: running [2025-08-24 14:39:25][357567912491229][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-24 14:39:25][357567912491229][302 ms][DEBUG] START check_boot_completed [2025-08-24 14:39:25][357567912491229][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:39:25][357567912491229][333 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 14:39:25][357567912491229][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:39:25][357567912491229][395 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 14:39:25][357567912491229][396 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 14:39:25][357567912491229][396 ms][DEBUG] rawBody.length=1149 [2025-08-24 14:39:25][357567912491229][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567912491229\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7485\"}'\'' -e'"" [2025-08-24 14:39:25][357567912491229][396 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:39:25][357567912491229][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567912491229\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7485\"}'\'' -e'"" [2025-08-24 14:39:30][357567912491229][5878 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_df5f300f-3273-4b11-a251-07cb2dc69a0f","id":"QR_df5f300f-3273-4b11-a251-07cb2dc69a0f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:39:30][357567912491229][6034 ms][DEBUG] proc_open done in 5639 ms; code=255; res.len=3343 [2025-08-24 14:39:30][357567912491229][6035 ms][DEBUG] END runCmdUntilRes#1 in 5639 ms [2025-08-24 14:39:30][357567912491229][6035 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:40:04][357967972457187][0 ms][INFO] === Request start === [2025-08-24 14:40:04][357967972457187][1 ms][DEBUG] START check_scloud [2025-08-24 14:40:04][357967972457187][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:40:04][357967972457187][287 ms][DEBUG] SU: done in 287 ms; outu0_a118 2400 5014 23945232 160460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:40:04][357967972457187][288 ms][DEBUG] targetPkg: running [2025-08-24 14:40:04][357967972457187][288 ms][DEBUG] END check_scloud in 287 ms [2025-08-24 14:40:04][357967972457187][288 ms][DEBUG] START check_boot_completed [2025-08-24 14:40:04][357967972457187][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:40:04][357967972457187][332 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 14:40:04][357967972457187][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:40:04][357967972457187][395 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 14:40:04][357967972457187][395 ms][DEBUG] END check_boot_completed in 107 ms [2025-08-24 14:40:04][357967972457187][395 ms][DEBUG] START check_internet [2025-08-24 14:40:04][357967972457187][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 14:40:05][357967972457187][957 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.015/202.015/202.015/0.000 ms\n [2025-08-24 14:40:05][357967972457187][957 ms][DEBUG] check_internet: online [2025-08-24 14:40:05][357967972457187][958 ms][DEBUG] END check_internet in 562 ms [2025-08-24 14:40:05][357967972457187][958 ms][DEBUG] rawBody.length=1148 [2025-08-24 14:40:05][357967972457187][958 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967972457187\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8895\"}'\'' -e'"" [2025-08-24 14:40:05][357967972457187][958 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:40:05][357967972457187][958 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967972457187\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8895\"}'\'' -e'"" [2025-08-24 14:40:09][357967972457187][5222 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2b050838-4ccf-453d-bf27-2134f0ba5101","id":"QR_2b050838-4ccf-453d-bf27-2134f0ba5101","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:40:09][357967972457187][5378 ms][DEBUG] proc_open done in 4420 ms; code=255; res.len=3343 [2025-08-24 14:40:09][357967972457187][5378 ms][DEBUG] END runCmdUntilRes#1 in 4420 ms [2025-08-24 14:40:09][357967972457187][5378 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:42:05][352058605966631][1 ms][INFO] === Request start === [2025-08-24 14:42:05][352058605966631][1 ms][DEBUG] START check_scloud [2025-08-24 14:42:05][352058605966631][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:42:05][352058605966631][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 2400 5014 24045860 172488 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:42:05][352058605966631][301 ms][DEBUG] targetPkg: running [2025-08-24 14:42:05][352058605966631][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-24 14:42:05][352058605966631][301 ms][DEBUG] START check_boot_completed [2025-08-24 14:42:05][352058605966631][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:42:05][352058605966631][332 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 14:42:05][352058605966631][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:42:05][352058605966631][379 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 14:42:05][352058605966631][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 14:42:05][352058605966631][379 ms][DEBUG] START check_internet [2025-08-24 14:42:05][352058605966631][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 14:42:05][352058605966631][707 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.268/221.268/221.268/0.000 ms\n [2025-08-24 14:42:05][352058605966631][708 ms][DEBUG] check_internet: online [2025-08-24 14:42:05][352058605966631][708 ms][DEBUG] END check_internet in 328 ms [2025-08-24 14:42:05][352058605966631][708 ms][DEBUG] rawBody.length=1149 [2025-08-24 14:42:05][352058605966631][708 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352058605966631\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5675\"}'\'' -e'"" [2025-08-24 14:42:05][352058605966631][708 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:42:05][352058605966631][708 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352058605966631\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5675\"}'\'' -e'"" [2025-08-24 14:42:12][352058605966631][6987 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d01cf746-6945-4f7f-b67d-f7e260eefed6","id":"QR_d01cf746-6945-4f7f-b67d-f7e260eefed6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:42:12][352058605966631][7143 ms][DEBUG] proc_open done in 6435 ms; code=255; res.len=3343 [2025-08-24 14:42:12][352058605966631][7143 ms][DEBUG] END runCmdUntilRes#1 in 6435 ms [2025-08-24 14:42:12][352058605966631][7143 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:43:03][351104340021281][0 ms][INFO] === Request start === [2025-08-24 14:43:03][351104340021281][1 ms][DEBUG] START check_scloud [2025-08-24 14:43:03][351104340021281][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:43:03][351104340021281][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 2400 5014 24167816 183364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:43:03][351104340021281][307 ms][DEBUG] targetPkg: running [2025-08-24 14:43:03][351104340021281][307 ms][DEBUG] END check_scloud in 307 ms [2025-08-24 14:43:03][351104340021281][307 ms][DEBUG] START check_boot_completed [2025-08-24 14:43:03][351104340021281][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:43:03][351104340021281][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 14:43:03][351104340021281][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:43:03][351104340021281][416 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 14:43:03][351104340021281][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 14:43:03][351104340021281][416 ms][DEBUG] rawBody.length=1148 [2025-08-24 14:43:03][351104340021281][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351104340021281\",\"model\":\"SM-A166B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3743\"}'\'' -e'"" [2025-08-24 14:43:03][351104340021281][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:43:03][351104340021281][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351104340021281\",\"model\":\"SM-A166B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3743\"}'\'' -e'"" [2025-08-24 14:43:07][351104340021281][4571 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9ea60703-9ffd-4de7-b7ae-7ce32aeae473","id":"QR_9ea60703-9ffd-4de7-b7ae-7ce32aeae473","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:43:07][351104340021281][4727 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-24 14:43:07][351104340021281][4727 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-24 14:43:07][351104340021281][4728 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:43:11][350256488998653][0 ms][INFO] === Request start === [2025-08-24 14:43:11][350256488998653][1 ms][DEBUG] START check_scloud [2025-08-24 14:43:11][350256488998653][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:43:12][350256488998653][300 ms][DEBUG] SU: done in 300 ms; outu0_a118 2400 5014 24324624 195120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:43:12][350256488998653][301 ms][DEBUG] targetPkg: running [2025-08-24 14:43:12][350256488998653][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-24 14:43:12][350256488998653][301 ms][DEBUG] START check_boot_completed [2025-08-24 14:43:12][350256488998653][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:43:12][350256488998653][347 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 14:43:12][350256488998653][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:43:12][350256488998653][411 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 14:43:12][350256488998653][411 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-24 14:43:12][350256488998653][411 ms][DEBUG] rawBody.length=1149 [2025-08-24 14:43:12][350256488998653][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350256488998653\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5098\"}'\'' -e'"" [2025-08-24 14:43:12][350256488998653][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:43:12][350256488998653][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350256488998653\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5098\"}'\'' -e'"" [2025-08-24 14:43:19][350256488998653][7330 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c3526863-13f5-47c2-ab7b-7c6bd8963a3c","id":"QR_c3526863-13f5-47c2-ab7b-7c6bd8963a3c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:43:19][350256488998653][7486 ms][DEBUG] proc_open done in 7074 ms; code=255; res.len=3343 [2025-08-24 14:43:19][350256488998653][7486 ms][DEBUG] END runCmdUntilRes#1 in 7075 ms [2025-08-24 14:43:19][350256488998653][7486 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:47:03][353089189039023][1 ms][INFO] === Request start === [2025-08-24 14:47:03][353089189039023][1 ms][DEBUG] START check_scloud [2025-08-24 14:47:03][353089189039023][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:47:04][353089189039023][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 2400 5014 24471120 206920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:47:04][353089189039023][299 ms][DEBUG] targetPkg: running [2025-08-24 14:47:04][353089189039023][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-24 14:47:04][353089189039023][299 ms][DEBUG] START check_boot_completed [2025-08-24 14:47:04][353089189039023][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:47:04][353089189039023][346 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 14:47:04][353089189039023][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:47:04][353089189039023][408 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 14:47:04][353089189039023][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 14:47:04][353089189039023][409 ms][DEBUG] rawBody.length=1148 [2025-08-24 14:47:04][353089189039023][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353089189039023\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7590\"}'\'' -e'"" [2025-08-24 14:47:04][353089189039023][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:47:04][353089189039023][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353089189039023\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7590\"}'\'' -e'"" [2025-08-24 14:47:08][353089189039023][4595 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5cb183e7-bfd7-4c5b-b852-7f9909a28a82","id":"QR_5cb183e7-bfd7-4c5b-b852-7f9909a28a82","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:47:08][353089189039023][4751 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-08-24 14:47:08][353089189039023][4751 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-24 14:47:08][353089189039023][4751 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:50:03][350987615123456][1 ms][INFO] === Request start === [2025-08-24 14:50:03][350987615123456][1 ms][DEBUG] START check_scloud [2025-08-24 14:50:03][350987615123456][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:50:04][350987615123456][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 2400 5014 24584820 217540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:50:04][350987615123456][299 ms][DEBUG] targetPkg: running [2025-08-24 14:50:04][350987615123456][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-24 14:50:04][350987615123456][299 ms][DEBUG] START check_boot_completed [2025-08-24 14:50:04][350987615123456][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:50:04][350987615123456][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 14:50:04][350987615123456][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:50:04][350987615123456][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 14:50:04][350987615123456][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 14:50:04][350987615123456][377 ms][DEBUG] START check_internet [2025-08-24 14:50:04][350987615123456][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 14:50:04][350987615123456][877 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.523/201.523/201.523/0.000 ms\n [2025-08-24 14:50:04][350987615123456][877 ms][DEBUG] check_internet: online [2025-08-24 14:50:04][350987615123456][877 ms][DEBUG] END check_internet in 500 ms [2025-08-24 14:50:04][350987615123456][877 ms][DEBUG] rawBody.length=1148 [2025-08-24 14:50:04][350987615123456][877 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350987615123456\",\"model\":\"SM-E225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7708\"}'\'' -e'"" [2025-08-24 14:50:04][350987615123456][877 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:50:04][350987615123456][877 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350987615123456\",\"model\":\"SM-E225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7708\"}'\'' -e'"" [2025-08-24 14:50:08][350987615123456][5001 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fc21c905-84c2-4b9e-af62-2089ef1235f0","id":"QR_fc21c905-84c2-4b9e-af62-2089ef1235f0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:50:09][350987615123456][5157 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-24 14:50:09][350987615123456][5158 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-24 14:50:09][350987615123456][5158 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:53:02][350471122329203][1 ms][INFO] === Request start === [2025-08-24 14:53:02][350471122329203][1 ms][DEBUG] START check_scloud [2025-08-24 14:53:02][350471122329203][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:53:03][350471122329203][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 2400 5014 24726744 229652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:53:03][350471122329203][260 ms][DEBUG] targetPkg: running [2025-08-24 14:53:03][350471122329203][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-24 14:53:03][350471122329203][260 ms][DEBUG] START check_boot_completed [2025-08-24 14:53:03][350471122329203][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:53:03][350471122329203][307 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 14:53:03][350471122329203][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:53:03][350471122329203][354 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 14:53:03][350471122329203][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 14:53:03][350471122329203][354 ms][DEBUG] rawBody.length=1148 [2025-08-24 14:53:03][350471122329203][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471122329203\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2969\"}'\'' -e'"" [2025-08-24 14:53:03][350471122329203][354 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:53:03][350471122329203][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471122329203\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2969\"}'\'' -e'"" [2025-08-24 14:53:07][350471122329203][4400 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_83e4aea4-6b6f-4156-9ae1-ba8f863a487b","id":"QR_83e4aea4-6b6f-4156-9ae1-ba8f863a487b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:53:07][350471122329203][4556 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-24 14:53:07][350471122329203][4556 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-24 14:53:07][350471122329203][4556 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:55:03][358141435665542][1 ms][INFO] === Request start === [2025-08-24 14:55:03][358141435665542][1 ms][DEBUG] START check_scloud [2025-08-24 14:55:03][358141435665542][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:55:03][358141435665542][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 2400 5014 24844732 240548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:55:03][358141435665542][274 ms][DEBUG] targetPkg: running [2025-08-24 14:55:03][358141435665542][274 ms][DEBUG] END check_scloud in 273 ms [2025-08-24 14:55:03][358141435665542][274 ms][DEBUG] START check_boot_completed [2025-08-24 14:55:03][358141435665542][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:55:03][358141435665542][320 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 14:55:03][358141435665542][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:55:03][358141435665542][398 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 14:55:03][358141435665542][398 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-24 14:55:03][358141435665542][399 ms][DEBUG] rawBody.length=1148 [2025-08-24 14:55:03][358141435665542][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141435665542\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1084\"}'\'' -e'"" [2025-08-24 14:55:03][358141435665542][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:55:03][358141435665542][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141435665542\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1084\"}'\'' -e'"" [2025-08-24 14:55:07][358141435665542][4085 ms][DEBUG] proc_open done in 3686 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-24 14:55:07][358141435665542][4085 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-08-24 14:55:07][358141435665542][4085 ms][WARN] Detected error: Process with pid 2400 either refused to load frida-agent, or terminated during injection [2025-08-24 14:55:07][358141435665542][4085 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 14:55:07][358141435665542][4241 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 14:55:07][358141435665542][4241 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 14:55:07][358141435665542][4241 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 14:55:07][358141435665542][4382 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 14:55:07][358141435665542][4382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 14:55:07][358141435665542][4522 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 14:55:09][358141435665542][6537 ms][DEBUG] START check_boot_completed [2025-08-24 14:55:09][358141435665542][6537 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:55:09][358141435665542][6584 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 14:55:09][358141435665542][6584 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:55:09][358141435665542][6631 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 14:55:09][358141435665542][6631 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 14:55:12][358141435665542][9646 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 14:55:12][358141435665542][9646 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141435665542\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1084\"}'\'' -e'"" [2025-08-24 14:55:17][358141435665542][14082 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_571d4a54-7db4-451d-81d4-ed114035d032","id":"QR_571d4a54-7db4-451d-81d4-ed114035d032","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:55:17][358141435665542][14239 ms][DEBUG] proc_open done in 4593 ms; code=255; res.len=3343 [2025-08-24 14:55:17][358141435665542][14239 ms][DEBUG] END runCmdUntilRes#2 in 4593 ms [2025-08-24 14:55:17][358141435665542][14239 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:56:03][354321591615408][1 ms][INFO] === Request start === [2025-08-24 14:56:03][354321591615408][1 ms][DEBUG] START check_scloud [2025-08-24 14:56:03][354321591615408][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:56:03][354321591615408][274 ms][DEBUG] SU: done in 272 ms; outu0_a118 4100 5014 23473004 127556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:56:03][354321591615408][274 ms][DEBUG] targetPkg: running [2025-08-24 14:56:03][354321591615408][274 ms][DEBUG] END check_scloud in 273 ms [2025-08-24 14:56:03][354321591615408][274 ms][DEBUG] START check_boot_completed [2025-08-24 14:56:03][354321591615408][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:56:03][354321591615408][320 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 14:56:03][354321591615408][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:56:03][354321591615408][367 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 14:56:03][354321591615408][367 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 14:56:03][354321591615408][367 ms][DEBUG] START check_internet [2025-08-24 14:56:03][354321591615408][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 14:56:04][354321591615408][867 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.064/202.064/202.064/0.000 ms\n [2025-08-24 14:56:04][354321591615408][868 ms][DEBUG] check_internet: online [2025-08-24 14:56:04][354321591615408][868 ms][DEBUG] END check_internet in 500 ms [2025-08-24 14:56:04][354321591615408][868 ms][DEBUG] rawBody.length=1148 [2025-08-24 14:56:04][354321591615408][868 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354321591615408\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6026\"}'\'' -e'"" [2025-08-24 14:56:04][354321591615408][868 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:56:04][354321591615408][868 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354321591615408\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6026\"}'\'' -e'"" [2025-08-24 14:56:08][354321591615408][4913 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_53d89676-8080-40b9-a095-5a743fd480a6","id":"QR_53d89676-8080-40b9-a095-5a743fd480a6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:56:08][354321591615408][5069 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-08-24 14:56:08][354321591615408][5069 ms][DEBUG] END runCmdUntilRes#1 in 4201 ms [2025-08-24 14:56:08][354321591615408][5069 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:57:02][351786692783672][0 ms][INFO] === Request start === [2025-08-24 14:57:02][351786692783672][1 ms][DEBUG] START check_scloud [2025-08-24 14:57:02][351786692783672][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:57:03][351786692783672][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 4100 5014 23642084 137952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:57:03][351786692783672][272 ms][DEBUG] targetPkg: running [2025-08-24 14:57:03][351786692783672][272 ms][DEBUG] END check_scloud in 271 ms [2025-08-24 14:57:03][351786692783672][272 ms][DEBUG] START check_boot_completed [2025-08-24 14:57:03][351786692783672][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:57:03][351786692783672][318 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 14:57:03][351786692783672][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:57:03][351786692783672][365 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 14:57:03][351786692783672][365 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 14:57:03][351786692783672][365 ms][DEBUG] rawBody.length=1148 [2025-08-24 14:57:03][351786692783672][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692783672\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2392\"}'\'' -e'"" [2025-08-24 14:57:03][351786692783672][365 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:57:03][351786692783672][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692783672\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2392\"}'\'' -e'"" [2025-08-24 14:57:07][351786692783672][4145 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-24 14:57:07][351786692783672][4301 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=115 [2025-08-24 14:57:07][351786692783672][4301 ms][DEBUG] END runCmdUntilRes#1 in 3937 ms [2025-08-24 14:57:07][351786692783672][4301 ms][INFO] SUCCESS response from frida (len=115) [2025-08-24 14:57:07][][0 ms][INFO] === Request start === [2025-08-24 14:57:07][][1 ms][DEBUG] START check_scloud [2025-08-24 14:57:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:57:07][][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 4100 5014 23770284 149784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:57:07][][298 ms][DEBUG] targetPkg: running [2025-08-24 14:57:07][][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-24 14:57:07][][298 ms][DEBUG] START check_boot_completed [2025-08-24 14:57:07][][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:57:07][][329 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 14:57:07][][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:57:07][][376 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 14:57:07][][376 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 14:57:07][][376 ms][DEBUG] rawBody.length=1129 [2025-08-24 14:57:07][][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8TC054TXZ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8262\"}'\'' -e'"" [2025-08-24 14:57:07][][376 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:57:07][][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8TC054TXZ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8262\"}'\'' -e'"" [2025-08-24 14:57:11][][3922 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-24 14:57:11][][4078 ms][DEBUG] proc_open done in 3701 ms; code=255; res.len=115 [2025-08-24 14:57:11][][4078 ms][DEBUG] END runCmdUntilRes#1 in 3701 ms [2025-08-24 14:57:11][][4078 ms][INFO] SUCCESS response from frida (len=115) [2025-08-24 14:57:13][351786692783672][0 ms][INFO] === Request start === [2025-08-24 14:57:13][351786692783672][1 ms][DEBUG] START check_scloud [2025-08-24 14:57:14][351786692783672][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:57:14][351786692783672][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 4100 5014 23889192 161164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:57:14][351786692783672][250 ms][DEBUG] targetPkg: running [2025-08-24 14:57:14][351786692783672][250 ms][DEBUG] END check_scloud in 250 ms [2025-08-24 14:57:14][351786692783672][250 ms][DEBUG] START check_boot_completed [2025-08-24 14:57:14][351786692783672][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:57:14][351786692783672][297 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 14:57:14][351786692783672][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:57:14][351786692783672][344 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 14:57:14][351786692783672][344 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 14:57:14][351786692783672][344 ms][DEBUG] rawBody.length=1149 [2025-08-24 14:57:14][351786692783672][344 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692783672\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3572\"}'\'' -e'"" [2025-08-24 14:57:14][351786692783672][344 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:57:14][351786692783672][344 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692783672\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3572\"}'\'' -e'"" [2025-08-24 14:57:19][351786692783672][5858 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_38371479-205a-477b-ba5c-f100c11b9ea0","id":"QR_38371479-205a-477b-ba5c-f100c11b9ea0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:57:20][351786692783672][6014 ms][DEBUG] proc_open done in 5670 ms; code=255; res.len=3343 [2025-08-24 14:57:20][351786692783672][6014 ms][DEBUG] END runCmdUntilRes#1 in 5670 ms [2025-08-24 14:57:20][351786692783672][6014 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:57:25][351240641987216][0 ms][INFO] === Request start === [2025-08-24 14:57:25][351240641987216][1 ms][DEBUG] START check_scloud [2025-08-24 14:57:25][351240641987216][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:57:25][351240641987216][272 ms][DEBUG] SU: done in 272 ms; outu0_a118 4100 5014 24004492 172952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:57:25][351240641987216][273 ms][DEBUG] targetPkg: running [2025-08-24 14:57:25][351240641987216][273 ms][DEBUG] END check_scloud in 272 ms [2025-08-24 14:57:25][351240641987216][273 ms][DEBUG] START check_boot_completed [2025-08-24 14:57:25][351240641987216][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:57:25][351240641987216][319 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 14:57:25][351240641987216][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:57:25][351240641987216][366 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 14:57:25][351240641987216][366 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 14:57:25][351240641987216][366 ms][DEBUG] rawBody.length=1148 [2025-08-24 14:57:25][351240641987216][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641987216\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7849\"}'\'' -e'"" [2025-08-24 14:57:25][351240641987216][366 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:57:25][351240641987216][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641987216\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7849\"}'\'' -e'"" [2025-08-24 14:57:29][351240641987216][4099 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_655b5a16-eb13-4b85-a9ce-3c46c0cd6fbb","id":"QR_655b5a16-eb13-4b85-a9ce-3c46c0cd6fbb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:57:29][351240641987216][4256 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-08-24 14:57:29][351240641987216][4256 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-24 14:57:29][351240641987216][4256 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 14:58:04][350256488978622][1 ms][INFO] === Request start === [2025-08-24 14:58:04][350256488978622][1 ms][DEBUG] START check_scloud [2025-08-24 14:58:04][350256488978622][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 14:58:05][350256488978622][275 ms][DEBUG] SU: done in 273 ms; outu0_a118 4100 5014 24124332 184056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 14:58:05][350256488978622][275 ms][DEBUG] targetPkg: running [2025-08-24 14:58:05][350256488978622][275 ms][DEBUG] END check_scloud in 274 ms [2025-08-24 14:58:05][350256488978622][275 ms][DEBUG] START check_boot_completed [2025-08-24 14:58:05][350256488978622][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 14:58:05][350256488978622][322 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 14:58:05][350256488978622][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 14:58:05][350256488978622][384 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 14:58:05][350256488978622][384 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 14:58:05][350256488978622][384 ms][DEBUG] START check_internet [2025-08-24 14:58:05][350256488978622][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 14:58:05][350256488978622][743 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=222 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 222.021/222.021/222.021/0.000 ms\n [2025-08-24 14:58:05][350256488978622][743 ms][DEBUG] check_internet: online [2025-08-24 14:58:05][350256488978622][743 ms][DEBUG] END check_internet in 359 ms [2025-08-24 14:58:05][350256488978622][743 ms][DEBUG] rawBody.length=1149 [2025-08-24 14:58:05][350256488978622][744 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350256488978622\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7459\"}'\'' -e'"" [2025-08-24 14:58:05][350256488978622][744 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 14:58:05][350256488978622][744 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350256488978622\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7459\"}'\'' -e'"" [2025-08-24 14:58:11][350256488978622][6414 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f140e45d-a90c-438e-98c9-0edd088ea7e8","id":"QR_f140e45d-a90c-438e-98c9-0edd088ea7e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 14:58:11][350256488978622][6570 ms][DEBUG] proc_open done in 5826 ms; code=255; res.len=3343 [2025-08-24 14:58:11][350256488978622][6570 ms][DEBUG] END runCmdUntilRes#1 in 5826 ms [2025-08-24 14:58:11][350256488978622][6570 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:01:04][358284143822052][1 ms][INFO] === Request start === [2025-08-24 15:01:04][358284143822052][1 ms][DEBUG] START check_scloud [2025-08-24 15:01:04][358284143822052][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:01:05][358284143822052][282 ms][DEBUG] SU: done in 280 ms; outu0_a118 4100 5014 24242320 195288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:01:05][358284143822052][282 ms][DEBUG] targetPkg: running [2025-08-24 15:01:05][358284143822052][282 ms][DEBUG] END check_scloud in 280 ms [2025-08-24 15:01:05][358284143822052][282 ms][DEBUG] START check_boot_completed [2025-08-24 15:01:05][358284143822052][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:01:05][358284143822052][313 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 15:01:05][358284143822052][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:01:05][358284143822052][360 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 15:01:05][358284143822052][360 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 15:01:05][358284143822052][360 ms][DEBUG] rawBody.length=1149 [2025-08-24 15:01:05][358284143822052][360 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358284143822052\",\"model\":\"SM-G991W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1070\"}'\'' -e'"" [2025-08-24 15:01:05][358284143822052][360 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:01:05][358284143822052][360 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358284143822052\",\"model\":\"SM-G991W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1070\"}'\'' -e'"" [2025-08-24 15:01:09][358284143822052][4874 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-24 15:01:09][358284143822052][5030 ms][DEBUG] proc_open done in 4670 ms; code=255; res.len=115 [2025-08-24 15:01:09][358284143822052][5030 ms][DEBUG] END runCmdUntilRes#1 in 4670 ms [2025-08-24 15:01:09][358284143822052][5030 ms][INFO] SUCCESS response from frida (len=115) [2025-08-24 15:01:10][][0 ms][INFO] === Request start === [2025-08-24 15:01:10][][1 ms][DEBUG] START check_scloud [2025-08-24 15:01:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:01:10][][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 4100 5014 24419736 146776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:01:10][][308 ms][DEBUG] targetPkg: running [2025-08-24 15:01:10][][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-24 15:01:10][][308 ms][DEBUG] START check_boot_completed [2025-08-24 15:01:10][][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:01:10][][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 15:01:10][][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:01:10][][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 15:01:10][][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 15:01:10][][386 ms][DEBUG] rawBody.length=1130 [2025-08-24 15:01:10][][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G991W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT10V3DSH\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1263\"}'\'' -e'"" [2025-08-24 15:01:10][][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:01:10][][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-G991W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT10V3DSH\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1263\"}'\'' -e'"" [2025-08-24 15:01:14][][4416 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-24 15:01:14][][4572 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=115 [2025-08-24 15:01:14][][4572 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-24 15:01:14][][4572 ms][INFO] SUCCESS response from frida (len=115) [2025-08-24 15:01:15][358284143822052][0 ms][INFO] === Request start === [2025-08-24 15:01:15][358284143822052][1 ms][DEBUG] START check_scloud [2025-08-24 15:01:15][358284143822052][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:01:15][358284143822052][304 ms][DEBUG] SU: done in 304 ms; outu0_a118 4100 5014 24566368 158192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:01:15][358284143822052][305 ms][DEBUG] targetPkg: running [2025-08-24 15:01:15][358284143822052][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-24 15:01:15][358284143822052][305 ms][DEBUG] START check_boot_completed [2025-08-24 15:01:15][358284143822052][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:01:15][358284143822052][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 15:01:15][358284143822052][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:01:15][358284143822052][414 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 15:01:15][358284143822052][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 15:01:15][358284143822052][414 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:01:15][358284143822052][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358284143822052\",\"model\":\"SM-G991W\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8506\"}'\'' -e'"" [2025-08-24 15:01:15][358284143822052][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:01:15][358284143822052][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358284143822052\",\"model\":\"SM-G991W\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8506\"}'\'' -e'"" [2025-08-24 15:01:19][358284143822052][4553 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0b06e0d9-f785-4b1f-8e7a-15c2dc037b16","id":"QR_0b06e0d9-f785-4b1f-8e7a-15c2dc037b16","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:01:20][358284143822052][4709 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-24 15:01:20][358284143822052][4710 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-24 15:01:20][358284143822052][4710 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:03:04][352285140507519][1 ms][INFO] === Request start === [2025-08-24 15:03:04][352285140507519][1 ms][DEBUG] START check_scloud [2025-08-24 15:03:04][352285140507519][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:03:04][352285140507519][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 4100 5014 24641276 170328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:03:04][352285140507519][290 ms][DEBUG] targetPkg: running [2025-08-24 15:03:04][352285140507519][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-24 15:03:04][352285140507519][290 ms][DEBUG] START check_boot_completed [2025-08-24 15:03:04][352285140507519][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:03:04][352285140507519][336 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 15:03:04][352285140507519][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:03:04][352285140507519][415 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 15:03:04][352285140507519][415 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-24 15:03:04][352285140507519][415 ms][DEBUG] rawBody.length=1149 [2025-08-24 15:03:04][352285140507519][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352285140507519\",\"model\":\"SM-F936U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2498\"}'\'' -e'"" [2025-08-24 15:03:04][352285140507519][415 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:03:04][352285140507519][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352285140507519\",\"model\":\"SM-F936U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2498\"}'\'' -e'"" [2025-08-24 15:03:09][352285140507519][5148 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_47eb5844-a5fe-4d70-a1cf-e6c41d6643ba","id":"QR_47eb5844-a5fe-4d70-a1cf-e6c41d6643ba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:03:09][352285140507519][5304 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-08-24 15:03:09][352285140507519][5304 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-08-24 15:03:09][352285140507519][5304 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:07:03][358141435615174][1 ms][INFO] === Request start === [2025-08-24 15:07:03][358141435615174][1 ms][DEBUG] START check_scloud [2025-08-24 15:07:03][358141435615174][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:07:03][358141435615174][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 4100 5014 24801248 179792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:07:03][358141435615174][252 ms][DEBUG] targetPkg: running [2025-08-24 15:07:03][358141435615174][252 ms][DEBUG] END check_scloud in 250 ms [2025-08-24 15:07:03][358141435615174][252 ms][DEBUG] START check_boot_completed [2025-08-24 15:07:03][358141435615174][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:07:03][358141435615174][283 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 15:07:03][358141435615174][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:07:03][358141435615174][330 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 15:07:03][358141435615174][330 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 15:07:03][358141435615174][330 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:07:03][358141435615174][330 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141435615174\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9036\"}'\'' -e'"" [2025-08-24 15:07:03][358141435615174][330 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:07:03][358141435615174][330 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141435615174\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9036\"}'\'' -e'"" [2025-08-24 15:07:07][358141435615174][4657 ms][DEBUG] proc_open done in 4327 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-24 15:07:07][358141435615174][4657 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-24 15:07:07][358141435615174][4657 ms][WARN] Detected error: Process with pid 4100 either refused to load frida-agent, or terminated during injection [2025-08-24 15:07:07][358141435615174][4657 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 15:07:07][358141435615174][4797 ms][DEBUG] SU: done in 141 ms; out [2025-08-24 15:07:07][358141435615174][4798 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 15:07:07][358141435615174][4798 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 15:07:08][358141435615174][4938 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 15:07:08][358141435615174][4938 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 15:07:08][358141435615174][5125 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 15:07:10][358141435615174][7140 ms][DEBUG] START check_boot_completed [2025-08-24 15:07:10][358141435615174][7141 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:07:10][358141435615174][7187 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 15:07:10][358141435615174][7187 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:07:10][358141435615174][7236 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 15:07:10][358141435615174][7236 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 15:07:13][358141435615174][10249 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 15:07:13][358141435615174][10249 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141435615174\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9036\"}'\'' -e'"" [2025-08-24 15:07:17][358141435615174][14248 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_249a9d4b-d4c9-446b-bd7f-8aaba5ece47f","id":"QR_249a9d4b-d4c9-446b-bd7f-8aaba5ece47f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:07:17][358141435615174][14404 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-24 15:07:17][358141435615174][14405 ms][DEBUG] END runCmdUntilRes#2 in 4155 ms [2025-08-24 15:07:17][358141435615174][14405 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:08:03][352192665671722][0 ms][INFO] === Request start === [2025-08-24 15:08:03][352192665671722][1 ms][DEBUG] START check_scloud [2025-08-24 15:08:03][352192665671722][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:08:03][352192665671722][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 7619 5014 23550868 127512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:08:03][352192665671722][317 ms][DEBUG] targetPkg: running [2025-08-24 15:08:03][352192665671722][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-24 15:08:03][352192665671722][317 ms][DEBUG] START check_boot_completed [2025-08-24 15:08:03][352192665671722][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:08:03][352192665671722][348 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 15:08:03][352192665671722][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:08:03][352192665671722][396 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 15:08:03][352192665671722][397 ms][DEBUG] END check_boot_completed in 80 ms [2025-08-24 15:08:03][352192665671722][397 ms][DEBUG] START check_internet [2025-08-24 15:08:03][352192665671722][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 15:08:04][352192665671722][817 ms][DEBUG] SU: done in 420 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.920/200.920/200.920/0.000 ms\n [2025-08-24 15:08:04][352192665671722][817 ms][DEBUG] check_internet: online [2025-08-24 15:08:04][352192665671722][817 ms][DEBUG] END check_internet in 421 ms [2025-08-24 15:08:04][352192665671722][817 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:08:04][352192665671722][817 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192665671722\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5173\"}'\'' -e'"" [2025-08-24 15:08:04][352192665671722][817 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:08:04][352192665671722][817 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192665671722\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5173\"}'\'' -e'"" [2025-08-24 15:08:08][352192665671722][4894 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6918cbbe-c6e0-47c9-92d5-c199b3a393af","id":"QR_6918cbbe-c6e0-47c9-92d5-c199b3a393af","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:08:08][352192665671722][5050 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-24 15:08:08][352192665671722][5050 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-24 15:08:08][352192665671722][5050 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:08:12][350256488986195][0 ms][INFO] === Request start === [2025-08-24 15:08:12][350256488986195][1 ms][DEBUG] START check_scloud [2025-08-24 15:08:12][350256488986195][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:08:12][350256488986195][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 7619 5014 23689116 137916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:08:12][350256488986195][310 ms][DEBUG] targetPkg: running [2025-08-24 15:08:12][350256488986195][310 ms][DEBUG] END check_scloud in 310 ms [2025-08-24 15:08:12][350256488986195][310 ms][DEBUG] START check_boot_completed [2025-08-24 15:08:12][350256488986195][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:08:12][350256488986195][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 15:08:12][350256488986195][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:08:12][350256488986195][388 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 15:08:12][350256488986195][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 15:08:12][350256488986195][388 ms][DEBUG] START check_internet [2025-08-24 15:08:12][350256488986195][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 15:08:13][350256488986195][638 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=166 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 166.891/166.891/166.891/0.000 ms\n [2025-08-24 15:08:13][350256488986195][638 ms][DEBUG] check_internet: online [2025-08-24 15:08:13][350256488986195][638 ms][DEBUG] END check_internet in 250 ms [2025-08-24 15:08:13][350256488986195][638 ms][DEBUG] rawBody.length=1149 [2025-08-24 15:08:13][350256488986195][638 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350256488986195\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7197\"}'\'' -e'"" [2025-08-24 15:08:13][350256488986195][638 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:08:13][350256488986195][638 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350256488986195\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7197\"}'\'' -e'"" [2025-08-24 15:08:19][350256488986195][7340 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4625f376-a26b-4884-a1d7-7fea3402bf30","id":"QR_4625f376-a26b-4884-a1d7-7fea3402bf30","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:08:20][350256488986195][7496 ms][DEBUG] proc_open done in 6858 ms; code=255; res.len=3343 [2025-08-24 15:08:20][350256488986195][7496 ms][DEBUG] END runCmdUntilRes#1 in 6858 ms [2025-08-24 15:08:20][350256488986195][7496 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:10:04][350244314557331][1 ms][INFO] === Request start === [2025-08-24 15:10:04][350244314557331][1 ms][DEBUG] START check_scloud [2025-08-24 15:10:04][350244314557331][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:10:04][350244314557331][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 7619 5014 23771024 150644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:10:04][350244314557331][263 ms][DEBUG] targetPkg: running [2025-08-24 15:10:04][350244314557331][263 ms][DEBUG] END check_scloud in 262 ms [2025-08-24 15:10:04][350244314557331][263 ms][DEBUG] START check_boot_completed [2025-08-24 15:10:04][350244314557331][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:10:04][350244314557331][310 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 15:10:04][350244314557331][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:10:04][350244314557331][372 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 15:10:04][350244314557331][372 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 15:10:04][350244314557331][372 ms][DEBUG] START check_internet [2025-08-24 15:10:04][350244314557331][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 15:10:05][350244314557331][810 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.913/200.913/200.913/0.000 ms\n [2025-08-24 15:10:05][350244314557331][810 ms][DEBUG] check_internet: online [2025-08-24 15:10:05][350244314557331][810 ms][DEBUG] END check_internet in 438 ms [2025-08-24 15:10:05][350244314557331][810 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:10:05][350244314557331][810 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350244314557331\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1931\"}'\'' -e'"" [2025-08-24 15:10:05][350244314557331][811 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:10:05][350244314557331][811 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350244314557331\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1931\"}'\'' -e'"" [2025-08-24 15:10:09][350244314557331][4934 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a108facf-f946-4672-ad50-6ee74218bc59","id":"QR_a108facf-f946-4672-ad50-6ee74218bc59","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:10:09][350244314557331][5090 ms][DEBUG] proc_open done in 4279 ms; code=255; res.len=3343 [2025-08-24 15:10:09][350244314557331][5090 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-24 15:10:09][350244314557331][5090 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:15:05][358104902566197][1 ms][INFO] === Request start === [2025-08-24 15:15:05][358104902566197][1 ms][DEBUG] START check_scloud [2025-08-24 15:15:05][358104902566197][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:15:05][358104902566197][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 7619 5014 23884340 161448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:15:05][358104902566197][299 ms][DEBUG] targetPkg: running [2025-08-24 15:15:05][358104902566197][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-24 15:15:05][358104902566197][299 ms][DEBUG] START check_boot_completed [2025-08-24 15:15:05][358104902566197][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:15:05][358104902566197][346 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 15:15:05][358104902566197][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:15:05][358104902566197][408 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 15:15:05][358104902566197][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 15:15:05][358104902566197][408 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:15:05][358104902566197][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902566197\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6554\"}'\'' -e'"" [2025-08-24 15:15:05][358104902566197][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:15:05][358104902566197][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902566197\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6554\"}'\'' -e'"" [2025-08-24 15:15:09][358104902566197][4235 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-24 15:15:09][358104902566197][4391 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=115 [2025-08-24 15:15:09][358104902566197][4391 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-24 15:15:09][358104902566197][4391 ms][INFO] SUCCESS response from frida (len=115) [2025-08-24 15:15:10][][1 ms][INFO] === Request start === [2025-08-24 15:15:10][][1 ms][DEBUG] START check_scloud [2025-08-24 15:15:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:15:10][][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 7619 5014 24057532 172376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:15:10][][253 ms][DEBUG] targetPkg: running [2025-08-24 15:15:10][][253 ms][DEBUG] END check_scloud in 252 ms [2025-08-24 15:15:10][][253 ms][DEBUG] START check_boot_completed [2025-08-24 15:15:10][][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:15:10][][300 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 15:15:10][][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:15:10][][348 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 15:15:10][][348 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 15:15:10][][348 ms][DEBUG] rawBody.length=1129 [2025-08-24 15:15:10][][348 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W10B3BFP\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9440\"}'\'' -e'"" [2025-08-24 15:15:10][][348 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:15:10][][349 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W10B3BFP\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9440\"}'\'' -e'"" [2025-08-24 15:15:13][][3799 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 15:15:14][][3955 ms][DEBUG] proc_open done in 3606 ms; code=255; res.len=107 [2025-08-24 15:15:14][][3955 ms][DEBUG] END runCmdUntilRes#1 in 3606 ms [2025-08-24 15:15:14][][3955 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 15:15:16][358104902566197][0 ms][INFO] === Request start === [2025-08-24 15:15:16][358104902566197][1 ms][DEBUG] START check_scloud [2025-08-24 15:15:16][358104902566197][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:15:16][358104902566197][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 7619 5014 24222532 184136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:15:16][358104902566197][256 ms][DEBUG] targetPkg: running [2025-08-24 15:15:16][358104902566197][256 ms][DEBUG] END check_scloud in 255 ms [2025-08-24 15:15:16][358104902566197][256 ms][DEBUG] START check_boot_completed [2025-08-24 15:15:16][358104902566197][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:15:16][358104902566197][287 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 15:15:16][358104902566197][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:15:16][358104902566197][334 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 15:15:16][358104902566197][334 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 15:15:16][358104902566197][334 ms][DEBUG] rawBody.length=1149 [2025-08-24 15:15:16][358104902566197][334 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902566197\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5401\"}'\'' -e'"" [2025-08-24 15:15:16][358104902566197][334 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:15:16][358104902566197][334 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902566197\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5401\"}'\'' -e'"" [2025-08-24 15:15:21][358104902566197][4942 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 15:15:21][358104902566197][5098 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=107 [2025-08-24 15:15:21][358104902566197][5098 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-08-24 15:15:21][358104902566197][5098 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 15:15:21][][0 ms][INFO] === Request start === [2025-08-24 15:15:21][][0 ms][DEBUG] START check_scloud [2025-08-24 15:15:21][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:15:21][][265 ms][DEBUG] SU: done in 265 ms; outu0_a118 7619 5014 24385612 195988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:15:21][][265 ms][DEBUG] targetPkg: running [2025-08-24 15:15:21][][265 ms][DEBUG] END check_scloud in 265 ms [2025-08-24 15:15:21][][265 ms][DEBUG] START check_boot_completed [2025-08-24 15:15:21][][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:15:21][][296 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 15:15:21][][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:15:22][][343 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 15:15:22][][343 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 15:15:22][][343 ms][DEBUG] rawBody.length=1130 [2025-08-24 15:15:22][][343 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8W10B3BFP\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5673\"}'\'' -e'"" [2025-08-24 15:15:22][][343 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:15:22][][344 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8W10B3BFP\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5673\"}'\'' -e'"" [2025-08-24 15:15:25][][4217 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 15:15:26][][4373 ms][DEBUG] proc_open done in 4029 ms; code=255; res.len=107 [2025-08-24 15:15:26][][4373 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-24 15:15:26][][4373 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 15:15:28][351692590829304][0 ms][INFO] === Request start === [2025-08-24 15:15:28][351692590829304][1 ms][DEBUG] START check_scloud [2025-08-24 15:15:28][351692590829304][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:15:28][351692590829304][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 7619 5014 24489264 206800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:15:28][351692590829304][253 ms][DEBUG] targetPkg: running [2025-08-24 15:15:28][351692590829304][253 ms][DEBUG] END check_scloud in 252 ms [2025-08-24 15:15:28][351692590829304][253 ms][DEBUG] START check_boot_completed [2025-08-24 15:15:28][351692590829304][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:15:28][351692590829304][284 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 15:15:28][351692590829304][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:15:28][351692590829304][331 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 15:15:28][351692590829304][331 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 15:15:28][351692590829304][331 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:15:28][351692590829304][331 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351692590829304\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1376\"}'\'' -e'"" [2025-08-24 15:15:28][351692590829304][331 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:15:28][351692590829304][331 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351692590829304\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1376\"}'\'' -e'"" [2025-08-24 15:15:32][351692590829304][4111 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_716051d5-1389-409c-a36e-d09c7b626fd3","id":"QR_716051d5-1389-409c-a36e-d09c7b626fd3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:15:32][351692590829304][4267 ms][DEBUG] proc_open done in 3937 ms; code=255; res.len=3343 [2025-08-24 15:15:32][351692590829304][4267 ms][DEBUG] END runCmdUntilRes#1 in 3937 ms [2025-08-24 15:15:32][351692590829304][4267 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:16:03][358141430548776][0 ms][INFO] === Request start === [2025-08-24 15:16:03][358141430548776][1 ms][DEBUG] START check_scloud [2025-08-24 15:16:03][358141430548776][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:16:03][358141430548776][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 7619 5014 24565160 217736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:16:03][358141430548776][309 ms][DEBUG] targetPkg: running [2025-08-24 15:16:03][358141430548776][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-24 15:16:03][358141430548776][309 ms][DEBUG] START check_boot_completed [2025-08-24 15:16:03][358141430548776][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:16:03][358141430548776][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 15:16:03][358141430548776][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:16:03][358141430548776][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 15:16:03][358141430548776][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 15:16:03][358141430548776][402 ms][DEBUG] START check_internet [2025-08-24 15:16:03][358141430548776][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 15:16:03][358141430548776][855 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.846/199.846/199.846/0.000 ms\n [2025-08-24 15:16:03][358141430548776][855 ms][DEBUG] check_internet: online [2025-08-24 15:16:03][358141430548776][855 ms][DEBUG] END check_internet in 453 ms [2025-08-24 15:16:03][358141430548776][855 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:16:03][358141430548776][855 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141430548776\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6547\"}'\'' -e'"" [2025-08-24 15:16:03][358141430548776][855 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:16:03][358141430548776][855 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141430548776\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6547\"}'\'' -e'"" [2025-08-24 15:16:07][358141430548776][4823 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2ec4f088-4d2c-4375-835f-b0a6b7735a2a","id":"QR_2ec4f088-4d2c-4375-835f-b0a6b7735a2a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:16:08][358141430548776][4979 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-08-24 15:16:08][358141430548776][4979 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-24 15:16:08][358141430548776][4979 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:16:10][353684142078066][0 ms][INFO] === Request start === [2025-08-24 15:16:10][353684142078066][1 ms][DEBUG] START check_scloud [2025-08-24 15:16:10][353684142078066][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:16:10][353684142078066][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 7619 5014 24691248 229220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:16:10][353684142078066][275 ms][DEBUG] targetPkg: running [2025-08-24 15:16:10][353684142078066][275 ms][DEBUG] END check_scloud in 275 ms [2025-08-24 15:16:10][353684142078066][275 ms][DEBUG] START check_boot_completed [2025-08-24 15:16:10][353684142078066][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:16:10][353684142078066][322 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 15:16:10][353684142078066][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:16:11][353684142078066][385 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 15:16:11][353684142078066][385 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 15:16:11][353684142078066][385 ms][DEBUG] START check_internet [2025-08-24 15:16:11][353684142078066][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 15:16:11][353684142078066][713 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=178 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 178.053/178.053/178.053/0.000 ms\n [2025-08-24 15:16:11][353684142078066][713 ms][DEBUG] check_internet: online [2025-08-24 15:16:11][353684142078066][713 ms][DEBUG] END check_internet in 328 ms [2025-08-24 15:16:11][353684142078066][713 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:16:11][353684142078066][713 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684142078066\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8199\"}'\'' -e'"" [2025-08-24 15:16:11][353684142078066][713 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:16:11][353684142078066][713 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684142078066\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8199\"}'\'' -e'"" [2025-08-24 15:16:15][353684142078066][4883 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d5431f1c-9eb4-4d6b-af48-1e80ce812e6f","id":"QR_d5431f1c-9eb4-4d6b-af48-1e80ce812e6f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:16:15][353684142078066][5040 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=3343 [2025-08-24 15:16:15][353684142078066][5040 ms][DEBUG] END runCmdUntilRes#1 in 4326 ms [2025-08-24 15:16:15][353684142078066][5040 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:18:04][352749380670162][1 ms][INFO] === Request start === [2025-08-24 15:18:04][352749380670162][1 ms][DEBUG] START check_scloud [2025-08-24 15:18:04][352749380670162][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:18:04][352749380670162][252 ms][DEBUG] SU: done in 250 ms; outu0_a118 7619 5014 24782448 241428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:18:04][352749380670162][252 ms][DEBUG] targetPkg: running [2025-08-24 15:18:04][352749380670162][252 ms][DEBUG] END check_scloud in 251 ms [2025-08-24 15:18:04][352749380670162][252 ms][DEBUG] START check_boot_completed [2025-08-24 15:18:04][352749380670162][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:18:05][352749380670162][298 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 15:18:05][352749380670162][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:18:05][352749380670162][361 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 15:18:05][352749380670162][361 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 15:18:05][352749380670162][361 ms][DEBUG] START check_internet [2025-08-24 15:18:05][352749380670162][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 15:18:05][352749380670162][626 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=155 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 155.398/155.398/155.398/0.000 ms\n [2025-08-24 15:18:05][352749380670162][627 ms][DEBUG] check_internet: online [2025-08-24 15:18:05][352749380670162][627 ms][DEBUG] END check_internet in 266 ms [2025-08-24 15:18:05][352749380670162][627 ms][DEBUG] rawBody.length=1149 [2025-08-24 15:18:05][352749380670162][627 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749380670162\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7270\"}'\'' -e'"" [2025-08-24 15:18:05][352749380670162][627 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:18:05][352749380670162][627 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749380670162\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7270\"}'\'' -e'"" [2025-08-24 15:18:09][352749380670162][4375 ms][DEBUG] proc_open done in 3748 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-24 15:18:09][352749380670162][4375 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-08-24 15:18:09][352749380670162][4375 ms][WARN] Detected error: Process with pid 7619 either refused to load frida-agent, or terminated during injection [2025-08-24 15:18:09][352749380670162][4375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 15:18:09][352749380670162][4532 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 15:18:09][352749380670162][4532 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 15:18:09][352749380670162][4532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 15:18:09][352749380670162][4672 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 15:18:09][352749380670162][4672 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 15:18:09][352749380670162][4829 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 15:18:11][352749380670162][6843 ms][DEBUG] START check_boot_completed [2025-08-24 15:18:11][352749380670162][6844 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:18:11][352749380670162][6890 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 15:18:11][352749380670162][6890 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:18:11][352749380670162][6938 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 15:18:11][352749380670162][6938 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 15:18:14][352749380670162][9952 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 15:18:14][352749380670162][9952 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749380670162\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7270\"}'\'' -e'"" [2025-08-24 15:18:19][352749380670162][15076 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_821a8a07-c2a2-4c65-95de-9e0810072ae9","id":"QR_821a8a07-c2a2-4c65-95de-9e0810072ae9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:18:19][352749380670162][15232 ms][DEBUG] proc_open done in 5280 ms; code=255; res.len=3343 [2025-08-24 15:18:19][352749380670162][15232 ms][DEBUG] END runCmdUntilRes#2 in 5280 ms [2025-08-24 15:18:19][352749380670162][15232 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:18:26][358558825601680][0 ms][INFO] === Request start === [2025-08-24 15:18:26][358558825601680][1 ms][DEBUG] START check_scloud [2025-08-24 15:18:26][358558825601680][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:18:26][358558825601680][244 ms][DEBUG] SU: done in 243 ms; outu0_a118 9487 5014 23588556 127128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:18:26][358558825601680][244 ms][DEBUG] targetPkg: running [2025-08-24 15:18:26][358558825601680][244 ms][DEBUG] END check_scloud in 243 ms [2025-08-24 15:18:26][358558825601680][244 ms][DEBUG] START check_boot_completed [2025-08-24 15:18:26][358558825601680][244 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:18:26][358558825601680][290 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 15:18:26][358558825601680][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:18:26][358558825601680][337 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 15:18:26][358558825601680][337 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 15:18:26][358558825601680][337 ms][DEBUG] START check_internet [2025-08-24 15:18:26][358558825601680][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 15:18:27][358558825601680][634 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.180/197.180/197.180/0.000 ms\n [2025-08-24 15:18:27][358558825601680][634 ms][DEBUG] check_internet: online [2025-08-24 15:18:27][358558825601680][634 ms][DEBUG] END check_internet in 297 ms [2025-08-24 15:18:27][358558825601680][634 ms][DEBUG] rawBody.length=1149 [2025-08-24 15:18:27][358558825601680][634 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558825601680\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7491\"}'\'' -e'"" [2025-08-24 15:18:27][358558825601680][634 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:18:27][358558825601680][635 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558825601680\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7491\"}'\'' -e'"" [2025-08-24 15:18:31][358558825601680][5461 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_04a4df3b-c020-4933-af45-d20ae410c0ae","id":"QR_04a4df3b-c020-4933-af45-d20ae410c0ae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:18:32][358558825601680][5617 ms][DEBUG] proc_open done in 4983 ms; code=255; res.len=3343 [2025-08-24 15:18:32][358558825601680][5617 ms][DEBUG] END runCmdUntilRes#1 in 4983 ms [2025-08-24 15:18:32][358558825601680][5617 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:19:03][350572362632493][0 ms][INFO] === Request start === [2025-08-24 15:19:03][350572362632493][1 ms][DEBUG] START check_scloud [2025-08-24 15:19:03][350572362632493][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:19:03][350572362632493][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 9487 5014 23632348 138596 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:19:03][350572362632493][313 ms][DEBUG] targetPkg: running [2025-08-24 15:19:03][350572362632493][313 ms][DEBUG] END check_scloud in 313 ms [2025-08-24 15:19:03][350572362632493][313 ms][DEBUG] START check_boot_completed [2025-08-24 15:19:03][350572362632493][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:19:03][350572362632493][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 15:19:03][350572362632493][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:19:03][350572362632493][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 15:19:03][350572362632493][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 15:19:03][350572362632493][407 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:19:03][350572362632493][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350572362632493\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3723\"}'\'' -e'"" [2025-08-24 15:19:03][350572362632493][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:19:03][350572362632493][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350572362632493\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3723\"}'\'' -e'"" [2025-08-24 15:19:07][350572362632493][4375 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f9aa8112-f00a-48da-aef9-7c1e97b9fc87","id":"QR_f9aa8112-f00a-48da-aef9-7c1e97b9fc87","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:19:08][350572362632493][4531 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-08-24 15:19:08][350572362632493][4531 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-24 15:19:08][350572362632493][4531 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:19:12][350256488995741][0 ms][INFO] === Request start === [2025-08-24 15:19:12][350256488995741][1 ms][DEBUG] START check_scloud [2025-08-24 15:19:12][350256488995741][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:19:12][350256488995741][318 ms][DEBUG] SU: done in 318 ms; outu0_a118 9487 5014 23791076 149624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:19:12][350256488995741][318 ms][DEBUG] targetPkg: running [2025-08-24 15:19:12][350256488995741][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-24 15:19:12][350256488995741][319 ms][DEBUG] START check_boot_completed [2025-08-24 15:19:12][350256488995741][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:19:12][350256488995741][365 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 15:19:12][350256488995741][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:19:12][350256488995741][428 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 15:19:12][350256488995741][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 15:19:12][350256488995741][428 ms][DEBUG] rawBody.length=1149 [2025-08-24 15:19:12][350256488995741][428 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350256488995741\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1046\"}'\'' -e'"" [2025-08-24 15:19:12][350256488995741][428 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:19:12][350256488995741][428 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350256488995741\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1046\"}'\'' -e'"" [2025-08-24 15:19:17][350256488995741][5629 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_84c68ba2-adcf-47dc-9aa8-0f861882d191","id":"QR_84c68ba2-adcf-47dc-9aa8-0f861882d191","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:19:18][350256488995741][5786 ms][DEBUG] proc_open done in 5358 ms; code=255; res.len=3343 [2025-08-24 15:19:18][350256488995741][5786 ms][DEBUG] END runCmdUntilRes#1 in 5358 ms [2025-08-24 15:19:18][350256488995741][5786 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:21:03][352677531637766][1 ms][INFO] === Request start === [2025-08-24 15:21:03][352677531637766][1 ms][DEBUG] START check_scloud [2025-08-24 15:21:03][352677531637766][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:21:04][352677531637766][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 9487 5014 23860696 161168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:21:04][352677531637766][311 ms][DEBUG] targetPkg: running [2025-08-24 15:21:04][352677531637766][312 ms][DEBUG] END check_scloud in 310 ms [2025-08-24 15:21:04][352677531637766][312 ms][DEBUG] START check_boot_completed [2025-08-24 15:21:04][352677531637766][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:21:04][352677531637766][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 15:21:04][352677531637766][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:21:04][352677531637766][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 15:21:04][352677531637766][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 15:21:04][352677531637766][421 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:21:04][352677531637766][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531637766\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2769\"}'\'' -e'"" [2025-08-24 15:21:04][352677531637766][421 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:21:04][352677531637766][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531637766\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2769\"}'\'' -e'"" [2025-08-24 15:21:08][352677531637766][4435 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3fb284a7-c46b-4fc5-b452-73389c06031e","id":"QR_3fb284a7-c46b-4fc5-b452-73389c06031e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:21:08][352677531637766][4591 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-24 15:21:08][352677531637766][4591 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-24 15:21:08][352677531637766][4591 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:21:10][351272336342704][0 ms][INFO] === Request start === [2025-08-24 15:21:10][351272336342704][1 ms][DEBUG] START check_scloud [2025-08-24 15:21:10][351272336342704][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:21:10][351272336342704][307 ms][DEBUG] SU: done in 307 ms; outu0_a118 9487 5014 23999136 172948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:21:10][351272336342704][307 ms][DEBUG] targetPkg: running [2025-08-24 15:21:10][351272336342704][307 ms][DEBUG] END check_scloud in 307 ms [2025-08-24 15:21:10][351272336342704][308 ms][DEBUG] START check_boot_completed [2025-08-24 15:21:10][351272336342704][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:21:10][351272336342704][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 15:21:10][351272336342704][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:21:10][351272336342704][448 ms][DEBUG] SU: done in 93 ms; out [2025-08-24 15:21:10][351272336342704][448 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-24 15:21:10][351272336342704][448 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:21:10][351272336342704][448 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272336342704\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1429\"}'\'' -e'"" [2025-08-24 15:21:10][351272336342704][448 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:21:10][351272336342704][448 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272336342704\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1429\"}'\'' -e'"" [2025-08-24 15:21:14][351272336342704][4056 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7cd9e879-9e57-4fd7-b26c-90c2dd8c22af","id":"QR_7cd9e879-9e57-4fd7-b26c-90c2dd8c22af","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:21:14][351272336342704][4212 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-08-24 15:21:14][351272336342704][4212 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-08-24 15:21:14][351272336342704][4212 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:24:05][350250416245063][1 ms][INFO] === Request start === [2025-08-24 15:24:05][350250416245063][1 ms][DEBUG] START check_scloud [2025-08-24 15:24:05][350250416245063][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:24:05][350250416245063][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 9487 5014 24128280 183876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:24:05][350250416245063][262 ms][DEBUG] targetPkg: running [2025-08-24 15:24:05][350250416245063][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-24 15:24:05][350250416245063][262 ms][DEBUG] START check_boot_completed [2025-08-24 15:24:05][350250416245063][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:24:05][350250416245063][293 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 15:24:05][350250416245063][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:24:05][350250416245063][340 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 15:24:05][350250416245063][340 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 15:24:05][350250416245063][340 ms][DEBUG] START check_internet [2025-08-24 15:24:05][350250416245063][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 15:24:05][350250416245063][824 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.892/201.892/201.892/0.000 ms\n [2025-08-24 15:24:05][350250416245063][824 ms][DEBUG] check_internet: online [2025-08-24 15:24:05][350250416245063][824 ms][DEBUG] END check_internet in 484 ms [2025-08-24 15:24:05][350250416245063][824 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:24:05][350250416245063][824 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250416245063\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3028\"}'\'' -e'"" [2025-08-24 15:24:05][350250416245063][825 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:24:05][350250416245063][825 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250416245063\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3028\"}'\'' -e'"" [2025-08-24 15:24:14][350250416245063][9494 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 15:24:14][350250416245063][9650 ms][DEBUG] proc_open done in 8825 ms; code=255; res.len=107 [2025-08-24 15:24:14][350250416245063][9650 ms][DEBUG] END runCmdUntilRes#1 in 8826 ms [2025-08-24 15:24:14][350250416245063][9650 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 15:24:15][][0 ms][INFO] === Request start === [2025-08-24 15:24:15][][1 ms][DEBUG] START check_scloud [2025-08-24 15:24:15][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:24:15][][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 9487 5014 24280992 195600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:24:15][][309 ms][DEBUG] targetPkg: running [2025-08-24 15:24:15][][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-24 15:24:15][][309 ms][DEBUG] START check_boot_completed [2025-08-24 15:24:15][][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:24:15][][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 15:24:15][][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:24:15][][419 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 15:24:15][][419 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-24 15:24:15][][419 ms][DEBUG] START check_internet [2025-08-24 15:24:15][][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 15:24:15][][668 ms][DEBUG] SU: done in 249 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=133 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 133.799/133.799/133.799/0.000 ms\n [2025-08-24 15:24:15][][668 ms][DEBUG] check_internet: online [2025-08-24 15:24:15][][668 ms][DEBUG] END check_internet in 249 ms [2025-08-24 15:24:15][][668 ms][DEBUG] rawBody.length=1129 [2025-08-24 15:24:15][][668 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCXA1AFN9W\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9551\"}'\'' -e'"" [2025-08-24 15:24:15][][668 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:24:15][][668 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCXA1AFN9W\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9551\"}'\'' -e'"" [2025-08-24 15:24:19][][4073 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 15:24:19][][4230 ms][DEBUG] proc_open done in 3562 ms; code=255; res.len=107 [2025-08-24 15:24:19][][4230 ms][DEBUG] END runCmdUntilRes#1 in 3562 ms [2025-08-24 15:24:19][][4230 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 15:24:21][350250416245063][0 ms][INFO] === Request start === [2025-08-24 15:24:21][350250416245063][1 ms][DEBUG] START check_scloud [2025-08-24 15:24:21][350250416245063][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:24:21][350250416245063][317 ms][DEBUG] SU: done in 317 ms; outu0_a118 9487 5014 24409256 206664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:24:21][350250416245063][318 ms][DEBUG] targetPkg: running [2025-08-24 15:24:21][350250416245063][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-24 15:24:21][350250416245063][318 ms][DEBUG] START check_boot_completed [2025-08-24 15:24:21][350250416245063][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:24:21][350250416245063][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 15:24:21][350250416245063][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:24:22][350250416245063][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 15:24:22][350250416245063][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 15:24:22][350250416245063][411 ms][DEBUG] START check_internet [2025-08-24 15:24:22][350250416245063][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 15:24:22][350250416245063][755 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=238 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 238.848/238.848/238.848/0.000 ms\n [2025-08-24 15:24:22][350250416245063][755 ms][DEBUG] check_internet: online [2025-08-24 15:24:22][350250416245063][755 ms][DEBUG] END check_internet in 344 ms [2025-08-24 15:24:22][350250416245063][755 ms][DEBUG] rawBody.length=1149 [2025-08-24 15:24:22][350250416245063][755 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250416245063\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7761\"}'\'' -e'"" [2025-08-24 15:24:22][350250416245063][756 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:24:22][350250416245063][756 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350250416245063\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7761\"}'\'' -e'"" [2025-08-24 15:24:27][350250416245063][6113 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_04fc283a-cab0-4aa5-a5bb-b57e386afd72","id":"QR_04fc283a-cab0-4aa5-a5bb-b57e386afd72","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:24:27][350250416245063][6269 ms][DEBUG] proc_open done in 5513 ms; code=255; res.len=3343 [2025-08-24 15:24:27][350250416245063][6269 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-24 15:24:27][350250416245063][6269 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:26:03][350900922267544][0 ms][INFO] === Request start === [2025-08-24 15:26:03][350900922267544][1 ms][DEBUG] START check_scloud [2025-08-24 15:26:03][350900922267544][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:26:03][350900922267544][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 9487 5014 24533124 217864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:26:03][350900922267544][323 ms][DEBUG] targetPkg: running [2025-08-24 15:26:03][350900922267544][323 ms][DEBUG] END check_scloud in 322 ms [2025-08-24 15:26:03][350900922267544][323 ms][DEBUG] START check_boot_completed [2025-08-24 15:26:03][350900922267544][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:26:03][350900922267544][369 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 15:26:03][350900922267544][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:26:03][350900922267544][432 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 15:26:03][350900922267544][432 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 15:26:03][350900922267544][432 ms][DEBUG] START check_internet [2025-08-24 15:26:03][350900922267544][432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 15:26:04][350900922267544][838 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=258 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 258.044/258.044/258.044/0.000 ms\n [2025-08-24 15:26:04][350900922267544][838 ms][DEBUG] check_internet: online [2025-08-24 15:26:04][350900922267544][838 ms][DEBUG] END check_internet in 406 ms [2025-08-24 15:26:04][350900922267544][838 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:26:04][350900922267544][838 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900922267544\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5622\"}'\'' -e'"" [2025-08-24 15:26:04][350900922267544][838 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:26:04][350900922267544][839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900922267544\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5622\"}'\'' -e'"" [2025-08-24 15:26:08][350900922267544][5165 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8a6507fc-cae3-409a-a423-b8992ade4127","id":"QR_8a6507fc-cae3-409a-a423-b8992ade4127","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:26:08][350900922267544][5321 ms][DEBUG] proc_open done in 4482 ms; code=255; res.len=3343 [2025-08-24 15:26:08][350900922267544][5321 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-24 15:26:08][350900922267544][5322 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:26:11][352630602782995][1 ms][INFO] === Request start === [2025-08-24 15:26:11][352630602782995][1 ms][DEBUG] START check_scloud [2025-08-24 15:26:11][352630602782995][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:26:11][352630602782995][300 ms][DEBUG] SU: done in 298 ms; outu0_a118 9487 5014 24687884 229624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:26:11][352630602782995][300 ms][DEBUG] targetPkg: running [2025-08-24 15:26:11][352630602782995][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-24 15:26:11][352630602782995][300 ms][DEBUG] START check_boot_completed [2025-08-24 15:26:11][352630602782995][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:26:11][352630602782995][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 15:26:11][352630602782995][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:26:11][352630602782995][424 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 15:26:11][352630602782995][424 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-24 15:26:11][352630602782995][424 ms][DEBUG] START check_internet [2025-08-24 15:26:11][352630602782995][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 15:26:12][352630602782995][830 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=254 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 254.159/254.159/254.159/0.000 ms\n [2025-08-24 15:26:12][352630602782995][830 ms][DEBUG] check_internet: online [2025-08-24 15:26:12][352630602782995][830 ms][DEBUG] END check_internet in 406 ms [2025-08-24 15:26:12][352630602782995][831 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:26:12][352630602782995][831 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352630602782995\",\"model\":\"SM-G996B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1116\"}'\'' -e'"" [2025-08-24 15:26:12][352630602782995][831 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:26:12][352630602782995][831 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352630602782995\",\"model\":\"SM-G996B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1116\"}'\'' -e'"" [2025-08-24 15:26:16][352630602782995][4751 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ac4e98de-a499-4768-9479-075b3025aa93","id":"QR_ac4e98de-a499-4768-9479-075b3025aa93","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:26:16][352630602782995][4907 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-24 15:26:16][352630602782995][4907 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-24 15:26:16][352630602782995][4907 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:28:03][352208775823654][1 ms][INFO] === Request start === [2025-08-24 15:28:03][352208775823654][1 ms][DEBUG] START check_scloud [2025-08-24 15:28:03][352208775823654][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:28:04][352208775823654][281 ms][DEBUG] SU: done in 280 ms; outu0_a118 9487 5014 24795468 240476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:28:04][352208775823654][281 ms][DEBUG] targetPkg: running [2025-08-24 15:28:04][352208775823654][281 ms][DEBUG] END check_scloud in 280 ms [2025-08-24 15:28:04][352208775823654][281 ms][DEBUG] START check_boot_completed [2025-08-24 15:28:04][352208775823654][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:28:04][352208775823654][328 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 15:28:04][352208775823654][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:28:04][352208775823654][390 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 15:28:04][352208775823654][390 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 15:28:04][352208775823654][390 ms][DEBUG] START check_internet [2025-08-24 15:28:04][352208775823654][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 15:28:04][352208775823654][703 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.707/197.707/197.707/0.000 ms\n [2025-08-24 15:28:04][352208775823654][703 ms][DEBUG] check_internet: online [2025-08-24 15:28:04][352208775823654][703 ms][DEBUG] END check_internet in 313 ms [2025-08-24 15:28:04][352208775823654][703 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:28:04][352208775823654][703 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208775823654\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5176\"}'\'' -e'"" [2025-08-24 15:28:04][352208775823654][703 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:28:04][352208775823654][703 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208775823654\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5176\"}'\'' -e'"" [2025-08-24 15:28:08][352208775823654][4343 ms][DEBUG] proc_open done in 3639 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-24 15:28:08][352208775823654][4343 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-08-24 15:28:08][352208775823654][4343 ms][WARN] Detected error: Process with pid 9487 either refused to load frida-agent, or terminated during injection [2025-08-24 15:28:08][352208775823654][4343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 15:28:08][352208775823654][4499 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 15:28:08][352208775823654][4499 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 15:28:08][352208775823654][4499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 15:28:08][352208775823654][4655 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 15:28:08][352208775823654][4655 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 15:28:08][352208775823654][4811 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 15:28:10][352208775823654][6826 ms][DEBUG] START check_boot_completed [2025-08-24 15:28:10][352208775823654][6827 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:28:10][352208775823654][6873 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 15:28:10][352208775823654][6873 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:28:10][352208775823654][6920 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 15:28:10][352208775823654][6920 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 15:28:13][352208775823654][9935 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 15:28:13][352208775823654][9935 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208775823654\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5176\"}'\'' -e'"" [2025-08-24 15:28:17][352208775823654][13903 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_333e9490-5197-4274-ae09-d32d83da2d2b","id":"QR_333e9490-5197-4274-ae09-d32d83da2d2b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:28:17][352208775823654][14059 ms][DEBUG] proc_open done in 4124 ms; code=255; res.len=3343 [2025-08-24 15:28:17][352208775823654][14059 ms][DEBUG] END runCmdUntilRes#2 in 4124 ms [2025-08-24 15:28:17][352208775823654][14059 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:30:03][353029499480194][0 ms][INFO] === Request start === [2025-08-24 15:30:03][353029499480194][1 ms][DEBUG] START check_scloud [2025-08-24 15:30:03][353029499480194][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:30:03][353029499480194][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 10806 5014 23533552 127076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:30:03][353029499480194][305 ms][DEBUG] targetPkg: running [2025-08-24 15:30:03][353029499480194][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-24 15:30:03][353029499480194][305 ms][DEBUG] START check_boot_completed [2025-08-24 15:30:03][353029499480194][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:30:03][353029499480194][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 15:30:03][353029499480194][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:30:04][353029499480194][414 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 15:30:04][353029499480194][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 15:30:04][353029499480194][415 ms][DEBUG] START check_internet [2025-08-24 15:30:04][353029499480194][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 15:30:04][353029499480194][867 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=152 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 152.416/152.416/152.416/0.000 ms\n [2025-08-24 15:30:04][353029499480194][868 ms][DEBUG] check_internet: online [2025-08-24 15:30:04][353029499480194][868 ms][DEBUG] END check_internet in 453 ms [2025-08-24 15:30:04][353029499480194][868 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:30:04][353029499480194][868 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029499480194\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4575\"}'\'' -e'"" [2025-08-24 15:30:04][353029499480194][868 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:30:04][353029499480194][868 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029499480194\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4575\"}'\'' -e'"" [2025-08-24 15:30:09][353029499480194][5475 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_38adf187-132c-4f01-aa09-f5cdcd44f29c","id":"QR_38adf187-132c-4f01-aa09-f5cdcd44f29c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:30:09][353029499480194][5632 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-08-24 15:30:09][353029499480194][5632 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-08-24 15:30:09][353029499480194][5632 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:32:03][358104902563707][1 ms][INFO] === Request start === [2025-08-24 15:32:03][358104902563707][1 ms][DEBUG] START check_scloud [2025-08-24 15:32:03][358104902563707][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:32:03][358104902563707][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 10806 5014 23640072 138056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:32:03][358104902563707][295 ms][DEBUG] targetPkg: running [2025-08-24 15:32:03][358104902563707][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-24 15:32:03][358104902563707][295 ms][DEBUG] START check_boot_completed [2025-08-24 15:32:03][358104902563707][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:32:03][358104902563707][342 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 15:32:03][358104902563707][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:32:03][358104902563707][406 ms][DEBUG] SU: done in 64 ms; out [2025-08-24 15:32:03][358104902563707][406 ms][DEBUG] END check_boot_completed in 111 ms [2025-08-24 15:32:03][358104902563707][406 ms][DEBUG] START check_internet [2025-08-24 15:32:03][358104902563707][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 15:32:04][358104902563707][764 ms][DEBUG] SU: done in 358 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=236 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 236.258/236.258/236.258/0.000 ms\n [2025-08-24 15:32:04][358104902563707][764 ms][DEBUG] check_internet: online [2025-08-24 15:32:04][358104902563707][764 ms][DEBUG] END check_internet in 359 ms [2025-08-24 15:32:04][358104902563707][765 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:32:04][358104902563707][765 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902563707\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6656\"}'\'' -e'"" [2025-08-24 15:32:04][358104902563707][765 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:32:04][358104902563707][765 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902563707\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6656\"}'\'' -e'"" [2025-08-24 15:32:07][358104902563707][4497 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-24 15:32:07][358104902563707][4653 ms][DEBUG] proc_open done in 3888 ms; code=255; res.len=115 [2025-08-24 15:32:07][358104902563707][4653 ms][DEBUG] END runCmdUntilRes#1 in 3888 ms [2025-08-24 15:32:07][358104902563707][4653 ms][INFO] SUCCESS response from frida (len=115) [2025-08-24 15:32:08][][0 ms][INFO] === Request start === [2025-08-24 15:32:08][][1 ms][DEBUG] START check_scloud [2025-08-24 15:32:08][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:32:08][][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 10806 5014 23784528 150080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:32:08][][288 ms][DEBUG] targetPkg: running [2025-08-24 15:32:08][][288 ms][DEBUG] END check_scloud in 288 ms [2025-08-24 15:32:08][][288 ms][DEBUG] START check_boot_completed [2025-08-24 15:32:08][][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:32:08][][335 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 15:32:08][][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:32:08][][397 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 15:32:08][][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 15:32:08][][397 ms][DEBUG] START check_internet [2025-08-24 15:32:08][][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 15:32:08][][647 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=139 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 139.778/139.778/139.778/0.000 ms\n [2025-08-24 15:32:08][][647 ms][DEBUG] check_internet: online [2025-08-24 15:32:08][][647 ms][DEBUG] END check_internet in 250 ms [2025-08-24 15:32:08][][647 ms][DEBUG] rawBody.length=1129 [2025-08-24 15:32:08][][647 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W10B33XR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5118\"}'\'' -e'"" [2025-08-24 15:32:08][][647 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:32:08][][647 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W10B33XR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5118\"}'\'' -e'"" [2025-08-24 15:32:12][][4115 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 15:32:12][][4271 ms][DEBUG] proc_open done in 3624 ms; code=255; res.len=107 [2025-08-24 15:32:12][][4271 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-08-24 15:32:12][][4271 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 15:32:15][358104902563707][0 ms][INFO] === Request start === [2025-08-24 15:32:15][358104902563707][1 ms][DEBUG] START check_scloud [2025-08-24 15:32:15][358104902563707][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:32:15][358104902563707][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 10806 5014 23939416 160680 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:32:15][358104902563707][259 ms][DEBUG] targetPkg: running [2025-08-24 15:32:15][358104902563707][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-24 15:32:15][358104902563707][259 ms][DEBUG] START check_boot_completed [2025-08-24 15:32:15][358104902563707][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:32:15][358104902563707][304 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 15:32:15][358104902563707][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:32:15][358104902563707][366 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 15:32:15][358104902563707][367 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-24 15:32:15][358104902563707][367 ms][DEBUG] START check_internet [2025-08-24 15:32:15][358104902563707][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 15:32:15][358104902563707][632 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=140 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 140.588/140.588/140.588/0.000 ms\n [2025-08-24 15:32:15][358104902563707][632 ms][DEBUG] check_internet: online [2025-08-24 15:32:15][358104902563707][632 ms][DEBUG] END check_internet in 266 ms [2025-08-24 15:32:15][358104902563707][632 ms][DEBUG] rawBody.length=1149 [2025-08-24 15:32:15][358104902563707][632 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902563707\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8631\"}'\'' -e'"" [2025-08-24 15:32:15][358104902563707][632 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:32:15][358104902563707][632 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902563707\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8631\"}'\'' -e'"" [2025-08-24 15:32:22][358104902563707][7724 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b23043f1-0af6-4317-a3d0-e7c136565b27","id":"QR_b23043f1-0af6-4317-a3d0-e7c136565b27","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:32:22][358104902563707][7880 ms][DEBUG] proc_open done in 7248 ms; code=255; res.len=3343 [2025-08-24 15:32:22][358104902563707][7880 ms][DEBUG] END runCmdUntilRes#1 in 7248 ms [2025-08-24 15:32:22][358104902563707][7880 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:32:28][350287312803058][0 ms][INFO] === Request start === [2025-08-24 15:32:28][350287312803058][1 ms][DEBUG] START check_scloud [2025-08-24 15:32:28][350287312803058][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:32:28][350287312803058][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 10806 5014 24045080 171704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:32:28][350287312803058][296 ms][DEBUG] targetPkg: running [2025-08-24 15:32:28][350287312803058][296 ms][DEBUG] END check_scloud in 296 ms [2025-08-24 15:32:28][350287312803058][296 ms][DEBUG] START check_boot_completed [2025-08-24 15:32:28][350287312803058][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:32:28][350287312803058][343 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 15:32:28][350287312803058][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:32:28][350287312803058][405 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 15:32:28][350287312803058][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 15:32:28][350287312803058][406 ms][DEBUG] START check_internet [2025-08-24 15:32:28][350287312803058][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 15:32:28][350287312803058][796 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=233 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 233.474/233.474/233.474/0.000 ms\n [2025-08-24 15:32:28][350287312803058][796 ms][DEBUG] check_internet: online [2025-08-24 15:32:28][350287312803058][796 ms][DEBUG] END check_internet in 390 ms [2025-08-24 15:32:28][350287312803058][796 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:32:28][350287312803058][796 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287312803058\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8706\"}'\'' -e'"" [2025-08-24 15:32:28][350287312803058][796 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:32:28][350287312803058][796 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287312803058\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8706\"}'\'' -e'"" [2025-08-24 15:32:32][350287312803058][4857 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_efd77c6d-49f6-4387-ba92-32e2181faf1c","id":"QR_efd77c6d-49f6-4387-ba92-32e2181faf1c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:32:33][350287312803058][5014 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-24 15:32:33][350287312803058][5014 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-08-24 15:32:33][350287312803058][5014 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:39:03][355898190985000][1 ms][INFO] === Request start === [2025-08-24 15:39:03][355898190985000][1 ms][DEBUG] START check_scloud [2025-08-24 15:39:03][355898190985000][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:39:04][355898190985000][296 ms][DEBUG] SU: done in 294 ms; outu0_a118 10806 5014 24124556 184496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:39:04][355898190985000][296 ms][DEBUG] targetPkg: running [2025-08-24 15:39:04][355898190985000][296 ms][DEBUG] END check_scloud in 294 ms [2025-08-24 15:39:04][355898190985000][296 ms][DEBUG] START check_boot_completed [2025-08-24 15:39:04][355898190985000][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:39:04][355898190985000][327 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 15:39:04][355898190985000][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:39:04][355898190985000][374 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 15:39:04][355898190985000][374 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 15:39:04][355898190985000][374 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:39:04][355898190985000][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355898190985000\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4871\"}'\'' -e'"" [2025-08-24 15:39:04][355898190985000][374 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:39:04][355898190985000][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355898190985000\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4871\"}'\'' -e'"" [2025-08-24 15:39:08][355898190985000][4685 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_984c6994-3143-47b5-9f0c-c4cb46b2fb13","id":"QR_984c6994-3143-47b5-9f0c-c4cb46b2fb13","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:39:08][355898190985000][4841 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3343 [2025-08-24 15:39:08][355898190985000][4841 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-08-24 15:39:08][355898190985000][4841 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:40:03][352288964644525][1 ms][INFO] === Request start === [2025-08-24 15:40:03][352288964644525][1 ms][DEBUG] START check_scloud [2025-08-24 15:40:03][352288964644525][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:40:03][352288964644525][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 10806 5014 24282300 195332 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:40:03][352288964644525][247 ms][DEBUG] targetPkg: running [2025-08-24 15:40:03][352288964644525][247 ms][DEBUG] END check_scloud in 245 ms [2025-08-24 15:40:03][352288964644525][247 ms][DEBUG] START check_boot_completed [2025-08-24 15:40:03][352288964644525][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:40:03][352288964644525][291 ms][DEBUG] ADB: done in 44 ms; out [2025-08-24 15:40:03][352288964644525][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:40:03][352288964644525][354 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 15:40:03][352288964644525][354 ms][DEBUG] END check_boot_completed in 107 ms [2025-08-24 15:40:03][352288964644525][354 ms][DEBUG] START check_internet [2025-08-24 15:40:03][352288964644525][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 15:40:04][352288964644525][885 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.800/202.800/202.800/0.000 ms\n [2025-08-24 15:40:04][352288964644525][885 ms][DEBUG] check_internet: online [2025-08-24 15:40:04][352288964644525][885 ms][DEBUG] END check_internet in 531 ms [2025-08-24 15:40:04][352288964644525][885 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:40:04][352288964644525][885 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288964644525\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2076\"}'\'' -e'"" [2025-08-24 15:40:04][352288964644525][885 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:40:04][352288964644525][885 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288964644525\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2076\"}'\'' -e'"" [2025-08-24 15:40:08][352288964644525][4946 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5dad4cee-caed-469f-9b1c-1cec5947e3b5","id":"QR_5dad4cee-caed-469f-9b1c-1cec5947e3b5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:40:08][352288964644525][5103 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-24 15:40:08][352288964644525][5103 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-24 15:40:08][352288964644525][5103 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:41:04][350012623182962][0 ms][INFO] === Request start === [2025-08-24 15:41:04][350012623182962][1 ms][DEBUG] START check_scloud [2025-08-24 15:41:04][350012623182962][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:41:05][350012623182962][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 10806 5014 24410464 207176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:41:05][350012623182962][323 ms][DEBUG] targetPkg: running [2025-08-24 15:41:05][350012623182962][323 ms][DEBUG] END check_scloud in 322 ms [2025-08-24 15:41:05][350012623182962][323 ms][DEBUG] START check_boot_completed [2025-08-24 15:41:05][350012623182962][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:41:05][350012623182962][369 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 15:41:05][350012623182962][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:41:05][350012623182962][416 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 15:41:05][350012623182962][416 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 15:41:05][350012623182962][416 ms][DEBUG] rawBody.length=1149 [2025-08-24 15:41:05][350012623182962][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350012623182962\",\"model\":\"SM-A536U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1018\"}'\'' -e'"" [2025-08-24 15:41:05][350012623182962][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:41:05][350012623182962][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350012623182962\",\"model\":\"SM-A536U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1018\"}'\'' -e'"" [2025-08-24 15:41:09][350012623182962][4650 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-24 15:41:09][350012623182962][4806 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=115 [2025-08-24 15:41:09][350012623182962][4806 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-24 15:41:09][350012623182962][4806 ms][INFO] SUCCESS response from frida (len=115) [2025-08-24 15:41:09][][0 ms][INFO] === Request start === [2025-08-24 15:41:09][][1 ms][DEBUG] START check_scloud [2025-08-24 15:41:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:41:10][][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 10806 5014 24562152 217856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:41:10][][309 ms][DEBUG] targetPkg: running [2025-08-24 15:41:10][][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-24 15:41:10][][309 ms][DEBUG] START check_boot_completed [2025-08-24 15:41:10][][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:41:10][][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 15:41:10][][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:41:10][][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 15:41:10][][403 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 15:41:10][][403 ms][DEBUG] rawBody.length=1130 [2025-08-24 15:41:10][][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CTA38YHXZ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1746\"}'\'' -e'"" [2025-08-24 15:41:10][][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:41:10][][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CTA38YHXZ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1746\"}'\'' -e'"" [2025-08-24 15:41:14][][4449 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-24 15:41:14][][4605 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=115 [2025-08-24 15:41:14][][4605 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-24 15:41:14][][4605 ms][INFO] SUCCESS response from frida (len=115) [2025-08-24 15:41:15][350012623182962][0 ms][INFO] === Request start === [2025-08-24 15:41:15][350012623182962][1 ms][DEBUG] START check_scloud [2025-08-24 15:41:15][350012623182962][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:41:15][350012623182962][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 10806 5014 24708848 229960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:41:15][350012623182962][319 ms][DEBUG] targetPkg: running [2025-08-24 15:41:15][350012623182962][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-24 15:41:15][350012623182962][319 ms][DEBUG] START check_boot_completed [2025-08-24 15:41:15][350012623182962][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:41:15][350012623182962][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 15:41:15][350012623182962][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:41:15][350012623182962][413 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 15:41:15][350012623182962][413 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 15:41:15][350012623182962][413 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:41:15][350012623182962][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350012623182962\",\"model\":\"SM-A536U\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2076\"}'\'' -e'"" [2025-08-24 15:41:15][350012623182962][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:41:15][350012623182962][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350012623182962\",\"model\":\"SM-A536U\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2076\"}'\'' -e'"" [2025-08-24 15:41:19][350012623182962][4302 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-24 15:41:19][350012623182962][4458 ms][DEBUG] proc_open done in 4044 ms; code=255; res.len=115 [2025-08-24 15:41:19][350012623182962][4458 ms][DEBUG] END runCmdUntilRes#1 in 4044 ms [2025-08-24 15:41:19][350012623182962][4458 ms][INFO] SUCCESS response from frida (len=115) [2025-08-24 15:41:20][][0 ms][INFO] === Request start === [2025-08-24 15:41:20][][1 ms][DEBUG] START check_scloud [2025-08-24 15:41:20][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:41:20][][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 10806 5014 24849404 240556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:41:20][][272 ms][DEBUG] targetPkg: running [2025-08-24 15:41:20][][272 ms][DEBUG] END check_scloud in 271 ms [2025-08-24 15:41:20][][272 ms][DEBUG] START check_boot_completed [2025-08-24 15:41:20][][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:41:20][][319 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 15:41:20][][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:41:20][][397 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 15:41:20][][397 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-24 15:41:20][][397 ms][DEBUG] rawBody.length=1129 [2025-08-24 15:41:20][][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536U\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CTA38YHXZ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1149\"}'\'' -e'"" [2025-08-24 15:41:20][][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:41:20][][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536U\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CTA38YHXZ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1149\"}'\'' -e'"" [2025-08-24 15:41:24][][4146 ms][DEBUG] proc_open done in 3749 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 15:41:24][][4146 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-08-24 15:41:24][][4146 ms][WARN] Detected error: Process with pid 10806 either refused to load frida-agent, or terminated during injection [2025-08-24 15:41:24][][4146 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 15:41:24][][4302 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 15:41:24][][4302 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 15:41:24][][4302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 15:41:24][][4427 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 15:41:24][][4427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 15:41:24][][4585 ms][DEBUG] SU: done in 158 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 15:41:26][][6598 ms][DEBUG] START check_boot_completed [2025-08-24 15:41:26][][6598 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:41:26][][6645 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 15:41:26][][6645 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:41:26][][6708 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 15:41:26][][6708 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-24 15:41:29][][9723 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 15:41:29][][9723 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536U\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CTA38YHXZ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1149\"}'\'' -e'"" [2025-08-24 15:41:33][][12972 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-24 15:41:33][][13128 ms][DEBUG] proc_open done in 3405 ms; code=255; res.len=115 [2025-08-24 15:41:33][][13128 ms][DEBUG] END runCmdUntilRes#2 in 3406 ms [2025-08-24 15:41:33][][13128 ms][INFO] SUCCESS response from frida (len=115) [2025-08-24 15:42:04][350545468512504][0 ms][INFO] === Request start === [2025-08-24 15:42:04][350545468512504][0 ms][DEBUG] START check_scloud [2025-08-24 15:42:04][350545468512504][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:42:05][350545468512504][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 12645 5014 23480788 127696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:42:05][350545468512504][315 ms][DEBUG] targetPkg: running [2025-08-24 15:42:05][350545468512504][315 ms][DEBUG] END check_scloud in 315 ms [2025-08-24 15:42:05][350545468512504][315 ms][DEBUG] START check_boot_completed [2025-08-24 15:42:05][350545468512504][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:42:05][350545468512504][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 15:42:05][350545468512504][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:42:05][350545468512504][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 15:42:05][350545468512504][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 15:42:05][350545468512504][409 ms][DEBUG] START check_internet [2025-08-24 15:42:05][350545468512504][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 15:42:05][350545468512504][783 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=255 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 255.797/255.797/255.797/0.000 ms\n [2025-08-24 15:42:05][350545468512504][783 ms][DEBUG] check_internet: online [2025-08-24 15:42:05][350545468512504][784 ms][DEBUG] END check_internet in 375 ms [2025-08-24 15:42:05][350545468512504][784 ms][DEBUG] rawBody.length=1158 [2025-08-24 15:42:05][350545468512504][784 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545468512504\",\"model\":\"SM-T500\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9AR40G9Z1J\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4778\"}'\'' -e'"" [2025-08-24 15:42:05][350545468512504][784 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:42:05][350545468512504][784 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545468512504\",\"model\":\"SM-T500\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9AR40G9Z1J\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4778\"}'\'' -e'"" [2025-08-24 15:42:09][350545468512504][4798 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d32fc0ee-0dca-4d33-ba36-c0d6dd2df726","id":"QR_d32fc0ee-0dca-4d33-ba36-c0d6dd2df726","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:42:09][350545468512504][4954 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-24 15:42:09][350545468512504][4954 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-24 15:42:09][350545468512504][4954 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:43:03][350226695964046][0 ms][INFO] === Request start === [2025-08-24 15:43:03][350226695964046][1 ms][DEBUG] START check_scloud [2025-08-24 15:43:03][350226695964046][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:43:03][350226695964046][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 12645 5014 23661268 138324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:43:03][350226695964046][302 ms][DEBUG] targetPkg: running [2025-08-24 15:43:03][350226695964046][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-24 15:43:03][350226695964046][302 ms][DEBUG] START check_boot_completed [2025-08-24 15:43:03][350226695964046][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:43:04][350226695964046][347 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 15:43:04][350226695964046][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:43:04][350226695964046][409 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 15:43:04][350226695964046][409 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-24 15:43:04][350226695964046][409 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:43:04][350226695964046][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226695964046\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5253\"}'\'' -e'"" [2025-08-24 15:43:04][350226695964046][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:43:04][350226695964046][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226695964046\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5253\"}'\'' -e'"" [2025-08-24 15:43:07][350226695964046][4283 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8ad45781-0bcb-42d9-8910-03b101fe4178","id":"QR_8ad45781-0bcb-42d9-8910-03b101fe4178","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:43:08][350226695964046][4439 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-24 15:43:08][350226695964046][4439 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-24 15:43:08][350226695964046][4439 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:45:03][356185418782388][1 ms][INFO] === Request start === [2025-08-24 15:45:03][356185418782388][1 ms][DEBUG] START check_scloud [2025-08-24 15:45:03][356185418782388][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:45:03][356185418782388][309 ms][DEBUG] SU: done in 307 ms; outu0_a118 12645 5014 23822088 150288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:45:03][356185418782388][309 ms][DEBUG] targetPkg: running [2025-08-24 15:45:03][356185418782388][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-24 15:45:03][356185418782388][309 ms][DEBUG] START check_boot_completed [2025-08-24 15:45:03][356185418782388][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:45:04][356185418782388][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 15:45:04][356185418782388][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:45:04][356185418782388][404 ms][DEBUG] SU: done in 49 ms; out [2025-08-24 15:45:04][356185418782388][404 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 15:45:04][356185418782388][404 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:45:04][356185418782388][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356185418782388\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8652\"}'\'' -e'"" [2025-08-24 15:45:04][356185418782388][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:45:04][356185418782388][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356185418782388\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8652\"}'\'' -e'"" [2025-08-24 15:45:08][356185418782388][4682 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8190c43-ce1c-420e-b616-f5eae4c2e161","id":"QR_b8190c43-ce1c-420e-b616-f5eae4c2e161","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:45:08][356185418782388][4839 ms][DEBUG] proc_open done in 4434 ms; code=255; res.len=3343 [2025-08-24 15:45:08][356185418782388][4839 ms][DEBUG] END runCmdUntilRes#1 in 4434 ms [2025-08-24 15:45:08][356185418782388][4839 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:48:03][352600227889301][1 ms][INFO] === Request start === [2025-08-24 15:48:03][352600227889301][1 ms][DEBUG] START check_scloud [2025-08-24 15:48:03][352600227889301][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:48:04][352600227889301][302 ms][DEBUG] SU: done in 300 ms; outu0_a118 12645 5014 23958444 161292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:48:04][352600227889301][302 ms][DEBUG] targetPkg: running [2025-08-24 15:48:04][352600227889301][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-24 15:48:04][352600227889301][302 ms][DEBUG] START check_boot_completed [2025-08-24 15:48:04][352600227889301][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:48:04][352600227889301][333 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 15:48:04][352600227889301][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:48:04][352600227889301][380 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 15:48:04][352600227889301][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 15:48:04][352600227889301][380 ms][DEBUG] START check_internet [2025-08-24 15:48:04][352600227889301][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 15:48:04][352600227889301][864 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.813/201.813/201.813/0.000 ms\n [2025-08-24 15:48:04][352600227889301][864 ms][DEBUG] check_internet: online [2025-08-24 15:48:04][352600227889301][864 ms][DEBUG] END check_internet in 484 ms [2025-08-24 15:48:04][352600227889301][864 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:48:04][352600227889301][864 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227889301\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4747\"}'\'' -e'"" [2025-08-24 15:48:04][352600227889301][864 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:48:04][352600227889301][864 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227889301\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4747\"}'\'' -e'"" [2025-08-24 15:48:08][352600227889301][5003 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_80925c12-25a3-437b-819d-6c245dda7d37","id":"QR_80925c12-25a3-437b-819d-6c245dda7d37","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:48:09][352600227889301][5160 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-24 15:48:09][352600227889301][5160 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-24 15:48:09][352600227889301][5160 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:48:11][354106241725099][0 ms][INFO] === Request start === [2025-08-24 15:48:11][354106241725099][1 ms][DEBUG] START check_scloud [2025-08-24 15:48:11][354106241725099][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:48:11][354106241725099][307 ms][DEBUG] SU: done in 307 ms; outu0_a118 12645 5014 24121524 172436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:48:11][354106241725099][308 ms][DEBUG] targetPkg: running [2025-08-24 15:48:11][354106241725099][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-24 15:48:11][354106241725099][308 ms][DEBUG] START check_boot_completed [2025-08-24 15:48:11][354106241725099][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:48:11][354106241725099][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 15:48:11][354106241725099][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:48:11][354106241725099][448 ms][DEBUG] SU: done in 93 ms; out [2025-08-24 15:48:11][354106241725099][448 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-24 15:48:11][354106241725099][448 ms][DEBUG] START check_internet [2025-08-24 15:48:11][354106241725099][448 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 15:48:12][354106241725099][745 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=172 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 172.744/172.744/172.744/0.000 ms\n [2025-08-24 15:48:12][354106241725099][745 ms][DEBUG] check_internet: online [2025-08-24 15:48:12][354106241725099][745 ms][DEBUG] END check_internet in 297 ms [2025-08-24 15:48:12][354106241725099][745 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:48:12][354106241725099][745 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106241725099\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1055\"}'\'' -e'"" [2025-08-24 15:48:12][354106241725099][745 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:48:12][354106241725099][745 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106241725099\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1055\"}'\'' -e'"" [2025-08-24 15:48:15][354106241725099][4431 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eca1be76-d20d-4103-9816-0490df12acf0","id":"QR_eca1be76-d20d-4103-9816-0490df12acf0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:48:16][354106241725099][4587 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3343 [2025-08-24 15:48:16][354106241725099][4587 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-08-24 15:48:16][354106241725099][4588 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:51:03][356835259913829][1 ms][INFO] === Request start === [2025-08-24 15:51:03][356835259913829][1 ms][DEBUG] START check_scloud [2025-08-24 15:51:03][356835259913829][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:51:04][356835259913829][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 12645 5014 24268148 184728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:51:04][356835259913829][291 ms][DEBUG] targetPkg: running [2025-08-24 15:51:04][356835259913829][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-24 15:51:04][356835259913829][291 ms][DEBUG] START check_boot_completed [2025-08-24 15:51:04][356835259913829][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:51:04][356835259913829][322 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 15:51:04][356835259913829][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:51:04][356835259913829][385 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 15:51:04][356835259913829][385 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 15:51:04][356835259913829][385 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:51:04][356835259913829][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356835259913829\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6995\"}'\'' -e'"" [2025-08-24 15:51:04][356835259913829][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:51:04][356835259913829][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356835259913829\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6995\"}'\'' -e'"" [2025-08-24 15:51:08][356835259913829][4493 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_883ec202-c8bd-46ad-92e6-df93bc764288","id":"QR_883ec202-c8bd-46ad-92e6-df93bc764288","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:51:08][356835259913829][4650 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-24 15:51:08][356835259913829][4650 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-24 15:51:08][356835259913829][4650 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:51:10][351240643355156][0 ms][INFO] === Request start === [2025-08-24 15:51:10][351240643355156][1 ms][DEBUG] START check_scloud [2025-08-24 15:51:10][351240643355156][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:51:11][351240643355156][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 12645 5014 24420860 195540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:51:11][351240643355156][312 ms][DEBUG] targetPkg: running [2025-08-24 15:51:11][351240643355156][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-24 15:51:11][351240643355156][312 ms][DEBUG] START check_boot_completed [2025-08-24 15:51:11][351240643355156][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:51:11][351240643355156][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 15:51:11][351240643355156][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:51:11][351240643355156][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 15:51:11][351240643355156][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 15:51:11][351240643355156][405 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:51:11][351240643355156][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643355156\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9958\"}'\'' -e'"" [2025-08-24 15:51:11][351240643355156][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:51:11][351240643355156][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643355156\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9958\"}'\'' -e'"" [2025-08-24 15:51:15][351240643355156][4122 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cc6209e6-1f94-431c-ac1b-6119cb322d6e","id":"QR_cc6209e6-1f94-431c-ac1b-6119cb322d6e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:51:15][351240643355156][4278 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-08-24 15:51:15][351240643355156][4278 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-24 15:51:15][351240643355156][4278 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:53:03][350968170823888][1 ms][INFO] === Request start === [2025-08-24 15:53:03][350968170823888][1 ms][DEBUG] START check_scloud [2025-08-24 15:53:03][350968170823888][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:53:03][350968170823888][299 ms][DEBUG] SU: done in 297 ms; outu0_a118 12645 5014 24518204 207712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:53:03][350968170823888][299 ms][DEBUG] targetPkg: running [2025-08-24 15:53:03][350968170823888][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-24 15:53:03][350968170823888][299 ms][DEBUG] START check_boot_completed [2025-08-24 15:53:03][350968170823888][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:53:03][350968170823888][344 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 15:53:03][350968170823888][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:53:03][350968170823888][422 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 15:53:03][350968170823888][422 ms][DEBUG] END check_boot_completed in 123 ms [2025-08-24 15:53:03][350968170823888][422 ms][DEBUG] rawBody.length=1148 [2025-08-24 15:53:03][350968170823888][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350968170823888\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2881\"}'\'' -e'"" [2025-08-24 15:53:03][350968170823888][422 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:53:03][350968170823888][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350968170823888\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2881\"}'\'' -e'"" [2025-08-24 15:53:08][350968170823888][4858 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_40d38dc1-41a3-4706-af66-171478bf79b1","id":"QR_40d38dc1-41a3-4706-af66-171478bf79b1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:53:08][350968170823888][5014 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-08-24 15:53:08][350968170823888][5014 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-08-24 15:53:08][350968170823888][5014 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:59:03][356298310590930][1 ms][INFO] === Request start === [2025-08-24 15:59:03][356298310590930][1 ms][DEBUG] START check_scloud [2025-08-24 15:59:03][356298310590930][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:59:03][356298310590930][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 12645 5014 24629920 218544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:59:03][356298310590930][292 ms][DEBUG] targetPkg: running [2025-08-24 15:59:03][356298310590930][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-24 15:59:03][356298310590930][292 ms][DEBUG] START check_boot_completed [2025-08-24 15:59:03][356298310590930][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:59:03][356298310590930][339 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 15:59:03][356298310590930][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:59:03][356298310590930][401 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 15:59:03][356298310590930][402 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 15:59:03][356298310590930][402 ms][DEBUG] rawBody.length=1147 [2025-08-24 15:59:03][356298310590930][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356298310590930\",\"model\":\"SM-T575\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4103\"}'\'' -e'"" [2025-08-24 15:59:03][356298310590930][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:59:03][356298310590930][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356298310590930\",\"model\":\"SM-T575\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4103\"}'\'' -e'"" [2025-08-24 15:59:08][356298310590930][4822 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e0ce0ae5-025d-4e39-b43d-af319f9f0df0","id":"QR_e0ce0ae5-025d-4e39-b43d-af319f9f0df0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:59:08][356298310590930][4978 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=3343 [2025-08-24 15:59:08][356298310590930][4978 ms][DEBUG] END runCmdUntilRes#1 in 4576 ms [2025-08-24 15:59:08][356298310590930][4978 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 15:59:15][352677532176137][0 ms][INFO] === Request start === [2025-08-24 15:59:15][352677532176137][1 ms][DEBUG] START check_scloud [2025-08-24 15:59:15][352677532176137][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 15:59:15][352677532176137][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 12645 5014 24779688 230436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 15:59:15][352677532176137][313 ms][DEBUG] targetPkg: running [2025-08-24 15:59:15][352677532176137][313 ms][DEBUG] END check_scloud in 313 ms [2025-08-24 15:59:15][352677532176137][313 ms][DEBUG] START check_boot_completed [2025-08-24 15:59:15][352677532176137][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 15:59:15][352677532176137][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 15:59:15][352677532176137][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 15:59:15][352677532176137][422 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 15:59:15][352677532176137][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 15:59:15][352677532176137][422 ms][DEBUG] rawBody.length=1149 [2025-08-24 15:59:15][352677532176137][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532176137\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2613\"}'\'' -e'"" [2025-08-24 15:59:15][352677532176137][422 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 15:59:15][352677532176137][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532176137\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2613\"}'\'' -e'"" [2025-08-24 15:59:20][352677532176137][5593 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1ef28c79-87cc-45be-b05c-9d6c2dee5117","id":"QR_1ef28c79-87cc-45be-b05c-9d6c2dee5117","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 15:59:20][352677532176137][5749 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-08-24 15:59:20][352677532176137][5749 ms][DEBUG] END runCmdUntilRes#1 in 5327 ms [2025-08-24 15:59:20][352677532176137][5749 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:00:04][356990919227779][0 ms][INFO] === Request start === [2025-08-24 16:00:04][356990919227779][1 ms][DEBUG] START check_scloud [2025-08-24 16:00:04][356990919227779][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:00:04][356990919227779][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 12645 5014 24883308 241740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:00:04][356990919227779][301 ms][DEBUG] targetPkg: running [2025-08-24 16:00:04][356990919227779][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-24 16:00:04][356990919227779][301 ms][DEBUG] START check_boot_completed [2025-08-24 16:00:04][356990919227779][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:00:04][356990919227779][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 16:00:04][356990919227779][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:00:04][356990919227779][395 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 16:00:04][356990919227779][395 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 16:00:04][356990919227779][395 ms][DEBUG] START check_internet [2025-08-24 16:00:04][356990919227779][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 16:00:05][356990919227779][925 ms][DEBUG] SU: done in 530 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.025/202.025/202.025/0.000 ms\n [2025-08-24 16:00:05][356990919227779][925 ms][DEBUG] check_internet: online [2025-08-24 16:00:05][356990919227779][925 ms][DEBUG] END check_internet in 530 ms [2025-08-24 16:00:05][356990919227779][925 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:00:05][356990919227779][925 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356990919227779\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9927\"}'\'' -e'"" [2025-08-24 16:00:05][356990919227779][925 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:00:05][356990919227779][925 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356990919227779\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9927\"}'\'' -e'"" [2025-08-24 16:00:08][356990919227779][4627 ms][DEBUG] proc_open done in 3702 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 16:00:08][356990919227779][4627 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-24 16:00:08][356990919227779][4627 ms][WARN] Detected error: Process with pid 12645 either refused to load frida-agent, or terminated during injection [2025-08-24 16:00:08][356990919227779][4627 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 16:00:09][356990919227779][4784 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 16:00:09][356990919227779][4784 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 16:00:09][356990919227779][4784 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 16:00:09][356990919227779][4909 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 16:00:09][356990919227779][4909 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 16:00:09][356990919227779][5065 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 16:00:11][356990919227779][7080 ms][DEBUG] START check_boot_completed [2025-08-24 16:00:11][356990919227779][7080 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:00:11][356990919227779][7127 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 16:00:11][356990919227779][7127 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:00:11][356990919227779][7205 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 16:00:11][356990919227779][7205 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-24 16:00:14][356990919227779][10220 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 16:00:14][356990919227779][10220 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356990919227779\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9927\"}'\'' -e'"" [2025-08-24 16:00:18][356990919227779][14453 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f5e96e71-0ea8-467d-afa1-fa26ef97d5cb","id":"QR_f5e96e71-0ea8-467d-afa1-fa26ef97d5cb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:00:18][356990919227779][14609 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-24 16:00:18][356990919227779][14609 ms][DEBUG] END runCmdUntilRes#2 in 4390 ms [2025-08-24 16:00:18][356990919227779][14609 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:06:05][356927264683602][1 ms][INFO] === Request start === [2025-08-24 16:06:05][356927264683602][1 ms][DEBUG] START check_scloud [2025-08-24 16:06:05][356927264683602][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:06:05][356927264683602][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 14129 5014 23545148 127816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:06:05][356927264683602][307 ms][DEBUG] targetPkg: running [2025-08-24 16:06:05][356927264683602][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-24 16:06:05][356927264683602][307 ms][DEBUG] START check_boot_completed [2025-08-24 16:06:05][356927264683602][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:06:05][356927264683602][338 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 16:06:05][356927264683602][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:06:05][356927264683602][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 16:06:05][356927264683602][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 16:06:05][356927264683602][386 ms][DEBUG] START check_internet [2025-08-24 16:06:05][356927264683602][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 16:06:06][356927264683602][870 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.465/200.465/200.465/0.000 ms\n [2025-08-24 16:06:06][356927264683602][870 ms][DEBUG] check_internet: online [2025-08-24 16:06:06][356927264683602][870 ms][DEBUG] END check_internet in 484 ms [2025-08-24 16:06:06][356927264683602][870 ms][DEBUG] rawBody.length=1149 [2025-08-24 16:06:06][356927264683602][870 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927264683602\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5120\"}'\'' -e'"" [2025-08-24 16:06:06][356927264683602][870 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:06:06][356927264683602][870 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927264683602\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5120\"}'\'' -e'"" [2025-08-24 16:06:11][356927264683602][6228 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a29a5410-151d-42dc-846f-936d4dcbb010","id":"QR_a29a5410-151d-42dc-846f-936d4dcbb010","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:06:11][356927264683602][6384 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-08-24 16:06:11][356927264683602][6384 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-24 16:06:11][356927264683602][6384 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:06:20][359800202570453][0 ms][INFO] === Request start === [2025-08-24 16:06:20][359800202570453][1 ms][DEBUG] START check_scloud [2025-08-24 16:06:20][359800202570453][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:06:20][359800202570453][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 14129 5014 23669060 138684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:06:20][359800202570453][312 ms][DEBUG] targetPkg: running [2025-08-24 16:06:20][359800202570453][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-24 16:06:20][359800202570453][312 ms][DEBUG] START check_boot_completed [2025-08-24 16:06:20][359800202570453][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:06:20][359800202570453][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 16:06:20][359800202570453][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:06:21][359800202570453][406 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 16:06:21][359800202570453][406 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 16:06:21][359800202570453][406 ms][DEBUG] START check_internet [2025-08-24 16:06:21][359800202570453][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 16:06:21][359800202570453][687 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=173 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 173.773/173.773/173.773/0.000 ms\n [2025-08-24 16:06:21][359800202570453][687 ms][DEBUG] check_internet: online [2025-08-24 16:06:21][359800202570453][687 ms][DEBUG] END check_internet in 281 ms [2025-08-24 16:06:21][359800202570453][687 ms][DEBUG] rawBody.length=1149 [2025-08-24 16:06:21][359800202570453][687 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359800202570453\",\"model\":\"SM-F766U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5927\"}'\'' -e'"" [2025-08-24 16:06:21][359800202570453][687 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:06:21][359800202570453][687 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359800202570453\",\"model\":\"SM-F766U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5927\"}'\'' -e'"" [2025-08-24 16:06:25][359800202570453][4545 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 16:06:25][359800202570453][4701 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=107 [2025-08-24 16:06:25][359800202570453][4701 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-24 16:06:25][359800202570453][4701 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 16:06:25][][0 ms][INFO] === Request start === [2025-08-24 16:06:25][][0 ms][DEBUG] START check_scloud [2025-08-24 16:06:25][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:06:25][][282 ms][DEBUG] SU: done in 282 ms; outu0_a118 14129 5014 23793292 150540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:06:25][][282 ms][DEBUG] targetPkg: running [2025-08-24 16:06:25][][282 ms][DEBUG] END check_scloud in 282 ms [2025-08-24 16:06:25][][283 ms][DEBUG] START check_boot_completed [2025-08-24 16:06:25][][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:06:26][][328 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 16:06:26][][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:06:26][][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 16:06:26][][375 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-24 16:06:26][][375 ms][DEBUG] START check_internet [2025-08-24 16:06:26][][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 16:06:26][][640 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=129 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 129.649/129.649/129.649/0.000 ms\n [2025-08-24 16:06:26][][640 ms][DEBUG] check_internet: online [2025-08-24 16:06:26][][640 ms][DEBUG] END check_internet in 266 ms [2025-08-24 16:06:26][][640 ms][DEBUG] rawBody.length=1130 [2025-08-24 16:06:26][][640 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F766U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CY72QLF9Z\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6158\"}'\'' -e'"" [2025-08-24 16:06:26][][641 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:06:26][][641 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F766U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CY72QLF9Z\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6158\"}'\'' -e'"" [2025-08-24 16:06:31][][5717 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 16:06:31][][5873 ms][DEBUG] proc_open done in 5232 ms; code=255; res.len=107 [2025-08-24 16:06:31][][5873 ms][DEBUG] END runCmdUntilRes#1 in 5232 ms [2025-08-24 16:06:31][][5873 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 16:06:32][359800202570453][0 ms][INFO] === Request start === [2025-08-24 16:06:32][359800202570453][1 ms][DEBUG] START check_scloud [2025-08-24 16:06:32][359800202570453][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:06:32][359800202570453][299 ms][DEBUG] SU: done in 299 ms; outu0_a118 14129 5014 23954288 161740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:06:32][359800202570453][299 ms][DEBUG] targetPkg: running [2025-08-24 16:06:32][359800202570453][299 ms][DEBUG] END check_scloud in 299 ms [2025-08-24 16:06:32][359800202570453][299 ms][DEBUG] START check_boot_completed [2025-08-24 16:06:32][359800202570453][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:06:32][359800202570453][331 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 16:06:32][359800202570453][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:06:32][359800202570453][393 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 16:06:32][359800202570453][393 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 16:06:32][359800202570453][393 ms][DEBUG] START check_internet [2025-08-24 16:06:32][359800202570453][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 16:06:33][359800202570453][737 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=219 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 219.650/219.650/219.650/0.000 ms\n [2025-08-24 16:06:33][359800202570453][737 ms][DEBUG] check_internet: online [2025-08-24 16:06:33][359800202570453][737 ms][DEBUG] END check_internet in 344 ms [2025-08-24 16:06:33][359800202570453][737 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:06:33][359800202570453][737 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359800202570453\",\"model\":\"SM-F766U\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6740\"}'\'' -e'"" [2025-08-24 16:06:33][359800202570453][737 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:06:33][359800202570453][738 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359800202570453\",\"model\":\"SM-F766U\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6740\"}'\'' -e'"" [2025-08-24 16:06:37][359800202570453][4923 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_584b7724-92b0-4fc9-acdf-fc5b2fb63fa9","id":"QR_584b7724-92b0-4fc9-acdf-fc5b2fb63fa9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:06:37][359800202570453][5079 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-08-24 16:06:37][359800202570453][5079 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-24 16:06:37][359800202570453][5080 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:07:03][352549931117899][0 ms][INFO] === Request start === [2025-08-24 16:07:03][352549931117899][1 ms][DEBUG] START check_scloud [2025-08-24 16:07:03][352549931117899][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:07:03][352549931117899][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 14129 5014 24076304 172804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:07:03][352549931117899][312 ms][DEBUG] targetPkg: running [2025-08-24 16:07:03][352549931117899][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-24 16:07:03][352549931117899][312 ms][DEBUG] START check_boot_completed [2025-08-24 16:07:03][352549931117899][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:07:03][352549931117899][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 16:07:03][352549931117899][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:07:03][352549931117899][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 16:07:03][352549931117899][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 16:07:03][352549931117899][421 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:07:03][352549931117899][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549931117899\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6258\"}'\'' -e'"" [2025-08-24 16:07:03][352549931117899][421 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:07:03][352549931117899][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549931117899\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6258\"}'\'' -e'"" [2025-08-24 16:07:07][352549931117899][4108 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c8fa6661-4199-49d3-b49d-2dd4b38c264b","id":"QR_c8fa6661-4199-49d3-b49d-2dd4b38c264b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:07:07][352549931117899][4264 ms][DEBUG] proc_open done in 3843 ms; code=255; res.len=3343 [2025-08-24 16:07:07][352549931117899][4264 ms][DEBUG] END runCmdUntilRes#1 in 3843 ms [2025-08-24 16:07:07][352549931117899][4264 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:11:03][358077201151087][1 ms][INFO] === Request start === [2025-08-24 16:11:03][358077201151087][1 ms][DEBUG] START check_scloud [2025-08-24 16:11:03][358077201151087][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:11:03][358077201151087][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 14129 5014 24207504 184764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:11:03][358077201151087][261 ms][DEBUG] targetPkg: running [2025-08-24 16:11:03][358077201151087][261 ms][DEBUG] END check_scloud in 260 ms [2025-08-24 16:11:03][358077201151087][261 ms][DEBUG] START check_boot_completed [2025-08-24 16:11:03][358077201151087][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:11:03][358077201151087][292 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 16:11:03][358077201151087][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:11:03][358077201151087][340 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 16:11:03][358077201151087][340 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 16:11:03][358077201151087][340 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:11:03][358077201151087][340 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358077201151087\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4890\"}'\'' -e'"" [2025-08-24 16:11:03][358077201151087][341 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:11:03][358077201151087][341 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358077201151087\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4890\"}'\'' -e'"" [2025-08-24 16:11:08][358077201151087][4698 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_85619a94-0b5a-4d51-867e-a150634eb8bc","id":"QR_85619a94-0b5a-4d51-867e-a150634eb8bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:11:08][358077201151087][4854 ms][DEBUG] proc_open done in 4513 ms; code=255; res.len=3343 [2025-08-24 16:11:08][358077201151087][4854 ms][DEBUG] END runCmdUntilRes#1 in 4513 ms [2025-08-24 16:11:08][358077201151087][4854 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:11:09][350320362595892][0 ms][INFO] === Request start === [2025-08-24 16:11:09][350320362595892][1 ms][DEBUG] START check_scloud [2025-08-24 16:11:09][350320362595892][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:11:10][350320362595892][301 ms][DEBUG] SU: done in 301 ms; outu0_a118 14129 5014 24341912 195836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:11:10][350320362595892][301 ms][DEBUG] targetPkg: running [2025-08-24 16:11:10][350320362595892][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-24 16:11:10][350320362595892][302 ms][DEBUG] START check_boot_completed [2025-08-24 16:11:10][350320362595892][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:11:10][350320362595892][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 16:11:10][350320362595892][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:11:10][350320362595892][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 16:11:10][350320362595892][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 16:11:10][350320362595892][411 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:11:10][350320362595892][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320362595892\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5122\"}'\'' -e'"" [2025-08-24 16:11:10][350320362595892][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:11:10][350320362595892][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320362595892\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5122\"}'\'' -e'"" [2025-08-24 16:11:14][350320362595892][4238 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c8591738-09dd-4ce9-9ba5-5029209a69ef","id":"QR_c8591738-09dd-4ce9-9ba5-5029209a69ef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:11:14][350320362595892][4394 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-24 16:11:14][350320362595892][4394 ms][DEBUG] END runCmdUntilRes#1 in 3984 ms [2025-08-24 16:11:14][350320362595892][4394 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:13:03][358080741450951][0 ms][INFO] === Request start === [2025-08-24 16:13:03][358080741450951][1 ms][DEBUG] START check_scloud [2025-08-24 16:13:03][358080741450951][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:13:03][358080741450951][275 ms][DEBUG] SU: done in 274 ms; outu0_a118 14129 5014 24478296 208296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:13:03][358080741450951][275 ms][DEBUG] targetPkg: running [2025-08-24 16:13:03][358080741450951][275 ms][DEBUG] END check_scloud in 274 ms [2025-08-24 16:13:03][358080741450951][275 ms][DEBUG] START check_boot_completed [2025-08-24 16:13:03][358080741450951][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:13:03][358080741450951][321 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 16:13:03][358080741450951][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:13:03][358080741450951][399 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 16:13:03][358080741450951][399 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-24 16:13:03][358080741450951][399 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:13:03][358080741450951][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080741450951\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1319\"}'\'' -e'"" [2025-08-24 16:13:03][358080741450951][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:13:03][358080741450951][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358080741450951\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1319\"}'\'' -e'"" [2025-08-24 16:13:07][358080741450951][4445 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7e4047f5-4c2b-4b9f-bf9c-7e9346de533f","id":"QR_7e4047f5-4c2b-4b9f-bf9c-7e9346de533f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:13:07][358080741450951][4601 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-24 16:13:07][358080741450951][4601 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-24 16:13:07][358080741450951][4601 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:13:10][357967974342007][0 ms][INFO] === Request start === [2025-08-24 16:13:10][357967974342007][0 ms][DEBUG] START check_scloud [2025-08-24 16:13:10][357967974342007][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:13:10][357967974342007][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 14129 5014 24629088 219244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:13:10][357967974342007][295 ms][DEBUG] targetPkg: running [2025-08-24 16:13:10][357967974342007][295 ms][DEBUG] END check_scloud in 295 ms [2025-08-24 16:13:10][357967974342007][295 ms][DEBUG] START check_boot_completed [2025-08-24 16:13:10][357967974342007][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:13:10][357967974342007][340 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 16:13:10][357967974342007][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:13:10][357967974342007][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 16:13:10][357967974342007][387 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-24 16:13:10][357967974342007][387 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:13:10][357967974342007][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967974342007\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8745\"}'\'' -e'"" [2025-08-24 16:13:10][357967974342007][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:13:10][357967974342007][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967974342007\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8745\"}'\'' -e'"" [2025-08-24 16:13:14][357967974342007][4120 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a884864-3dff-4305-8735-42c477265659","id":"QR_0a884864-3dff-4305-8735-42c477265659","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:13:14][357967974342007][4276 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-08-24 16:13:14][357967974342007][4276 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-24 16:13:14][357967974342007][4276 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:13:18][356130861672470][0 ms][INFO] === Request start === [2025-08-24 16:13:18][356130861672470][1 ms][DEBUG] START check_scloud [2025-08-24 16:13:18][356130861672470][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:13:18][356130861672470][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 14129 5014 24787944 230972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:13:18][356130861672470][301 ms][DEBUG] targetPkg: running [2025-08-24 16:13:18][356130861672470][301 ms][DEBUG] END check_scloud in 301 ms [2025-08-24 16:13:18][356130861672470][301 ms][DEBUG] START check_boot_completed [2025-08-24 16:13:18][356130861672470][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:13:18][356130861672470][346 ms][DEBUG] ADB: done in 44 ms; out [2025-08-24 16:13:18][356130861672470][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:13:19][356130861672470][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 16:13:19][356130861672470][393 ms][DEBUG] END check_boot_completed in 91 ms [2025-08-24 16:13:19][356130861672470][393 ms][DEBUG] rawBody.length=1149 [2025-08-24 16:13:19][356130861672470][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356130861672470\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2783\"}'\'' -e'"" [2025-08-24 16:13:19][356130861672470][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:13:19][356130861672470][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356130861672470\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2783\"}'\'' -e'"" [2025-08-24 16:13:25][356130861672470][6751 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7cdba387-655b-44f7-90ad-a7a74de9a911","id":"QR_7cdba387-655b-44f7-90ad-a7a74de9a911","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:13:25][356130861672470][6907 ms][DEBUG] proc_open done in 6514 ms; code=255; res.len=3343 [2025-08-24 16:13:25][356130861672470][6907 ms][DEBUG] END runCmdUntilRes#1 in 6514 ms [2025-08-24 16:13:25][356130861672470][6907 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:13:29][350832442401610][0 ms][INFO] === Request start === [2025-08-24 16:13:29][350832442401610][1 ms][DEBUG] START check_scloud [2025-08-24 16:13:29][350832442401610][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:13:30][350832442401610][457 ms][DEBUG] SU: done in 456 ms; out [2025-08-24 16:13:30][350832442401610][457 ms][WARN] targetPkg: not running, restarting [2025-08-24 16:13:30][350832442401610][457 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 16:13:30][350832442401610][645 ms][DEBUG] SU: done in 188 ms; out [2025-08-24 16:13:30][350832442401610][645 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 16:13:30][350832442401610][832 ms][DEBUG] SU: done in 186 ms; out [2025-08-24 16:13:32][350832442401610][2847 ms][DEBUG] END check_scloud in 2846 ms [2025-08-24 16:13:32][350832442401610][2847 ms][DEBUG] START check_boot_completed [2025-08-24 16:13:32][350832442401610][2847 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:13:32][350832442401610][2894 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 16:13:32][350832442401610][2894 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:13:32][350832442401610][2956 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 16:13:32][350832442401610][2956 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 16:13:32][350832442401610][2956 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:13:32][350832442401610][2956 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442401610\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3942\"}'\'' -e'"" [2025-08-24 16:13:32][350832442401610][2956 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:13:32][350832442401610][2956 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442401610\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3942\"}'\'' -e'"" [2025-08-24 16:13:33][350832442401610][3441 ms][DEBUG] proc_open done in 484 ms (timeout); code=4; out.len=0 err.len=50 [2025-08-24 16:13:33][350832442401610][3441 ms][DEBUG] END runCmdUntilRes#1 in 485 ms [2025-08-24 16:13:33][350832442401610][3441 ms][WARN] Detected system_server; Reboot the device [2025-08-24 16:13:33][350832442401610][3441 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-24 16:13:34][350832442401610][4190 ms][DEBUG] SU: done in 749 ms; out [2025-08-24 16:14:02][350832442401610][0 ms][INFO] === Request start === [2025-08-24 16:14:02][350832442401610][1 ms][DEBUG] START check_scloud [2025-08-24 16:14:02][350832442401610][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:14:02][350832442401610][37 ms][DEBUG] SU: done in 36 ms; out [2025-08-24 16:14:02][350832442401610][37 ms][WARN] targetPkg: not running, restarting [2025-08-24 16:14:02][350832442401610][37 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 16:14:02][350832442401610][83 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 16:14:02][350832442401610][83 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 16:14:02][350832442401610][115 ms][DEBUG] SU: done in 31 ms; out [2025-08-24 16:14:04][350832442401610][2130 ms][DEBUG] END check_scloud in 2129 ms [2025-08-24 16:14:04][350832442401610][2130 ms][DEBUG] START check_boot_completed [2025-08-24 16:14:04][350832442401610][2130 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:14:34][350832442401610][32626 ms][DEBUG] ADB: done in 30496 ms; out [2025-08-24 16:14:34][350832442401610][32626 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:14:34][350832442401610][32688 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 16:14:34][350832442401610][32688 ms][DEBUG] END check_boot_completed in 30558 ms [2025-08-24 16:14:34][350832442401610][32688 ms][DEBUG] START check_internet [2025-08-24 16:14:34][350832442401610][32688 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 16:14:35][350832442401610][32813 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 16:14:35][350832442401610][32813 ms][WARN] check_internet: offline [2025-08-24 16:14:35][350832442401610][32813 ms][DEBUG] END check_internet in 125 ms [2025-08-24 16:15:02][350832442401610][0 ms][INFO] === Request start === [2025-08-24 16:15:02][350832442401610][1 ms][DEBUG] START check_scloud [2025-08-24 16:15:02][350832442401610][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:15:02][350832442401610][412 ms][DEBUG] SU: done in 411 ms; out [2025-08-24 16:15:02][350832442401610][412 ms][WARN] targetPkg: not running, restarting [2025-08-24 16:15:02][350832442401610][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 16:15:02][350832442401610][583 ms][DEBUG] SU: done in 171 ms; out [2025-08-24 16:15:02][350832442401610][583 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 16:15:02][350832442401610][835 ms][DEBUG] SU: done in 252 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 16:15:04][350832442401610][2848 ms][DEBUG] END check_scloud in 2848 ms [2025-08-24 16:15:04][350832442401610][2848 ms][DEBUG] START check_boot_completed [2025-08-24 16:15:04][350832442401610][2848 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:15:04][350832442401610][2895 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 16:15:04][350832442401610][2895 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:15:04][350832442401610][2942 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 16:15:04][350832442401610][2942 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 16:15:04][350832442401610][2942 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:15:04][350832442401610][2942 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442401610\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5159\"}'\'' -e'"" [2025-08-24 16:15:04][350832442401610][2942 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:15:04][350832442401610][2942 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442401610\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5159\"}'\'' -e'"" [2025-08-24 16:15:11][350832442401610][8988 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_64afd72b-d231-4905-a51b-98872ab79d68","id":"QR_64afd72b-d231-4905-a51b-98872ab79d68","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:15:11][350832442401610][9144 ms][DEBUG] proc_open done in 6201 ms; code=255; res.len=3343 [2025-08-24 16:15:11][350832442401610][9144 ms][DEBUG] END runCmdUntilRes#1 in 6202 ms [2025-08-24 16:15:11][350832442401610][9144 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:15:15][350760500839068][1 ms][INFO] === Request start === [2025-08-24 16:15:15][350760500839068][1 ms][DEBUG] START check_scloud [2025-08-24 16:15:15][350760500839068][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:15:15][350760500839068][346 ms][DEBUG] SU: done in 345 ms; outu0_a118 10599 4969 23840380 105348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:15:15][350760500839068][347 ms][DEBUG] targetPkg: running [2025-08-24 16:15:15][350760500839068][347 ms][DEBUG] END check_scloud in 346 ms [2025-08-24 16:15:15][350760500839068][347 ms][DEBUG] START check_boot_completed [2025-08-24 16:15:15][350760500839068][347 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:15:15][350760500839068][391 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 16:15:15][350760500839068][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:15:15][350760500839068][469 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 16:15:15][350760500839068][470 ms][DEBUG] END check_boot_completed in 123 ms [2025-08-24 16:15:15][350760500839068][470 ms][DEBUG] rawBody.length=1149 [2025-08-24 16:15:15][350760500839068][470 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350760500839068\",\"model\":\"SM-A426U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7659\"}'\'' -e'"" [2025-08-24 16:15:15][350760500839068][470 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:15:15][350760500839068][470 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350760500839068\",\"model\":\"SM-A426U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7659\"}'\'' -e'"" [2025-08-24 16:15:23][350760500839068][8108 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9bb08375-5fa7-4769-9fa1-c086b0d09550","id":"QR_9bb08375-5fa7-4769-9fa1-c086b0d09550","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:15:23][350760500839068][8264 ms][DEBUG] proc_open done in 7794 ms; code=255; res.len=3343 [2025-08-24 16:15:23][350760500839068][8264 ms][DEBUG] END runCmdUntilRes#1 in 7794 ms [2025-08-24 16:15:23][350760500839068][8265 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:15:28][357879700780287][0 ms][INFO] === Request start === [2025-08-24 16:15:28][357879700780287][1 ms][DEBUG] START check_scloud [2025-08-24 16:15:28][357879700780287][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:15:28][357879700780287][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 10599 4969 24022024 92304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:15:28][357879700780287][309 ms][DEBUG] targetPkg: running [2025-08-24 16:15:28][357879700780287][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-24 16:15:28][357879700780287][309 ms][DEBUG] START check_boot_completed [2025-08-24 16:15:28][357879700780287][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:15:28][357879700780287][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 16:15:28][357879700780287][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:15:28][357879700780287][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 16:15:28][357879700780287][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 16:15:28][357879700780287][418 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:15:28][357879700780287][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357879700780287\",\"model\":\"SM-N981B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3060\"}'\'' -e'"" [2025-08-24 16:15:28][357879700780287][418 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:15:28][357879700780287][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357879700780287\",\"model\":\"SM-N981B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3060\"}'\'' -e'"" [2025-08-24 16:15:33][357879700780287][5042 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_df8c00ec-e347-472e-8475-8f99a679d47e","id":"QR_df8c00ec-e347-472e-8475-8f99a679d47e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:15:33][357879700780287][5198 ms][DEBUG] proc_open done in 4780 ms; code=255; res.len=3343 [2025-08-24 16:15:33][357879700780287][5198 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-08-24 16:15:33][357879700780287][5198 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:17:03][353310803162888][1 ms][INFO] === Request start === [2025-08-24 16:17:03][353310803162888][1 ms][DEBUG] START check_scloud [2025-08-24 16:17:03][353310803162888][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:17:03][353310803162888][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 10599 4969 24025676 67124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:17:03][353310803162888][318 ms][DEBUG] targetPkg: running [2025-08-24 16:17:03][353310803162888][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-24 16:17:03][353310803162888][318 ms][DEBUG] START check_boot_completed [2025-08-24 16:17:03][353310803162888][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:17:03][353310803162888][349 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 16:17:03][353310803162888][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:17:04][353310803162888][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 16:17:04][353310803162888][397 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 16:17:04][353310803162888][397 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:17:04][353310803162888][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310803162888\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2131\"}'\'' -e'"" [2025-08-24 16:17:04][353310803162888][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:17:04][353310803162888][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310803162888\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2131\"}'\'' -e'"" [2025-08-24 16:17:08][353310803162888][5051 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c5a6b574-9795-4090-b19e-d08ba6c911d3","id":"QR_c5a6b574-9795-4090-b19e-d08ba6c911d3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:17:08][353310803162888][5208 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-08-24 16:17:08][353310803162888][5208 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-08-24 16:17:08][353310803162888][5208 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:21:04][358857831971149][1 ms][INFO] === Request start === [2025-08-24 16:21:04][358857831971149][1 ms][DEBUG] START check_scloud [2025-08-24 16:21:04][358857831971149][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:21:05][358857831971149][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 10599 4969 24132912 87612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:21:05][358857831971149][325 ms][DEBUG] targetPkg: running [2025-08-24 16:21:05][358857831971149][325 ms][DEBUG] END check_scloud in 324 ms [2025-08-24 16:21:05][358857831971149][325 ms][DEBUG] START check_boot_completed [2025-08-24 16:21:05][358857831971149][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:21:05][358857831971149][356 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 16:21:05][358857831971149][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:21:05][358857831971149][404 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 16:21:05][358857831971149][404 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 16:21:05][358857831971149][404 ms][DEBUG] rawBody.length=1149 [2025-08-24 16:21:05][358857831971149][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358857831971149\",\"model\":\"SM-A516U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9802\"}'\'' -e'"" [2025-08-24 16:21:05][358857831971149][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:21:05][358857831971149][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358857831971149\",\"model\":\"SM-A516U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9802\"}'\'' -e'"" [2025-08-24 16:21:11][358857831971149][6198 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e5ca3d95-a3e3-4207-8c91-b458d23aaeca","id":"QR_e5ca3d95-a3e3-4207-8c91-b458d23aaeca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:21:11][358857831971149][6355 ms][DEBUG] proc_open done in 5950 ms; code=255; res.len=3343 [2025-08-24 16:21:11][358857831971149][6355 ms][DEBUG] END runCmdUntilRes#1 in 5950 ms [2025-08-24 16:21:11][358857831971149][6355 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:22:03][352060481109229][0 ms][INFO] === Request start === [2025-08-24 16:22:03][352060481109229][1 ms][DEBUG] START check_scloud [2025-08-24 16:22:03][352060481109229][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:22:04][352060481109229][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 10599 4969 24281428 99032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:22:04][352060481109229][329 ms][DEBUG] targetPkg: running [2025-08-24 16:22:04][352060481109229][329 ms][DEBUG] END check_scloud in 328 ms [2025-08-24 16:22:04][352060481109229][329 ms][DEBUG] START check_boot_completed [2025-08-24 16:22:04][352060481109229][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:22:04][352060481109229][360 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 16:22:04][352060481109229][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:22:04][352060481109229][408 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 16:22:04][352060481109229][408 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 16:22:04][352060481109229][408 ms][DEBUG] START check_internet [2025-08-24 16:22:04][352060481109229][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 16:22:04][352060481109229][860 ms][DEBUG] SU: done in 452 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.096/201.096/201.096/0.000 ms\n [2025-08-24 16:22:04][352060481109229][860 ms][DEBUG] check_internet: online [2025-08-24 16:22:04][352060481109229][860 ms][DEBUG] END check_internet in 452 ms [2025-08-24 16:22:04][352060481109229][860 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:22:04][352060481109229][860 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060481109229\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2332\"}'\'' -e'"" [2025-08-24 16:22:04][352060481109229][860 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:22:04][352060481109229][860 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060481109229\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2332\"}'\'' -e'"" [2025-08-24 16:22:08][352060481109229][5046 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58bd31a9-749c-48c4-a649-742d4443d8f6","id":"QR_58bd31a9-749c-48c4-a649-742d4443d8f6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:22:08][352060481109229][5202 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-08-24 16:22:08][352060481109229][5202 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-24 16:22:08][352060481109229][5202 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:22:13][350792524307459][0 ms][INFO] === Request start === [2025-08-24 16:22:13][350792524307459][1 ms][DEBUG] START check_scloud [2025-08-24 16:22:13][350792524307459][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:22:13][350792524307459][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 10599 4969 24451796 110860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:22:13][350792524307459][313 ms][DEBUG] targetPkg: running [2025-08-24 16:22:13][350792524307459][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-24 16:22:13][350792524307459][313 ms][DEBUG] START check_boot_completed [2025-08-24 16:22:13][350792524307459][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:22:13][350792524307459][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 16:22:13][350792524307459][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:22:13][350792524307459][408 ms][DEBUG] SU: done in 49 ms; out [2025-08-24 16:22:13][350792524307459][408 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 16:22:13][350792524307459][408 ms][DEBUG] START check_internet [2025-08-24 16:22:13][350792524307459][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 16:22:13][350792524307459][765 ms][DEBUG] SU: done in 357 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=244 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 244.528/244.528/244.528/0.000 ms\n [2025-08-24 16:22:13][350792524307459][766 ms][DEBUG] check_internet: online [2025-08-24 16:22:13][350792524307459][766 ms][DEBUG] END check_internet in 358 ms [2025-08-24 16:22:13][350792524307459][766 ms][DEBUG] rawBody.length=1149 [2025-08-24 16:22:13][350792524307459][766 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792524307459\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3637\"}'\'' -e'"" [2025-08-24 16:22:13][350792524307459][766 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:22:13][350792524307459][766 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792524307459\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3637\"}'\'' -e'"" [2025-08-24 16:22:25][350792524307459][12169 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_912031f0-fde4-45c6-a6dc-0aadcd97ce40","id":"QR_912031f0-fde4-45c6-a6dc-0aadcd97ce40","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:22:25][350792524307459][12325 ms][DEBUG] proc_open done in 11559 ms; code=255; res.len=3343 [2025-08-24 16:22:25][350792524307459][12325 ms][DEBUG] END runCmdUntilRes#1 in 11559 ms [2025-08-24 16:22:25][350792524307459][12325 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:23:02][357301907126560][0 ms][INFO] === Request start === [2025-08-24 16:23:02][357301907126560][1 ms][DEBUG] START check_scloud [2025-08-24 16:23:02][357301907126560][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:23:03][357301907126560][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 10599 4969 24592148 122204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:23:03][357301907126560][303 ms][DEBUG] targetPkg: running [2025-08-24 16:23:03][357301907126560][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-24 16:23:03][357301907126560][303 ms][DEBUG] START check_boot_completed [2025-08-24 16:23:03][357301907126560][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:23:03][357301907126560][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 16:23:03][357301907126560][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:23:03][357301907126560][412 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 16:23:03][357301907126560][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 16:23:03][357301907126560][412 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:23:03][357301907126560][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357301907126560\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1371\"}'\'' -e'"" [2025-08-24 16:23:03][357301907126560][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:23:03][357301907126560][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357301907126560\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1371\"}'\'' -e'"" [2025-08-24 16:23:07][357301907126560][4457 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_daf59ab0-9970-41ba-ac74-4929597caca0","id":"QR_daf59ab0-9970-41ba-ac74-4929597caca0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:23:07][357301907126560][4614 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-08-24 16:23:07][357301907126560][4614 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-24 16:23:07][357301907126560][4614 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:24:03][355859837675446][1 ms][INFO] === Request start === [2025-08-24 16:24:03][355859837675446][1 ms][DEBUG] START check_scloud [2025-08-24 16:24:03][355859837675446][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:24:03][355859837675446][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 10599 4969 24695672 134088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:24:03][355859837675446][299 ms][DEBUG] targetPkg: running [2025-08-24 16:24:03][355859837675446][299 ms][DEBUG] END check_scloud in 297 ms [2025-08-24 16:24:03][355859837675446][299 ms][DEBUG] START check_boot_completed [2025-08-24 16:24:03][355859837675446][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:24:03][355859837675446][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 16:24:03][355859837675446][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:24:03][355859837675446][407 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 16:24:03][355859837675446][407 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-24 16:24:03][355859837675446][407 ms][DEBUG] START check_internet [2025-08-24 16:24:03][355859837675446][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 16:24:04][355859837675446][721 ms][DEBUG] SU: done in 314 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=168 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 168.876/168.876/168.876/0.000 ms\n [2025-08-24 16:24:04][355859837675446][721 ms][DEBUG] check_internet: online [2025-08-24 16:24:04][355859837675446][721 ms][DEBUG] END check_internet in 314 ms [2025-08-24 16:24:04][355859837675446][721 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:24:04][355859837675446][721 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859837675446\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2061\"}'\'' -e'"" [2025-08-24 16:24:04][355859837675446][721 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:24:04][355859837675446][721 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859837675446\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2061\"}'\'' -e'"" [2025-08-24 16:24:08][355859837675446][4749 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0cd24649-c0a1-4e9f-aecf-81e9993995e0","id":"QR_0cd24649-c0a1-4e9f-aecf-81e9993995e0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:24:08][355859837675446][4905 ms][DEBUG] proc_open done in 4184 ms; code=255; res.len=3343 [2025-08-24 16:24:08][355859837675446][4905 ms][DEBUG] END runCmdUntilRes#1 in 4184 ms [2025-08-24 16:24:08][355859837675446][4905 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:26:02][352060486373663][1 ms][INFO] === Request start === [2025-08-24 16:26:02][352060486373663][1 ms][DEBUG] START check_scloud [2025-08-24 16:26:02][352060486373663][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:26:03][352060486373663][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 10599 4969 24853596 141276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:26:03][352060486373663][308 ms][DEBUG] targetPkg: running [2025-08-24 16:26:03][352060486373663][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-24 16:26:03][352060486373663][308 ms][DEBUG] START check_boot_completed [2025-08-24 16:26:03][352060486373663][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:26:03][352060486373663][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 16:26:03][352060486373663][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:26:03][352060486373663][417 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 16:26:03][352060486373663][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 16:26:03][352060486373663][417 ms][DEBUG] START check_internet [2025-08-24 16:26:03][352060486373663][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 16:26:03][352060486373663][979 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.910/201.910/201.910/0.000 ms\n [2025-08-24 16:26:03][352060486373663][979 ms][DEBUG] check_internet: online [2025-08-24 16:26:03][352060486373663][979 ms][DEBUG] END check_internet in 562 ms [2025-08-24 16:26:03][352060486373663][979 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:26:03][352060486373663][980 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060486373663\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1731\"}'\'' -e'"" [2025-08-24 16:26:03][352060486373663][980 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:26:03][352060486373663][980 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060486373663\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1731\"}'\'' -e'"" [2025-08-24 16:26:07][352060486373663][4947 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_675c8b62-a50e-4669-a708-238bb2dbeb73","id":"QR_675c8b62-a50e-4669-a708-238bb2dbeb73","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:26:08][352060486373663][5103 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-08-24 16:26:08][352060486373663][5103 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-24 16:26:08][352060486373663][5103 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:27:03][350287312811499][0 ms][INFO] === Request start === [2025-08-24 16:27:03][350287312811499][1 ms][DEBUG] START check_scloud [2025-08-24 16:27:03][350287312811499][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:27:03][350287312811499][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 10599 4969 25000128 153308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:27:03][350287312811499][298 ms][DEBUG] targetPkg: running [2025-08-24 16:27:03][350287312811499][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-24 16:27:03][350287312811499][298 ms][DEBUG] START check_boot_completed [2025-08-24 16:27:03][350287312811499][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:27:03][350287312811499][329 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 16:27:03][350287312811499][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:27:03][350287312811499][377 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 16:27:03][350287312811499][377 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 16:27:03][350287312811499][377 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:27:03][350287312811499][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287312811499\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3358\"}'\'' -e'"" [2025-08-24 16:27:03][350287312811499][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:27:03][350287312811499][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287312811499\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3358\"}'\'' -e'"" [2025-08-24 16:27:07][350287312811499][4312 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7f60bf00-366f-4897-9c0e-8ab94b8ce9ce","id":"QR_7f60bf00-366f-4897-9c0e-8ab94b8ce9ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:27:07][350287312811499][4469 ms][DEBUG] proc_open done in 4091 ms; code=255; res.len=3343 [2025-08-24 16:27:07][350287312811499][4469 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-24 16:27:07][350287312811499][4469 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:28:02][355714281983269][0 ms][INFO] === Request start === [2025-08-24 16:28:02][355714281983269][0 ms][DEBUG] START check_scloud [2025-08-24 16:28:02][355714281983269][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:28:03][355714281983269][298 ms][DEBUG] SU: done in 298 ms; outu0_a118 10599 4969 25132456 164368 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:28:03][355714281983269][298 ms][DEBUG] targetPkg: running [2025-08-24 16:28:03][355714281983269][298 ms][DEBUG] END check_scloud in 298 ms [2025-08-24 16:28:03][355714281983269][298 ms][DEBUG] START check_boot_completed [2025-08-24 16:28:03][355714281983269][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:28:03][355714281983269][329 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 16:28:03][355714281983269][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:28:03][355714281983269][376 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 16:28:03][355714281983269][376 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 16:28:03][355714281983269][376 ms][DEBUG] START check_internet [2025-08-24 16:28:03][355714281983269][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 16:28:03][355714281983269][767 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=290 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 290.692/290.692/290.692/0.000 ms\n [2025-08-24 16:28:03][355714281983269][767 ms][DEBUG] check_internet: online [2025-08-24 16:28:03][355714281983269][767 ms][DEBUG] END check_internet in 390 ms [2025-08-24 16:28:03][355714281983269][767 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:28:03][355714281983269][767 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355714281983269\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5455\"}'\'' -e'"" [2025-08-24 16:28:03][355714281983269][767 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:28:03][355714281983269][767 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355714281983269\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5455\"}'\'' -e'"" [2025-08-24 16:28:08][355714281983269][5235 ms][DEBUG] proc_open done in 4468 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 16:28:08][355714281983269][5235 ms][DEBUG] END runCmdUntilRes#1 in 4468 ms [2025-08-24 16:28:08][355714281983269][5235 ms][WARN] Detected error: Process with pid 10599 either refused to load frida-agent, or terminated during injection [2025-08-24 16:28:08][355714281983269][5235 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 16:28:08][355714281983269][5360 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 16:28:08][355714281983269][5360 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 16:28:08][355714281983269][5360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 16:28:08][355714281983269][5485 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 16:28:08][355714281983269][5485 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 16:28:08][355714281983269][5657 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 16:28:10][355714281983269][7672 ms][DEBUG] START check_boot_completed [2025-08-24 16:28:10][355714281983269][7672 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:28:10][355714281983269][7718 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 16:28:10][355714281983269][7718 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:28:10][355714281983269][7766 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 16:28:10][355714281983269][7766 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 16:28:13][355714281983269][10780 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 16:28:13][355714281983269][10780 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355714281983269\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5455\"}'\'' -e'"" [2025-08-24 16:28:17][355714281983269][14623 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fba1276e-c3ea-4e8e-bc15-ced404123ebc","id":"QR_fba1276e-c3ea-4e8e-bc15-ced404123ebc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:28:17][355714281983269][14779 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=3343 [2025-08-24 16:28:17][355714281983269][14780 ms][DEBUG] END runCmdUntilRes#2 in 3999 ms [2025-08-24 16:28:17][355714281983269][14780 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:31:04][353029493647913][1 ms][INFO] === Request start === [2025-08-24 16:31:04][353029493647913][1 ms][DEBUG] START check_scloud [2025-08-24 16:31:04][353029493647913][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:31:04][353029493647913][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 18562 4969 23760712 127688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:31:04][353029493647913][298 ms][DEBUG] targetPkg: running [2025-08-24 16:31:04][353029493647913][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-24 16:31:04][353029493647913][298 ms][DEBUG] START check_boot_completed [2025-08-24 16:31:04][353029493647913][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:31:04][353029493647913][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 16:31:04][353029493647913][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:31:04][353029493647913][394 ms][DEBUG] SU: done in 49 ms; out [2025-08-24 16:31:04][353029493647913][394 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 16:31:04][353029493647913][394 ms][DEBUG] rawBody.length=1149 [2025-08-24 16:31:04][353029493647913][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029493647913\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7630\"}'\'' -e'"" [2025-08-24 16:31:04][353029493647913][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:31:04][353029493647913][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029493647913\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7630\"}'\'' -e'"" [2025-08-24 16:31:10][353029493647913][5750 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4563fe2d-6008-4a2b-b679-9f7bb1c7bc35","id":"QR_4563fe2d-6008-4a2b-b679-9f7bb1c7bc35","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:31:10][353029493647913][5906 ms][DEBUG] proc_open done in 5512 ms; code=255; res.len=3343 [2025-08-24 16:31:10][353029493647913][5906 ms][DEBUG] END runCmdUntilRes#1 in 5512 ms [2025-08-24 16:31:10][353029493647913][5906 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:32:03][351642481186439][0 ms][INFO] === Request start === [2025-08-24 16:32:03][351642481186439][1 ms][DEBUG] START check_scloud [2025-08-24 16:32:03][351642481186439][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:32:04][351642481186439][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 18562 4969 23925612 138504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:32:04][351642481186439][249 ms][DEBUG] targetPkg: running [2025-08-24 16:32:04][351642481186439][249 ms][DEBUG] END check_scloud in 249 ms [2025-08-24 16:32:04][351642481186439][249 ms][DEBUG] START check_boot_completed [2025-08-24 16:32:04][351642481186439][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:32:04][351642481186439][296 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 16:32:04][351642481186439][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:32:04][351642481186439][343 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 16:32:04][351642481186439][343 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 16:32:04][351642481186439][343 ms][DEBUG] START check_internet [2025-08-24 16:32:04][351642481186439][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 16:32:04][351642481186439][936 ms][DEBUG] SU: done in 594 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.385/201.385/201.385/0.000 ms\n [2025-08-24 16:32:04][351642481186439][937 ms][DEBUG] check_internet: online [2025-08-24 16:32:04][351642481186439][937 ms][DEBUG] END check_internet in 594 ms [2025-08-24 16:32:04][351642481186439][937 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:32:04][351642481186439][937 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642481186439\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8387\"}'\'' -e'"" [2025-08-24 16:32:04][351642481186439][937 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:32:04][351642481186439][937 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642481186439\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8387\"}'\'' -e'"" [2025-08-24 16:32:09][351642481186439][5076 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2e24f302-3e17-470e-9937-6ebf5805073f","id":"QR_2e24f302-3e17-470e-9937-6ebf5805073f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:32:09][351642481186439][5232 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-24 16:32:09][351642481186439][5232 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-24 16:32:09][351642481186439][5232 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:32:11][355382110728105][0 ms][INFO] === Request start === [2025-08-24 16:32:11][355382110728105][1 ms][DEBUG] START check_scloud [2025-08-24 16:32:11][355382110728105][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:32:11][355382110728105][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 18562 4969 24076404 150056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:32:11][355382110728105][276 ms][DEBUG] targetPkg: running [2025-08-24 16:32:11][355382110728105][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-24 16:32:11][355382110728105][276 ms][DEBUG] START check_boot_completed [2025-08-24 16:32:11][355382110728105][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:32:12][355382110728105][323 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 16:32:12][355382110728105][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:32:12][355382110728105][370 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 16:32:12][355382110728105][370 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 16:32:12][355382110728105][370 ms][DEBUG] START check_internet [2025-08-24 16:32:12][355382110728105][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 16:32:12][355382110728105][682 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=185 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 185.758/185.758/185.758/0.000 ms\n [2025-08-24 16:32:12][355382110728105][682 ms][DEBUG] check_internet: online [2025-08-24 16:32:12][355382110728105][682 ms][DEBUG] END check_internet in 312 ms [2025-08-24 16:32:12][355382110728105][682 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:32:12][355382110728105][682 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382110728105\",\"model\":\"SM-A715F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8955\"}'\'' -e'"" [2025-08-24 16:32:12][355382110728105][682 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:32:12][355382110728105][682 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382110728105\",\"model\":\"SM-A715F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8955\"}'\'' -e'"" [2025-08-24 16:32:16][355382110728105][4556 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_712ccd97-0995-497d-b55c-8e6928211ab3","id":"QR_712ccd97-0995-497d-b55c-8e6928211ab3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:32:16][355382110728105][4712 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-24 16:32:16][355382110728105][4712 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-24 16:32:16][355382110728105][4712 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:32:18][356729402611747][0 ms][INFO] === Request start === [2025-08-24 16:32:18][356729402611747][0 ms][DEBUG] START check_scloud [2025-08-24 16:32:18][356729402611747][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:32:19][356729402611747][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 18562 4969 24198460 161268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:32:19][356729402611747][309 ms][DEBUG] targetPkg: running [2025-08-24 16:32:19][356729402611747][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-24 16:32:19][356729402611747][309 ms][DEBUG] START check_boot_completed [2025-08-24 16:32:19][356729402611747][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:32:19][356729402611747][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 16:32:19][356729402611747][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:32:19][356729402611747][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 16:32:19][356729402611747][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 16:32:19][356729402611747][418 ms][DEBUG] START check_internet [2025-08-24 16:32:19][356729402611747][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 16:32:19][356729402611747][777 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=225 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 225.031/225.031/225.031/0.000 ms\n [2025-08-24 16:32:19][356729402611747][777 ms][DEBUG] check_internet: online [2025-08-24 16:32:19][356729402611747][777 ms][DEBUG] END check_internet in 359 ms [2025-08-24 16:32:19][356729402611747][777 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:32:19][356729402611747][778 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356729402611747\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9694\"}'\'' -e'"" [2025-08-24 16:32:19][356729402611747][778 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:32:19][356729402611747][778 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356729402611747\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9694\"}'\'' -e'"" [2025-08-24 16:32:23][356729402611747][4573 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_36fdf411-424e-4063-9e2f-787525bea053","id":"QR_36fdf411-424e-4063-9e2f-787525bea053","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:32:23][356729402611747][4729 ms][DEBUG] proc_open done in 3951 ms; code=255; res.len=3343 [2025-08-24 16:32:23][356729402611747][4729 ms][DEBUG] END runCmdUntilRes#1 in 3951 ms [2025-08-24 16:32:23][356729402611747][4729 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:35:04][351272336846316][1 ms][INFO] === Request start === [2025-08-24 16:35:04][351272336846316][1 ms][DEBUG] START check_scloud [2025-08-24 16:35:04][351272336846316][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:35:04][351272336846316][312 ms][DEBUG] SU: done in 310 ms; outu0_a118 18562 4969 24316588 172796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:35:04][351272336846316][312 ms][DEBUG] targetPkg: running [2025-08-24 16:35:04][351272336846316][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-24 16:35:04][351272336846316][312 ms][DEBUG] START check_boot_completed [2025-08-24 16:35:04][351272336846316][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:35:04][351272336846316][343 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 16:35:04][351272336846316][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:35:04][351272336846316][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 16:35:04][351272336846316][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 16:35:04][351272336846316][390 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:35:04][351272336846316][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272336846316\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4621\"}'\'' -e'"" [2025-08-24 16:35:04][351272336846316][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:35:04][351272336846316][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272336846316\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4621\"}'\'' -e'"" [2025-08-24 16:35:08][351272336846316][4467 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_efe3a2a4-f9d8-4842-a33e-050d73e8c990","id":"QR_efe3a2a4-f9d8-4842-a33e-050d73e8c990","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:35:08][351272336846316][4623 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-24 16:35:08][351272336846316][4623 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-24 16:35:08][351272336846316][4623 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:39:03][354900111192780][1 ms][INFO] === Request start === [2025-08-24 16:39:03][354900111192780][1 ms][DEBUG] START check_scloud [2025-08-24 16:39:03][354900111192780][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:39:03][354900111192780][288 ms][DEBUG] SU: done in 286 ms; outu0_a118 18562 4969 24431376 184784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:39:03][354900111192780][288 ms][DEBUG] targetPkg: running [2025-08-24 16:39:03][354900111192780][288 ms][DEBUG] END check_scloud in 286 ms [2025-08-24 16:39:03][354900111192780][288 ms][DEBUG] START check_boot_completed [2025-08-24 16:39:03][354900111192780][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:39:03][354900111192780][319 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 16:39:03][354900111192780][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:39:03][354900111192780][381 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 16:39:03][354900111192780][381 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 16:39:03][354900111192780][382 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:39:03][354900111192780][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354900111192780\",\"model\":\"SM-G988B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1865\"}'\'' -e'"" [2025-08-24 16:39:03][354900111192780][382 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:39:03][354900111192780][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354900111192780\",\"model\":\"SM-G988B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1865\"}'\'' -e'"" [2025-08-24 16:39:07][354900111192780][4708 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bc62ee48-c5a1-49f0-851a-462bc5f526a8","id":"QR_bc62ee48-c5a1-49f0-851a-462bc5f526a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:39:07][354900111192780][4864 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-08-24 16:39:07][354900111192780][4865 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-24 16:39:07][354900111192780][4865 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:43:02][351044411612503][1 ms][INFO] === Request start === [2025-08-24 16:43:02][351044411612503][1 ms][DEBUG] START check_scloud [2025-08-24 16:43:02][351044411612503][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:43:03][351044411612503][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 18562 4969 24571892 195696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:43:03][351044411612503][298 ms][DEBUG] targetPkg: running [2025-08-24 16:43:03][351044411612503][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-24 16:43:03][351044411612503][298 ms][DEBUG] START check_boot_completed [2025-08-24 16:43:03][351044411612503][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:43:03][351044411612503][345 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 16:43:03][351044411612503][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:43:03][351044411612503][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 16:43:03][351044411612503][392 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 16:43:03][351044411612503][392 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:43:03][351044411612503][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044411612503\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6913\"}'\'' -e'"" [2025-08-24 16:43:03][351044411612503][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:43:03][351044411612503][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044411612503\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6913\"}'\'' -e'"" [2025-08-24 16:43:07][351044411612503][4500 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b4639083-97f4-4e7e-88c2-50f67489b67e","id":"QR_b4639083-97f4-4e7e-88c2-50f67489b67e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:43:07][351044411612503][4657 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-24 16:43:07][351044411612503][4657 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-24 16:43:07][351044411612503][4657 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:43:10][352838654740346][0 ms][INFO] === Request start === [2025-08-24 16:43:10][352838654740346][1 ms][DEBUG] START check_scloud [2025-08-24 16:43:10][352838654740346][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:43:10][352838654740346][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 18562 4969 24753276 206768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:43:10][352838654740346][308 ms][DEBUG] targetPkg: running [2025-08-24 16:43:10][352838654740346][308 ms][DEBUG] END check_scloud in 308 ms [2025-08-24 16:43:10][352838654740346][308 ms][DEBUG] START check_boot_completed [2025-08-24 16:43:10][352838654740346][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:43:10][352838654740346][339 ms][DEBUG] ADB: done in 30 ms; out [2025-08-24 16:43:10][352838654740346][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:43:10][352838654740346][387 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 16:43:10][352838654740346][387 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 16:43:10][352838654740346][387 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:43:10][352838654740346][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838654740346\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6890\"}'\'' -e'"" [2025-08-24 16:43:10][352838654740346][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:43:10][352838654740346][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838654740346\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6890\"}'\'' -e'"" [2025-08-24 16:43:14][352838654740346][4119 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4e412a27-2b25-4066-9732-d79dd500190e","id":"QR_4e412a27-2b25-4066-9732-d79dd500190e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:43:14][352838654740346][4275 ms][DEBUG] proc_open done in 3888 ms; code=255; res.len=3343 [2025-08-24 16:43:14][352838654740346][4275 ms][DEBUG] END runCmdUntilRes#1 in 3888 ms [2025-08-24 16:43:14][352838654740346][4276 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:43:15][356599313793292][0 ms][INFO] === Request start === [2025-08-24 16:43:15][356599313793292][1 ms][DEBUG] START check_scloud [2025-08-24 16:43:15][356599313793292][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:43:16][356599313793292][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 18562 4969 24879492 217472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:43:16][356599313793292][252 ms][DEBUG] targetPkg: running [2025-08-24 16:43:16][356599313793292][252 ms][DEBUG] END check_scloud in 251 ms [2025-08-24 16:43:16][356599313793292][252 ms][DEBUG] START check_boot_completed [2025-08-24 16:43:16][356599313793292][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:43:16][356599313793292][298 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 16:43:16][356599313793292][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:43:16][356599313793292][377 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 16:43:16][356599313793292][377 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-24 16:43:16][356599313793292][377 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:43:16][356599313793292][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356599313793292\",\"model\":\"SM-M156S\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1245\"}'\'' -e'"" [2025-08-24 16:43:16][356599313793292][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:43:16][356599313793292][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356599313793292\",\"model\":\"SM-M156S\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1245\"}'\'' -e'"" [2025-08-24 16:43:19][356599313793292][3985 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7135d439-3463-48d1-a25c-3d75d441c19c","id":"QR_7135d439-3463-48d1-a25c-3d75d441c19c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:43:20][356599313793292][4141 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-08-24 16:43:20][356599313793292][4141 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-08-24 16:43:20][356599313793292][4142 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:44:03][350287313872979][0 ms][INFO] === Request start === [2025-08-24 16:44:03][350287313872979][1 ms][DEBUG] START check_scloud [2025-08-24 16:44:03][350287313872979][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:44:04][350287313872979][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 18562 4969 25011744 229708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:44:04][350287313872979][315 ms][DEBUG] targetPkg: running [2025-08-24 16:44:04][350287313872979][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-24 16:44:04][350287313872979][315 ms][DEBUG] START check_boot_completed [2025-08-24 16:44:04][350287313872979][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:44:04][350287313872979][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 16:44:04][350287313872979][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:44:04][350287313872979][439 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 16:44:04][350287313872979][439 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-24 16:44:04][350287313872979][439 ms][DEBUG] START check_internet [2025-08-24 16:44:04][350287313872979][440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 16:44:04][350287313872979][924 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.001/202.001/202.001/0.000 ms\n [2025-08-24 16:44:04][350287313872979][924 ms][DEBUG] check_internet: online [2025-08-24 16:44:04][350287313872979][924 ms][DEBUG] END check_internet in 485 ms [2025-08-24 16:44:04][350287313872979][924 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:44:04][350287313872979][924 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287313872979\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3875\"}'\'' -e'"" [2025-08-24 16:44:04][350287313872979][924 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:44:04][350287313872979][924 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287313872979\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3875\"}'\'' -e'"" [2025-08-24 16:44:08][350287313872979][4907 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_75b702df-3bfd-40ad-b428-3a0f57e4bbe2","id":"QR_75b702df-3bfd-40ad-b428-3a0f57e4bbe2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:44:08][350287313872979][5063 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-08-24 16:44:08][350287313872979][5063 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-08-24 16:44:08][350287313872979][5063 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:44:11][351877476564063][0 ms][INFO] === Request start === [2025-08-24 16:44:11][351877476564063][1 ms][DEBUG] START check_scloud [2025-08-24 16:44:11][351877476564063][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:44:11][351877476564063][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 18562 4969 25185068 240348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:44:11][351877476564063][306 ms][DEBUG] targetPkg: running [2025-08-24 16:44:11][351877476564063][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-24 16:44:11][351877476564063][306 ms][DEBUG] START check_boot_completed [2025-08-24 16:44:11][351877476564063][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:44:11][351877476564063][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 16:44:11][351877476564063][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:44:11][351877476564063][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 16:44:11][351877476564063][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 16:44:11][351877476564063][399 ms][DEBUG] START check_internet [2025-08-24 16:44:11][351877476564063][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 16:44:11][351877476564063][665 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=172 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 172.785/172.785/172.785/0.000 ms\n [2025-08-24 16:44:11][351877476564063][665 ms][DEBUG] check_internet: online [2025-08-24 16:44:11][351877476564063][665 ms][DEBUG] END check_internet in 266 ms [2025-08-24 16:44:11][351877476564063][665 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:44:11][351877476564063][666 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877476564063\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7508\"}'\'' -e'"" [2025-08-24 16:44:11][351877476564063][666 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:44:11][351877476564063][666 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877476564063\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7508\"}'\'' -e'"" [2025-08-24 16:44:15][351877476564063][4461 ms][DEBUG] proc_open done in 3795 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 16:44:15][351877476564063][4461 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-24 16:44:15][351877476564063][4461 ms][WARN] Detected error: Process with pid 18562 either refused to load frida-agent, or terminated during injection [2025-08-24 16:44:15][351877476564063][4461 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 16:44:15][351877476564063][4602 ms][DEBUG] SU: done in 141 ms; out [2025-08-24 16:44:15][351877476564063][4602 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 16:44:15][351877476564063][4602 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 16:44:16][351877476564063][4742 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 16:44:16][351877476564063][4742 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 16:44:16][351877476564063][4899 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 16:44:18][351877476564063][6914 ms][DEBUG] START check_boot_completed [2025-08-24 16:44:18][351877476564063][6914 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:44:18][351877476564063][6961 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 16:44:18][351877476564063][6961 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:44:18][351877476564063][7007 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 16:44:18][351877476564063][7007 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 16:44:21][351877476564063][10022 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 16:44:21][351877476564063][10022 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877476564063\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7508\"}'\'' -e'"" [2025-08-24 16:44:25][351877476564063][13787 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f059d438-d71a-486e-8418-329b2a74a4fc","id":"QR_f059d438-d71a-486e-8418-329b2a74a4fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:44:25][351877476564063][13943 ms][DEBUG] proc_open done in 3921 ms; code=255; res.len=3343 [2025-08-24 16:44:25][351877476564063][13943 ms][DEBUG] END runCmdUntilRes#2 in 3921 ms [2025-08-24 16:44:25][351877476564063][13943 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:44:26][354892910612763][0 ms][INFO] === Request start === [2025-08-24 16:44:26][354892910612763][0 ms][DEBUG] START check_scloud [2025-08-24 16:44:26][354892910612763][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:44:26][354892910612763][249 ms][DEBUG] SU: done in 249 ms; outu0_a118 20106 4969 23799964 124992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:44:26][354892910612763][249 ms][DEBUG] targetPkg: running [2025-08-24 16:44:26][354892910612763][249 ms][DEBUG] END check_scloud in 249 ms [2025-08-24 16:44:26][354892910612763][249 ms][DEBUG] START check_boot_completed [2025-08-24 16:44:26][354892910612763][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:44:27][354892910612763][296 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 16:44:27][354892910612763][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:44:27][354892910612763][358 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 16:44:27][354892910612763][358 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 16:44:27][354892910612763][359 ms][DEBUG] START check_internet [2025-08-24 16:44:27][354892910612763][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 16:44:27][354892910612763][671 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=177 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 177.514/177.514/177.514/0.000 ms\n [2025-08-24 16:44:27][354892910612763][671 ms][DEBUG] check_internet: online [2025-08-24 16:44:27][354892910612763][671 ms][DEBUG] END check_internet in 312 ms [2025-08-24 16:44:27][354892910612763][671 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:44:27][354892910612763][671 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354892910612763\",\"model\":\"SM-A336N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9806\"}'\'' -e'"" [2025-08-24 16:44:27][354892910612763][671 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:44:27][354892910612763][671 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354892910612763\",\"model\":\"SM-A336N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9806\"}'\'' -e'"" [2025-08-24 16:44:30][354892910612763][4201 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_28609372-f402-43df-9d63-d2490fdbf868","id":"QR_28609372-f402-43df-9d63-d2490fdbf868","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:44:31][354892910612763][4357 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=3343 [2025-08-24 16:44:31][354892910612763][4357 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-08-24 16:44:31][354892910612763][4358 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:45:03][352288960374184][1 ms][INFO] === Request start === [2025-08-24 16:45:03][352288960374184][1 ms][DEBUG] START check_scloud [2025-08-24 16:45:03][352288960374184][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:45:03][352288960374184][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 20106 4969 23885844 138956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:45:03][352288960374184][315 ms][DEBUG] targetPkg: running [2025-08-24 16:45:03][352288960374184][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-24 16:45:03][352288960374184][316 ms][DEBUG] START check_boot_completed [2025-08-24 16:45:03][352288960374184][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:45:03][352288960374184][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 16:45:03][352288960374184][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:45:04][352288960374184][410 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 16:45:04][352288960374184][410 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 16:45:04][352288960374184][410 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:45:04][352288960374184][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288960374184\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2127\"}'\'' -e'"" [2025-08-24 16:45:04][352288960374184][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:45:04][352288960374184][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288960374184\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2127\"}'\'' -e'"" [2025-08-24 16:45:08][352288960374184][4455 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b2e17d70-f4cd-4fd3-ac2e-b1fd6e57c373","id":"QR_b2e17d70-f4cd-4fd3-ac2e-b1fd6e57c373","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:45:08][352288960374184][4611 ms][DEBUG] proc_open done in 4200 ms; code=255; res.len=3343 [2025-08-24 16:45:08][352288960374184][4611 ms][DEBUG] END runCmdUntilRes#1 in 4201 ms [2025-08-24 16:45:08][352288960374184][4611 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:51:05][354775171166621][1 ms][INFO] === Request start === [2025-08-24 16:51:05][354775171166621][1 ms][DEBUG] START check_scloud [2025-08-24 16:51:05][354775171166621][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:51:05][354775171166621][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 20106 4969 24040648 150704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:51:05][354775171166621][269 ms][DEBUG] targetPkg: running [2025-08-24 16:51:05][354775171166621][269 ms][DEBUG] END check_scloud in 268 ms [2025-08-24 16:51:05][354775171166621][269 ms][DEBUG] START check_boot_completed [2025-08-24 16:51:05][354775171166621][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:51:05][354775171166621][316 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 16:51:05][354775171166621][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:51:05][354775171166621][362 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 16:51:05][354775171166621][362 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 16:51:05][354775171166621][362 ms][DEBUG] rawBody.length=1149 [2025-08-24 16:51:05][354775171166621][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354775171166621\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1923\"}'\'' -e'"" [2025-08-24 16:51:05][354775171166621][363 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:51:05][354775171166621][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354775171166621\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1923\"}'\'' -e'"" [2025-08-24 16:51:11][354775171166621][5939 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7e0198bb-1838-421e-8b55-d97312dd9cc7","id":"QR_7e0198bb-1838-421e-8b55-d97312dd9cc7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:51:11][354775171166621][6095 ms][DEBUG] proc_open done in 5733 ms; code=255; res.len=3343 [2025-08-24 16:51:11][354775171166621][6095 ms][DEBUG] END runCmdUntilRes#1 in 5733 ms [2025-08-24 16:51:11][354775171166621][6095 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:56:03][350471121604630][1 ms][INFO] === Request start === [2025-08-24 16:56:03][350471121604630][1 ms][DEBUG] START check_scloud [2025-08-24 16:56:03][350471121604630][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:56:04][350471121604630][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 20106 4969 24164524 158420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:56:04][350471121604630][311 ms][DEBUG] targetPkg: running [2025-08-24 16:56:04][350471121604630][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-24 16:56:04][350471121604630][311 ms][DEBUG] START check_boot_completed [2025-08-24 16:56:04][350471121604630][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:56:04][350471121604630][342 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 16:56:04][350471121604630][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:56:04][350471121604630][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 16:56:04][350471121604630][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 16:56:04][350471121604630][390 ms][DEBUG] START check_internet [2025-08-24 16:56:04][350471121604630][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 16:56:04][350471121604630][936 ms][DEBUG] SU: done in 546 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.454/199.454/199.454/0.000 ms\n [2025-08-24 16:56:04][350471121604630][936 ms][DEBUG] check_internet: online [2025-08-24 16:56:04][350471121604630][936 ms][DEBUG] END check_internet in 547 ms [2025-08-24 16:56:04][350471121604630][936 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:56:04][350471121604630][936 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471121604630\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9674\"}'\'' -e'"" [2025-08-24 16:56:04][350471121604630][936 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:56:04][350471121604630][936 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471121604630\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9674\"}'\'' -e'"" [2025-08-24 16:56:08][350471121604630][5201 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_45c095a1-d175-4d3c-b6cd-ca63a4550689","id":"QR_45c095a1-d175-4d3c-b6cd-ca63a4550689","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:56:09][350471121604630][5357 ms][DEBUG] proc_open done in 4420 ms; code=255; res.len=3343 [2025-08-24 16:56:09][350471121604630][5357 ms][DEBUG] END runCmdUntilRes#1 in 4420 ms [2025-08-24 16:56:09][350471121604630][5357 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:57:02][355478284044806][1 ms][INFO] === Request start === [2025-08-24 16:57:02][355478284044806][1 ms][DEBUG] START check_scloud [2025-08-24 16:57:02][355478284044806][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:57:03][355478284044806][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 20106 4969 24274320 161604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:57:03][355478284044806][310 ms][DEBUG] targetPkg: running [2025-08-24 16:57:03][355478284044806][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-24 16:57:03][355478284044806][310 ms][DEBUG] START check_boot_completed [2025-08-24 16:57:03][355478284044806][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:57:03][355478284044806][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 16:57:03][355478284044806][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:57:03][355478284044806][419 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 16:57:03][355478284044806][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 16:57:03][355478284044806][419 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:57:03][355478284044806][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355478284044806\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5071\"}'\'' -e'"" [2025-08-24 16:57:03][355478284044806][419 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:57:03][355478284044806][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355478284044806\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5071\"}'\'' -e'"" [2025-08-24 16:57:07][355478284044806][4293 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fafbef55-3e62-461c-888a-4620577f3d38","id":"QR_fafbef55-3e62-461c-888a-4620577f3d38","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:57:07][355478284044806][4449 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-24 16:57:07][355478284044806][4449 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-24 16:57:07][355478284044806][4449 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:59:03][359468677661700][1 ms][INFO] === Request start === [2025-08-24 16:59:03][359468677661700][1 ms][DEBUG] START check_scloud [2025-08-24 16:59:03][359468677661700][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:59:03][359468677661700][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 20106 4969 24394228 172868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:59:03][359468677661700][296 ms][DEBUG] targetPkg: running [2025-08-24 16:59:03][359468677661700][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-24 16:59:03][359468677661700][296 ms][DEBUG] START check_boot_completed [2025-08-24 16:59:03][359468677661700][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:59:03][359468677661700][343 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 16:59:03][359468677661700][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:59:03][359468677661700][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 16:59:03][359468677661700][390 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 16:59:03][359468677661700][390 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:59:03][359468677661700][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359468677661700\",\"model\":\"SM-E156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2002\"}'\'' -e'"" [2025-08-24 16:59:03][359468677661700][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:59:03][359468677661700][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359468677661700\",\"model\":\"SM-E156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2002\"}'\'' -e'"" [2025-08-24 16:59:07][359468677661700][4483 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_705c72b2-02f2-4d58-aceb-ea896571acb2","id":"QR_705c72b2-02f2-4d58-aceb-ea896571acb2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:59:07][359468677661700][4639 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-08-24 16:59:07][359468677661700][4639 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-24 16:59:07][359468677661700][4639 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 16:59:10][353600812854834][0 ms][INFO] === Request start === [2025-08-24 16:59:10][353600812854834][1 ms][DEBUG] START check_scloud [2025-08-24 16:59:10][353600812854834][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 16:59:10][353600812854834][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 20106 4969 24542908 168536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 16:59:10][353600812854834][312 ms][DEBUG] targetPkg: running [2025-08-24 16:59:10][353600812854834][312 ms][DEBUG] END check_scloud in 312 ms [2025-08-24 16:59:10][353600812854834][312 ms][DEBUG] START check_boot_completed [2025-08-24 16:59:10][353600812854834][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 16:59:10][353600812854834][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 16:59:10][353600812854834][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 16:59:10][353600812854834][408 ms][DEBUG] SU: done in 49 ms; out [2025-08-24 16:59:10][353600812854834][408 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 16:59:10][353600812854834][408 ms][DEBUG] rawBody.length=1148 [2025-08-24 16:59:10][353600812854834][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600812854834\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6735\"}'\'' -e'"" [2025-08-24 16:59:10][353600812854834][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 16:59:10][353600812854834][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600812854834\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6735\"}'\'' -e'"" [2025-08-24 16:59:14][353600812854834][4186 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6a5e8ec2-a0ed-4cca-b165-adf8c30b5a5f","id":"QR_6a5e8ec2-a0ed-4cca-b165-adf8c30b5a5f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 16:59:14][353600812854834][4342 ms][DEBUG] proc_open done in 3934 ms; code=255; res.len=3343 [2025-08-24 16:59:14][353600812854834][4342 ms][DEBUG] END runCmdUntilRes#1 in 3934 ms [2025-08-24 16:59:14][353600812854834][4342 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 17:00:04][350545465404804][0 ms][INFO] === Request start === [2025-08-24 17:00:04][350545465404804][1 ms][DEBUG] START check_scloud [2025-08-24 17:00:04][350545465404804][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:00:05][350545465404804][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 20106 4969 24640380 180728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:00:05][350545465404804][302 ms][DEBUG] targetPkg: running [2025-08-24 17:00:05][350545465404804][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-24 17:00:05][350545465404804][302 ms][DEBUG] START check_boot_completed [2025-08-24 17:00:05][350545465404804][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:00:05][350545465404804][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 17:00:05][350545465404804][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:00:05][350545465404804][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 17:00:05][350545465404804][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 17:00:05][350545465404804][411 ms][DEBUG] START check_internet [2025-08-24 17:00:05][350545465404804][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 17:00:05][350545465404804][942 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.298/200.298/200.298/0.000 ms\n [2025-08-24 17:00:05][350545465404804][942 ms][DEBUG] check_internet: online [2025-08-24 17:00:05][350545465404804][942 ms][DEBUG] END check_internet in 531 ms [2025-08-24 17:00:05][350545465404804][943 ms][DEBUG] rawBody.length=1158 [2025-08-24 17:00:05][350545465404804][943 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545465404804\",\"model\":\"SM-T500\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9AR90LVETX\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4037\"}'\'' -e'"" [2025-08-24 17:00:05][350545465404804][943 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:00:05][350545465404804][943 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545465404804\",\"model\":\"SM-T500\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9AR90LVETX\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4037\"}'\'' -e'"" [2025-08-24 17:00:10][350545465404804][5285 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_60058361-4d92-448f-a863-1b7c533b94d8","id":"QR_60058361-4d92-448f-a863-1b7c533b94d8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 17:00:10][350545465404804][5441 ms][DEBUG] proc_open done in 4498 ms; code=255; res.len=3343 [2025-08-24 17:00:10][350545465404804][5441 ms][DEBUG] END runCmdUntilRes#1 in 4498 ms [2025-08-24 17:00:10][350545465404804][5441 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 17:03:03][357962507641306][1 ms][INFO] === Request start === [2025-08-24 17:03:03][357962507641306][1 ms][DEBUG] START check_scloud [2025-08-24 17:03:03][357962507641306][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:03:03][357962507641306][302 ms][DEBUG] SU: done in 300 ms; outu0_a118 20106 4969 24799204 187312 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:03:03][357962507641306][302 ms][DEBUG] targetPkg: running [2025-08-24 17:03:03][357962507641306][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-24 17:03:03][357962507641306][302 ms][DEBUG] START check_boot_completed [2025-08-24 17:03:03][357962507641306][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:03:03][357962507641306][333 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 17:03:03][357962507641306][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:03:04][357962507641306][380 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 17:03:04][357962507641306][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 17:03:04][357962507641306][380 ms][DEBUG] rawBody.length=1148 [2025-08-24 17:03:04][357962507641306][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507641306\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6398\"}'\'' -e'"" [2025-08-24 17:03:04][357962507641306][380 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:03:04][357962507641306][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507641306\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6398\"}'\'' -e'"" [2025-08-24 17:03:07][357962507641306][4316 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dc4844e3-9fca-409c-80d2-4089b83da685","id":"QR_dc4844e3-9fca-409c-80d2-4089b83da685","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 17:03:08][357962507641306][4473 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-08-24 17:03:08][357962507641306][4473 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-08-24 17:03:08][357962507641306][4473 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 17:03:10][355844570049637][0 ms][INFO] === Request start === [2025-08-24 17:03:10][355844570049637][1 ms][DEBUG] START check_scloud [2025-08-24 17:03:10][355844570049637][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:03:10][355844570049637][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 20106 4969 24939756 199264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:03:10][355844570049637][310 ms][DEBUG] targetPkg: running [2025-08-24 17:03:10][355844570049637][310 ms][DEBUG] END check_scloud in 310 ms [2025-08-24 17:03:10][355844570049637][311 ms][DEBUG] START check_boot_completed [2025-08-24 17:03:10][355844570049637][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:03:10][355844570049637][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 17:03:10][355844570049637][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:03:10][355844570049637][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 17:03:10][355844570049637][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 17:03:10][355844570049637][420 ms][DEBUG] rawBody.length=1148 [2025-08-24 17:03:10][355844570049637][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355844570049637\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8439\"}'\'' -e'"" [2025-08-24 17:03:10][355844570049637][420 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:03:10][355844570049637][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355844570049637\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8439\"}'\'' -e'"" [2025-08-24 17:03:14][355844570049637][3903 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b3047ed4-499e-4288-aece-90b97cc1e7fc","id":"QR_b3047ed4-499e-4288-aece-90b97cc1e7fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 17:03:14][355844570049637][4059 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=3343 [2025-08-24 17:03:14][355844570049637][4059 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-08-24 17:03:14][355844570049637][4059 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 17:04:03][350637544099356][1 ms][INFO] === Request start === [2025-08-24 17:04:03][350637544099356][1 ms][DEBUG] START check_scloud [2025-08-24 17:04:03][350637544099356][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:04:03][350637544099356][307 ms][DEBUG] SU: done in 305 ms; outu0_a118 20106 4969 25051564 210268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:04:03][350637544099356][307 ms][DEBUG] targetPkg: running [2025-08-24 17:04:03][350637544099356][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-24 17:04:03][350637544099356][307 ms][DEBUG] START check_boot_completed [2025-08-24 17:04:03][350637544099356][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:04:03][350637544099356][338 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 17:04:03][350637544099356][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:04:03][350637544099356][386 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 17:04:03][350637544099356][386 ms][DEBUG] END check_boot_completed in 80 ms [2025-08-24 17:04:03][350637544099356][386 ms][DEBUG] START check_internet [2025-08-24 17:04:03][350637544099356][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 17:04:04][350637544099356][822 ms][DEBUG] SU: done in 436 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.487/201.487/201.487/0.000 ms\n [2025-08-24 17:04:04][350637544099356][822 ms][DEBUG] check_internet: online [2025-08-24 17:04:04][350637544099356][823 ms][DEBUG] END check_internet in 436 ms [2025-08-24 17:04:04][350637544099356][823 ms][DEBUG] rawBody.length=1148 [2025-08-24 17:04:04][350637544099356][823 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544099356\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2686\"}'\'' -e'"" [2025-08-24 17:04:04][350637544099356][823 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:04:04][350637544099356][823 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544099356\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2686\"}'\'' -e'"" [2025-08-24 17:04:08][350637544099356][4712 ms][DEBUG] proc_open done in 3889 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 17:04:08][350637544099356][4712 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-24 17:04:08][350637544099356][4712 ms][WARN] Detected error: Process with pid 20106 either refused to load frida-agent, or terminated during injection [2025-08-24 17:04:08][350637544099356][4712 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 17:04:08][350637544099356][4852 ms][DEBUG] SU: done in 141 ms; out [2025-08-24 17:04:08][350637544099356][4853 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 17:04:08][350637544099356][4853 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 17:04:08][350637544099356][4977 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 17:04:08][350637544099356][4978 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 17:04:08][350637544099356][5181 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 17:04:10][350637544099356][7196 ms][DEBUG] START check_boot_completed [2025-08-24 17:04:10][350637544099356][7196 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:04:10][350637544099356][7243 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 17:04:10][350637544099356][7243 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:04:10][350637544099356][7290 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 17:04:10][350637544099356][7290 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 17:04:13][350637544099356][10304 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 17:04:13][350637544099356][10304 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637544099356\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2686\"}'\'' -e'"" [2025-08-24 17:04:17][350637544099356][14381 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c4bb69c0-4570-4f2f-bdcc-69124c0b503d","id":"QR_c4bb69c0-4570-4f2f-bdcc-69124c0b503d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 17:04:17][350637544099356][14538 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-24 17:04:17][350637544099356][14538 ms][DEBUG] END runCmdUntilRes#2 in 4234 ms [2025-08-24 17:04:17][350637544099356][14538 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 17:05:05][352460882121452][0 ms][INFO] === Request start === [2025-08-24 17:05:05][352460882121452][1 ms][DEBUG] START check_scloud [2025-08-24 17:05:05][352460882121452][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:05:05][352460882121452][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 22581 4969 23763924 128384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:05:05][352460882121452][314 ms][DEBUG] targetPkg: running [2025-08-24 17:05:05][352460882121452][314 ms][DEBUG] END check_scloud in 314 ms [2025-08-24 17:05:05][352460882121452][314 ms][DEBUG] START check_boot_completed [2025-08-24 17:05:05][352460882121452][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:05:05][352460882121452][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 17:05:05][352460882121452][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:05:05][352460882121452][423 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 17:05:05][352460882121452][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 17:05:05][352460882121452][424 ms][DEBUG] rawBody.length=1149 [2025-08-24 17:05:05][352460882121452][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352460882121452\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"BVO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4363\"}'\'' -e'"" [2025-08-24 17:05:05][352460882121452][424 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:05:05][352460882121452][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352460882121452\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"BVO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4363\"}'\'' -e'"" [2025-08-24 17:05:10][352460882121452][5438 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bd3dc436-cf72-4267-b8de-987e55f9b885","id":"QR_bd3dc436-cf72-4267-b8de-987e55f9b885","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 17:05:11][352460882121452][5594 ms][DEBUG] proc_open done in 5170 ms; code=255; res.len=3343 [2025-08-24 17:05:11][352460882121452][5594 ms][DEBUG] END runCmdUntilRes#1 in 5170 ms [2025-08-24 17:05:11][352460882121452][5594 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 17:05:17][353042534915645][0 ms][INFO] === Request start === [2025-08-24 17:05:17][353042534915645][1 ms][DEBUG] START check_scloud [2025-08-24 17:05:17][353042534915645][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:05:17][353042534915645][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 22581 4969 23908444 138364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:05:17][353042534915645][309 ms][DEBUG] targetPkg: running [2025-08-24 17:05:17][353042534915645][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-24 17:05:17][353042534915645][309 ms][DEBUG] START check_boot_completed [2025-08-24 17:05:17][353042534915645][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:05:17][353042534915645][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 17:05:17][353042534915645][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:05:17][353042534915645][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 17:05:17][353042534915645][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 17:05:17][353042534915645][387 ms][DEBUG] rawBody.length=1149 [2025-08-24 17:05:17][353042534915645][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353042534915645\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1363\"}'\'' -e'"" [2025-08-24 17:05:17][353042534915645][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:05:17][353042534915645][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353042534915645\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1363\"}'\'' -e'"" [2025-08-24 17:05:24][353042534915645][7011 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b150d2b0-2d67-4c1a-aa41-9688be9479b2","id":"QR_b150d2b0-2d67-4c1a-aa41-9688be9479b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 17:05:24][353042534915645][7167 ms][DEBUG] proc_open done in 6779 ms; code=255; res.len=3343 [2025-08-24 17:05:24][353042534915645][7167 ms][DEBUG] END runCmdUntilRes#1 in 6780 ms [2025-08-24 17:05:24][353042534915645][7167 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 17:07:03][351199556923717][1 ms][INFO] === Request start === [2025-08-24 17:07:03][351199556923717][1 ms][DEBUG] START check_scloud [2025-08-24 17:07:03][351199556923717][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:07:04][351199556923717][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 22581 4969 24017872 150104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:07:04][351199556923717][306 ms][DEBUG] targetPkg: running [2025-08-24 17:07:04][351199556923717][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-24 17:07:04][351199556923717][306 ms][DEBUG] START check_boot_completed [2025-08-24 17:07:04][351199556923717][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:07:04][351199556923717][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 17:07:04][351199556923717][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:07:04][351199556923717][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 17:07:04][351199556923717][400 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 17:07:04][351199556923717][400 ms][DEBUG] rawBody.length=1148 [2025-08-24 17:07:04][351199556923717][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199556923717\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7138\"}'\'' -e'"" [2025-08-24 17:07:04][351199556923717][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:07:04][351199556923717][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199556923717\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7138\"}'\'' -e'"" [2025-08-24 17:07:08][351199556923717][4523 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_665347fa-94ee-46aa-ade9-ab722a8ca78e","id":"QR_665347fa-94ee-46aa-ade9-ab722a8ca78e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 17:07:08][351199556923717][4680 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-24 17:07:08][351199556923717][4680 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-24 17:07:08][351199556923717][4680 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 17:09:02][350287315802230][0 ms][INFO] === Request start === [2025-08-24 17:09:02][350287315802230][1 ms][DEBUG] START check_scloud [2025-08-24 17:09:02][350287315802230][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:09:02][350287315802230][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 22581 4969 24157328 161020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:09:02][350287315802230][263 ms][DEBUG] targetPkg: running [2025-08-24 17:09:02][350287315802230][263 ms][DEBUG] END check_scloud in 263 ms [2025-08-24 17:09:02][350287315802230][263 ms][DEBUG] START check_boot_completed [2025-08-24 17:09:02][350287315802230][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:09:03][350287315802230][310 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 17:09:03][350287315802230][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:09:03][350287315802230][372 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 17:09:03][350287315802230][372 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 17:09:03][350287315802230][372 ms][DEBUG] rawBody.length=1148 [2025-08-24 17:09:03][350287315802230][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287315802230\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3610\"}'\'' -e'"" [2025-08-24 17:09:03][350287315802230][372 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:09:03][350287315802230][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287315802230\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3610\"}'\'' -e'"" [2025-08-24 17:09:07][350287315802230][4715 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4ee678fc-02d6-4eea-861a-4073bfe9872d","id":"QR_4ee678fc-02d6-4eea-861a-4073bfe9872d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 17:09:07][350287315802230][4871 ms][DEBUG] proc_open done in 4499 ms; code=255; res.len=3343 [2025-08-24 17:09:07][350287315802230][4871 ms][DEBUG] END runCmdUntilRes#1 in 4499 ms [2025-08-24 17:09:07][350287315802230][4871 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 17:11:02][352549938138104][1 ms][INFO] === Request start === [2025-08-24 17:11:02][352549938138104][1 ms][DEBUG] START check_scloud [2025-08-24 17:11:02][352549938138104][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:11:03][352549938138104][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 22581 4969 24260980 172100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:11:03][352549938138104][310 ms][DEBUG] targetPkg: running [2025-08-24 17:11:03][352549938138104][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-24 17:11:03][352549938138104][310 ms][DEBUG] START check_boot_completed [2025-08-24 17:11:03][352549938138104][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:11:03][352549938138104][357 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 17:11:03][352549938138104][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:11:03][352549938138104][420 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 17:11:03][352549938138104][420 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-24 17:11:03][352549938138104][420 ms][DEBUG] rawBody.length=1148 [2025-08-24 17:11:03][352549938138104][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549938138104\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6314\"}'\'' -e'"" [2025-08-24 17:11:03][352549938138104][420 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:11:03][352549938138104][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549938138104\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6314\"}'\'' -e'"" [2025-08-24 17:11:07][352549938138104][4200 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 17:11:07][352549938138104][4356 ms][DEBUG] proc_open done in 3935 ms; code=255; res.len=107 [2025-08-24 17:11:07][352549938138104][4356 ms][DEBUG] END runCmdUntilRes#1 in 3935 ms [2025-08-24 17:11:07][352549938138104][4356 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 17:11:07][][0 ms][INFO] === Request start === [2025-08-24 17:11:07][][1 ms][DEBUG] START check_scloud [2025-08-24 17:11:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:11:07][][263 ms][DEBUG] SU: done in 263 ms; outu0_a118 22581 4969 24411772 183880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:11:07][][263 ms][DEBUG] targetPkg: running [2025-08-24 17:11:07][][264 ms][DEBUG] END check_scloud in 263 ms [2025-08-24 17:11:07][][264 ms][DEBUG] START check_boot_completed [2025-08-24 17:11:07][][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:11:07][][310 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 17:11:07][][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:11:07][][373 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 17:11:07][][373 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 17:11:07][][373 ms][DEBUG] rawBody.length=1129 [2025-08-24 17:11:07][][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X90M5EKL\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3549\"}'\'' -e'"" [2025-08-24 17:11:07][][373 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:11:07][][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X90M5EKL\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3549\"}'\'' -e'"" [2025-08-24 17:11:11][][3575 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 17:11:11][][3731 ms][DEBUG] proc_open done in 3358 ms; code=255; res.len=107 [2025-08-24 17:11:11][][3731 ms][DEBUG] END runCmdUntilRes#1 in 3358 ms [2025-08-24 17:11:11][][3731 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 17:14:03][350832442651941][1 ms][INFO] === Request start === [2025-08-24 17:14:03][350832442651941][1 ms][DEBUG] START check_scloud [2025-08-24 17:14:03][350832442651941][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:14:03][350832442651941][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 22581 4969 24558396 195328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:14:03][350832442651941][315 ms][DEBUG] targetPkg: running [2025-08-24 17:14:03][350832442651941][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-24 17:14:03][350832442651941][315 ms][DEBUG] START check_boot_completed [2025-08-24 17:14:03][350832442651941][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:14:03][350832442651941][346 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 17:14:03][350832442651941][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:14:04][350832442651941][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 17:14:04][350832442651941][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 17:14:04][350832442651941][393 ms][DEBUG] START check_internet [2025-08-24 17:14:04][350832442651941][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 17:14:04][350832442651941][862 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.111/201.111/201.111/0.000 ms\n [2025-08-24 17:14:04][350832442651941][862 ms][DEBUG] check_internet: online [2025-08-24 17:14:04][350832442651941][862 ms][DEBUG] END check_internet in 469 ms [2025-08-24 17:14:04][350832442651941][862 ms][DEBUG] rawBody.length=1148 [2025-08-24 17:14:04][350832442651941][862 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442651941\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4693\"}'\'' -e'"" [2025-08-24 17:14:04][350832442651941][862 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:14:04][350832442651941][862 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442651941\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4693\"}'\'' -e'"" [2025-08-24 17:14:08][350832442651941][5017 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1be9f216-b21b-45d9-93c0-54bbf0988e77","id":"QR_1be9f216-b21b-45d9-93c0-54bbf0988e77","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 17:14:08][350832442651941][5173 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-24 17:14:08][350832442651941][5173 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-24 17:14:08][350832442651941][5173 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 17:17:03][353182203043681][1 ms][INFO] === Request start === [2025-08-24 17:17:03][353182203043681][1 ms][DEBUG] START check_scloud [2025-08-24 17:17:03][353182203043681][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:17:03][353182203043681][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 22581 4969 24702944 207512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:17:03][353182203043681][308 ms][DEBUG] targetPkg: running [2025-08-24 17:17:03][353182203043681][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-24 17:17:03][353182203043681][308 ms][DEBUG] START check_boot_completed [2025-08-24 17:17:03][353182203043681][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:17:03][353182203043681][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 17:17:03][353182203043681][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:17:03][353182203043681][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 17:17:03][353182203043681][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 17:17:03][353182203043681][387 ms][DEBUG] rawBody.length=1148 [2025-08-24 17:17:03][353182203043681][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182203043681\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6331\"}'\'' -e'"" [2025-08-24 17:17:03][353182203043681][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:17:03][353182203043681][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182203043681\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6331\"}'\'' -e'"" [2025-08-24 17:17:07][353182203043681][4448 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4f946881-6d9f-4e96-99ef-beac778d9b32","id":"QR_4f946881-6d9f-4e96-99ef-beac778d9b32","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 17:17:07][353182203043681][4604 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-24 17:17:07][353182203043681][4604 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-24 17:17:07][353182203043681][4604 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 17:20:03][350011602066618][1 ms][INFO] === Request start === [2025-08-24 17:20:03][350011602066618][1 ms][DEBUG] START check_scloud [2025-08-24 17:20:03][350011602066618][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:20:03][350011602066618][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 22581 4969 24812612 218284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:20:03][350011602066618][293 ms][DEBUG] targetPkg: running [2025-08-24 17:20:03][350011602066618][293 ms][DEBUG] END check_scloud in 291 ms [2025-08-24 17:20:03][350011602066618][293 ms][DEBUG] START check_boot_completed [2025-08-24 17:20:03][350011602066618][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:20:03][350011602066618][324 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 17:20:03][350011602066618][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:20:03][350011602066618][371 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 17:20:03][350011602066618][371 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 17:20:03][350011602066618][371 ms][DEBUG] START check_internet [2025-08-24 17:20:03][350011602066618][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 17:20:03][350011602066618][871 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.432/203.432/203.432/0.000 ms\n [2025-08-24 17:20:03][350011602066618][871 ms][DEBUG] check_internet: online [2025-08-24 17:20:03][350011602066618][871 ms][DEBUG] END check_internet in 500 ms [2025-08-24 17:20:03][350011602066618][871 ms][DEBUG] rawBody.length=1148 [2025-08-24 17:20:03][350011602066618][871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350011602066618\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2698\"}'\'' -e'"" [2025-08-24 17:20:03][350011602066618][871 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:20:03][350011602066618][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350011602066618\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2698\"}'\'' -e'"" [2025-08-24 17:20:08][350011602066618][4979 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_25a1be18-a51c-4aa5-95bd-c26ea8f061c3","id":"QR_25a1be18-a51c-4aa5-95bd-c26ea8f061c3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 17:20:08][350011602066618][5135 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-24 17:20:08][350011602066618][5135 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-24 17:20:08][350011602066618][5135 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 17:20:12][355285773207673][0 ms][INFO] === Request start === [2025-08-24 17:20:12][355285773207673][1 ms][DEBUG] START check_scloud [2025-08-24 17:20:12][355285773207673][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:20:12][355285773207673][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 22581 4969 24983372 230048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:20:12][355285773207673][303 ms][DEBUG] targetPkg: running [2025-08-24 17:20:12][355285773207673][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-24 17:20:12][355285773207673][303 ms][DEBUG] START check_boot_completed [2025-08-24 17:20:12][355285773207673][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:20:12][355285773207673][350 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 17:20:12][355285773207673][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:20:12][355285773207673][412 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 17:20:12][355285773207673][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 17:20:12][355285773207673][412 ms][DEBUG] START check_internet [2025-08-24 17:20:12][355285773207673][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 17:20:13][355285773207673][709 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.160/141.160/141.160/0.000 ms\n [2025-08-24 17:20:13][355285773207673][710 ms][DEBUG] check_internet: online [2025-08-24 17:20:13][355285773207673][710 ms][DEBUG] END check_internet in 297 ms [2025-08-24 17:20:13][355285773207673][710 ms][DEBUG] rawBody.length=1149 [2025-08-24 17:20:13][355285773207673][710 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355285773207673\",\"model\":\"SM-A326W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5571\"}'\'' -e'"" [2025-08-24 17:20:13][355285773207673][710 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:20:13][355285773207673][710 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355285773207673\",\"model\":\"SM-A326W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5571\"}'\'' -e'"" [2025-08-24 17:20:19][355285773207673][6989 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_702e55bf-8d84-417a-9349-b09fcd112634","id":"QR_702e55bf-8d84-417a-9349-b09fcd112634","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 17:20:19][355285773207673][7145 ms][DEBUG] proc_open done in 6435 ms; code=255; res.len=3343 [2025-08-24 17:20:19][355285773207673][7145 ms][DEBUG] END runCmdUntilRes#1 in 6435 ms [2025-08-24 17:20:19][355285773207673][7145 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 17:27:03][352927941133876][0 ms][INFO] === Request start === [2025-08-24 17:27:03][352927941133876][1 ms][DEBUG] START check_scloud [2025-08-24 17:27:03][352927941133876][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:27:04][352927941133876][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 22581 4969 25108420 237792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:27:04][352927941133876][321 ms][DEBUG] targetPkg: running [2025-08-24 17:27:04][352927941133876][321 ms][DEBUG] END check_scloud in 320 ms [2025-08-24 17:27:04][352927941133876][321 ms][DEBUG] START check_boot_completed [2025-08-24 17:27:04][352927941133876][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:27:04][352927941133876][352 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 17:27:04][352927941133876][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:27:04][352927941133876][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 17:27:04][352927941133876][399 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 17:27:04][352927941133876][399 ms][DEBUG] rawBody.length=1148 [2025-08-24 17:27:04][352927941133876][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927941133876\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4216\"}'\'' -e'"" [2025-08-24 17:27:04][352927941133876][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:27:04][352927941133876][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927941133876\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4216\"}'\'' -e'"" [2025-08-24 17:27:12][352927941133876][8475 ms][DEBUG] proc_open done in 8076 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 17:27:12][352927941133876][8475 ms][DEBUG] END runCmdUntilRes#1 in 8076 ms [2025-08-24 17:27:12][352927941133876][8475 ms][WARN] Detected error: Process with pid 22581 either refused to load frida-agent, or terminated during injection [2025-08-24 17:27:12][352927941133876][8475 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 17:27:12][352927941133876][8631 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 17:27:12][352927941133876][8632 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 17:27:12][352927941133876][8632 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 17:27:12][352927941133876][8882 ms][DEBUG] SU: done in 250 ms; out [2025-08-24 17:27:12][352927941133876][8882 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 17:27:12][352927941133876][9116 ms][DEBUG] SU: done in 234 ms; out [2025-08-24 17:27:14][352927941133876][11131 ms][DEBUG] START check_boot_completed [2025-08-24 17:27:14][352927941133876][11131 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:27:14][352927941133876][11178 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 17:27:14][352927941133876][11178 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:27:14][352927941133876][11240 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 17:27:14][352927941133876][11240 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 17:27:17][352927941133876][14255 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 17:27:17][352927941133876][14255 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927941133876\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4216\"}'\'' -e'"" [2025-08-24 17:27:19][352927941133876][15786 ms][DEBUG] proc_open done in 1531 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-24 17:27:19][352927941133876][15786 ms][DEBUG] END runCmdUntilRes#2 in 1531 ms [2025-08-24 17:27:19][352927941133876][15786 ms][WARN] Detected error 2; Reboot the device [2025-08-24 17:27:19][352927941133876][15786 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-24 17:27:20][352927941133876][16364 ms][DEBUG] SU: done in 578 ms; out [2025-08-24 17:28:03][352927941133876][0 ms][INFO] === Request start === [2025-08-24 17:28:03][352927941133876][1 ms][DEBUG] START check_scloud [2025-08-24 17:28:03][352927941133876][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:28:03][352927941133876][29 ms][DEBUG] SU: done in 28 ms; out [2025-08-24 17:28:03][352927941133876][29 ms][WARN] targetPkg: not running, restarting [2025-08-24 17:28:03][352927941133876][29 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 17:28:03][352927941133876][60 ms][DEBUG] SU: done in 31 ms; out [2025-08-24 17:28:03][352927941133876][60 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 17:28:03][352927941133876][91 ms][DEBUG] SU: done in 31 ms; out [2025-08-24 17:28:05][352927941133876][2106 ms][DEBUG] END check_scloud in 2106 ms [2025-08-24 17:28:05][352927941133876][2106 ms][DEBUG] START check_boot_completed [2025-08-24 17:28:05][352927941133876][2106 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:28:20][352927941133876][17375 ms][DEBUG] ADB: done in 15269 ms; out [2025-08-24 17:28:20][352927941133876][17375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:28:21][352927941133876][17532 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 17:28:21][352927941133876][17532 ms][DEBUG] END check_boot_completed in 15425 ms [2025-08-24 17:28:21][352927941133876][17532 ms][DEBUG] START check_internet [2025-08-24 17:28:21][352927941133876][17532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 17:28:21][352927941133876][17672 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 17:28:21][352927941133876][17672 ms][WARN] check_internet: offline [2025-08-24 17:28:21][352927941133876][17672 ms][DEBUG] END check_internet in 140 ms [2025-08-24 17:29:03][352927941133876][0 ms][INFO] === Request start === [2025-08-24 17:29:03][352927941133876][1 ms][DEBUG] START check_scloud [2025-08-24 17:29:03][352927941133876][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:29:03][352927941133876][377 ms][DEBUG] SU: done in 376 ms; out [2025-08-24 17:29:03][352927941133876][377 ms][WARN] targetPkg: not running, restarting [2025-08-24 17:29:03][352927941133876][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 17:29:03][352927941133876][548 ms][DEBUG] SU: done in 171 ms; out [2025-08-24 17:29:03][352927941133876][548 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 17:29:04][352927941133876][782 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 17:29:06][352927941133876][2797 ms][DEBUG] END check_scloud in 2797 ms [2025-08-24 17:29:06][352927941133876][2797 ms][DEBUG] START check_boot_completed [2025-08-24 17:29:06][352927941133876][2797 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:29:06][352927941133876][2844 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 17:29:06][352927941133876][2844 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:29:06][352927941133876][2907 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 17:29:06][352927941133876][2907 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 17:29:06][352927941133876][2907 ms][DEBUG] rawBody.length=1148 [2025-08-24 17:29:06][352927941133876][2907 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927941133876\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2345\"}'\'' -e'"" [2025-08-24 17:29:06][352927941133876][2907 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:29:06][352927941133876][2907 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927941133876\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2345\"}'\'' -e'"" [2025-08-24 17:29:13][352927941133876][9889 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6bdc90ed-8984-45d3-85e3-61320911b85e","id":"QR_6bdc90ed-8984-45d3-85e3-61320911b85e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 17:29:13][352927941133876][10046 ms][DEBUG] proc_open done in 7139 ms; code=255; res.len=3343 [2025-08-24 17:29:13][352927941133876][10046 ms][DEBUG] END runCmdUntilRes#1 in 7139 ms [2025-08-24 17:29:13][352927941133876][10046 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 17:32:03][350178739946283][1 ms][INFO] === Request start === [2025-08-24 17:32:03][350178739946283][1 ms][DEBUG] START check_scloud [2025-08-24 17:32:03][350178739946283][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:32:03][350178739946283][336 ms][DEBUG] SU: done in 335 ms; outu0_a118 11815 4973 23716592 73160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:32:03][350178739946283][336 ms][DEBUG] targetPkg: running [2025-08-24 17:32:03][350178739946283][336 ms][DEBUG] END check_scloud in 335 ms [2025-08-24 17:32:03][350178739946283][336 ms][DEBUG] START check_boot_completed [2025-08-24 17:32:03][350178739946283][336 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:32:03][350178739946283][383 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 17:32:03][350178739946283][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:32:03][350178739946283][445 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 17:32:03][350178739946283][445 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 17:32:03][350178739946283][445 ms][DEBUG] START check_internet [2025-08-24 17:32:03][350178739946283][446 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 17:32:03][350178739946283][867 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.534/202.534/202.534/0.000 ms\n [2025-08-24 17:32:03][350178739946283][867 ms][DEBUG] check_internet: online [2025-08-24 17:32:03][350178739946283][867 ms][DEBUG] END check_internet in 422 ms [2025-08-24 17:32:03][350178739946283][867 ms][DEBUG] rawBody.length=1148 [2025-08-24 17:32:03][350178739946283][867 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178739946283\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5986\"}'\'' -e'"" [2025-08-24 17:32:03][350178739946283][867 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:32:03][350178739946283][867 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178739946283\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5986\"}'\'' -e'"" [2025-08-24 17:32:08][350178739946283][5803 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6115ba47-0ce1-4c50-a6ea-049d77d3893c","id":"QR_6115ba47-0ce1-4c50-a6ea-049d77d3893c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 17:32:09][350178739946283][5959 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-08-24 17:32:09][350178739946283][5960 ms][DEBUG] END runCmdUntilRes#1 in 5093 ms [2025-08-24 17:32:09][350178739946283][5960 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 17:37:03][353170568951952][1 ms][INFO] === Request start === [2025-08-24 17:37:03][353170568951952][1 ms][DEBUG] START check_scloud [2025-08-24 17:37:03][353170568951952][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:37:03][353170568951952][275 ms][DEBUG] SU: done in 273 ms; outu0_a118 11815 4973 23840532 88284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:37:03][353170568951952][275 ms][DEBUG] targetPkg: running [2025-08-24 17:37:03][353170568951952][275 ms][DEBUG] END check_scloud in 274 ms [2025-08-24 17:37:03][353170568951952][275 ms][DEBUG] START check_boot_completed [2025-08-24 17:37:03][353170568951952][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:37:03][353170568951952][321 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 17:37:03][353170568951952][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:37:03][353170568951952][368 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 17:37:03][353170568951952][368 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 17:37:03][353170568951952][368 ms][DEBUG] rawBody.length=1148 [2025-08-24 17:37:03][353170568951952][368 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353170568951952\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7607\"}'\'' -e'"" [2025-08-24 17:37:03][353170568951952][368 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:37:03][353170568951952][368 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353170568951952\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7607\"}'\'' -e'"" [2025-08-24 17:37:08][353170568951952][4805 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_30005cb0-880e-4745-b50e-f113bd2f0bf4","id":"QR_30005cb0-880e-4745-b50e-f113bd2f0bf4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 17:37:08][353170568951952][4961 ms][DEBUG] proc_open done in 4593 ms; code=255; res.len=3343 [2025-08-24 17:37:08][353170568951952][4961 ms][DEBUG] END runCmdUntilRes#1 in 4593 ms [2025-08-24 17:37:08][353170568951952][4961 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 17:39:03][350518496955623][1 ms][INFO] === Request start === [2025-08-24 17:39:03][350518496955623][1 ms][DEBUG] START check_scloud [2025-08-24 17:39:03][350518496955623][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:39:03][350518496955623][323 ms][DEBUG] SU: done in 321 ms; outu0_a118 11815 4973 23956408 99556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:39:03][350518496955623][323 ms][DEBUG] targetPkg: running [2025-08-24 17:39:03][350518496955623][323 ms][DEBUG] END check_scloud in 322 ms [2025-08-24 17:39:03][350518496955623][323 ms][DEBUG] START check_boot_completed [2025-08-24 17:39:03][350518496955623][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:39:03][350518496955623][370 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 17:39:03][350518496955623][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:39:03][350518496955623][418 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 17:39:03][350518496955623][418 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 17:39:03][350518496955623][418 ms][DEBUG] rawBody.length=1148 [2025-08-24 17:39:03][350518496955623][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350518496955623\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7722\"}'\'' -e'"" [2025-08-24 17:39:03][350518496955623][418 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:39:03][350518496955623][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350518496955623\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7722\"}'\'' -e'"" [2025-08-24 17:39:07][350518496955623][4353 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_849c6e1e-9c07-4fd9-a528-557316baf72e","id":"QR_849c6e1e-9c07-4fd9-a528-557316baf72e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 17:39:07][350518496955623][4509 ms][DEBUG] proc_open done in 4091 ms; code=255; res.len=3343 [2025-08-24 17:39:07][350518496955623][4509 ms][DEBUG] END runCmdUntilRes#1 in 4091 ms [2025-08-24 17:39:07][350518496955623][4509 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 17:39:10][353684143743924][0 ms][INFO] === Request start === [2025-08-24 17:39:10][353684143743924][1 ms][DEBUG] START check_scloud [2025-08-24 17:39:10][353684143743924][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:39:10][353684143743924][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 11815 4973 24127488 111112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:39:10][353684143743924][312 ms][DEBUG] targetPkg: running [2025-08-24 17:39:10][353684143743924][312 ms][DEBUG] END check_scloud in 312 ms [2025-08-24 17:39:10][353684143743924][312 ms][DEBUG] START check_boot_completed [2025-08-24 17:39:10][353684143743924][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:39:10][353684143743924][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 17:39:10][353684143743924][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:39:10][353684143743924][407 ms][DEBUG] SU: done in 49 ms; out [2025-08-24 17:39:10][353684143743924][407 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 17:39:10][353684143743924][407 ms][DEBUG] rawBody.length=1148 [2025-08-24 17:39:10][353684143743924][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684143743924\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7302\"}'\'' -e'"" [2025-08-24 17:39:10][353684143743924][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:39:10][353684143743924][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684143743924\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7302\"}'\'' -e'"" [2025-08-24 17:39:14][353684143743924][4404 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_510110ef-b6a1-4035-b471-792c20425109","id":"QR_510110ef-b6a1-4035-b471-792c20425109","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 17:39:14][353684143743924][4561 ms][DEBUG] proc_open done in 4153 ms; code=255; res.len=3343 [2025-08-24 17:39:14][353684143743924][4561 ms][DEBUG] END runCmdUntilRes#1 in 4153 ms [2025-08-24 17:39:14][353684143743924][4561 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 17:41:05][350655881847146][0 ms][INFO] === Request start === [2025-08-24 17:41:05][350655881847146][0 ms][DEBUG] START check_scloud [2025-08-24 17:41:05][350655881847146][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:41:05][350655881847146][293 ms][DEBUG] SU: done in 293 ms; outu0_a118 11815 4973 24275840 121768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:41:05][350655881847146][293 ms][DEBUG] targetPkg: running [2025-08-24 17:41:05][350655881847146][293 ms][DEBUG] END check_scloud in 293 ms [2025-08-24 17:41:05][350655881847146][293 ms][DEBUG] START check_boot_completed [2025-08-24 17:41:05][350655881847146][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:41:05][350655881847146][338 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 17:41:05][350655881847146][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:41:05][350655881847146][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 17:41:05][350655881847146][385 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-24 17:41:05][350655881847146][385 ms][DEBUG] rawBody.length=1149 [2025-08-24 17:41:05][350655881847146][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350655881847146\",\"model\":\"SM-A156W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2873\"}'\'' -e'"" [2025-08-24 17:41:05][350655881847146][385 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:41:05][350655881847146][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350655881847146\",\"model\":\"SM-A156W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2873\"}'\'' -e'"" [2025-08-24 17:41:11][350655881847146][6305 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4e7dac2b-d1db-4590-acb9-b1a491bdc677","id":"QR_4e7dac2b-d1db-4590-acb9-b1a491bdc677","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 17:41:11][350655881847146][6461 ms][DEBUG] proc_open done in 6076 ms; code=255; res.len=3343 [2025-08-24 17:41:11][350655881847146][6461 ms][DEBUG] END runCmdUntilRes#1 in 6076 ms [2025-08-24 17:41:11][350655881847146][6461 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 17:41:18][352042195830274][0 ms][INFO] === Request start === [2025-08-24 17:41:18][352042195830274][1 ms][DEBUG] START check_scloud [2025-08-24 17:41:18][352042195830274][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:41:18][352042195830274][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 11815 4973 24395912 133396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:41:18][352042195830274][317 ms][DEBUG] targetPkg: running [2025-08-24 17:41:18][352042195830274][317 ms][DEBUG] END check_scloud in 317 ms [2025-08-24 17:41:18][352042195830274][317 ms][DEBUG] START check_boot_completed [2025-08-24 17:41:18][352042195830274][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:41:18][352042195830274][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 17:41:18][352042195830274][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:41:18][352042195830274][426 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 17:41:18][352042195830274][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 17:41:18][352042195830274][426 ms][DEBUG] rawBody.length=1149 [2025-08-24 17:41:18][352042195830274][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042195830274\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9950\"}'\'' -e'"" [2025-08-24 17:41:18][352042195830274][426 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:41:18][352042195830274][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042195830274\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9950\"}'\'' -e'"" [2025-08-24 17:41:24][352042195830274][5878 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f786ff56-79b8-4dfe-a77b-c43d217acc99","id":"QR_f786ff56-79b8-4dfe-a77b-c43d217acc99","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 17:41:24][352042195830274][6034 ms][DEBUG] proc_open done in 5608 ms; code=255; res.len=3343 [2025-08-24 17:41:24][352042195830274][6034 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-08-24 17:41:24][352042195830274][6035 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 17:42:03][350814490738747][0 ms][INFO] === Request start === [2025-08-24 17:42:03][350814490738747][1 ms][DEBUG] START check_scloud [2025-08-24 17:42:03][350814490738747][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:42:03][350814490738747][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 11815 4973 24536264 144648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:42:03][350814490738747][273 ms][DEBUG] targetPkg: running [2025-08-24 17:42:03][350814490738747][273 ms][DEBUG] END check_scloud in 273 ms [2025-08-24 17:42:03][350814490738747][273 ms][DEBUG] START check_boot_completed [2025-08-24 17:42:03][350814490738747][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:42:04][350814490738747][320 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 17:42:04][350814490738747][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:42:04][350814490738747][367 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 17:42:04][350814490738747][367 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 17:42:04][350814490738747][367 ms][DEBUG] START check_internet [2025-08-24 17:42:04][350814490738747][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 17:42:04][350814490738747][867 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.918/202.918/202.918/0.000 ms\n [2025-08-24 17:42:04][350814490738747][867 ms][DEBUG] check_internet: online [2025-08-24 17:42:04][350814490738747][867 ms][DEBUG] END check_internet in 501 ms [2025-08-24 17:42:04][350814490738747][867 ms][DEBUG] rawBody.length=1148 [2025-08-24 17:42:04][350814490738747][867 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814490738747\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1514\"}'\'' -e'"" [2025-08-24 17:42:04][350814490738747][867 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:42:04][350814490738747][868 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814490738747\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1514\"}'\'' -e'"" [2025-08-24 17:42:08][350814490738747][5147 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f172be5f-176b-4115-81a9-21ebb2ca9297","id":"QR_f172be5f-176b-4115-81a9-21ebb2ca9297","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 17:42:08][350814490738747][5303 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-08-24 17:42:08][350814490738747][5303 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-08-24 17:42:08][350814490738747][5303 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 17:43:02][353310805122799][1 ms][INFO] === Request start === [2025-08-24 17:43:02][353310805122799][1 ms][DEBUG] START check_scloud [2025-08-24 17:43:02][353310805122799][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:43:02][353310805122799][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 11815 4973 24680748 155548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:43:02][353310805122799][293 ms][DEBUG] targetPkg: running [2025-08-24 17:43:02][353310805122799][293 ms][DEBUG] END check_scloud in 292 ms [2025-08-24 17:43:02][353310805122799][293 ms][DEBUG] START check_boot_completed [2025-08-24 17:43:02][353310805122799][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:43:02][353310805122799][340 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 17:43:02][353310805122799][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:43:02][353310805122799][388 ms][DEBUG] SU: done in 49 ms; out [2025-08-24 17:43:02][353310805122799][388 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 17:43:02][353310805122799][388 ms][DEBUG] rawBody.length=1148 [2025-08-24 17:43:02][353310805122799][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310805122799\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9743\"}'\'' -e'"" [2025-08-24 17:43:02][353310805122799][389 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:43:02][353310805122799][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310805122799\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9743\"}'\'' -e'"" [2025-08-24 17:43:06][353310805122799][4323 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b9588c8f-9755-4e30-ba4c-7154abb246f1","id":"QR_b9588c8f-9755-4e30-ba4c-7154abb246f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 17:43:06][353310805122799][4479 ms][DEBUG] proc_open done in 4091 ms; code=255; res.len=3343 [2025-08-24 17:43:06][353310805122799][4479 ms][DEBUG] END runCmdUntilRes#1 in 4091 ms [2025-08-24 17:43:06][353310805122799][4479 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 17:55:04][358975991312548][1 ms][INFO] === Request start === [2025-08-24 17:55:04][358975991312548][1 ms][DEBUG] START check_scloud [2025-08-24 17:55:04][358975991312548][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:55:04][358975991312548][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 11815 4973 24834372 157888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:55:04][358975991312548][307 ms][DEBUG] targetPkg: running [2025-08-24 17:55:04][358975991312548][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-24 17:55:04][358975991312548][307 ms][DEBUG] START check_boot_completed [2025-08-24 17:55:04][358975991312548][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:55:04][358975991312548][338 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 17:55:04][358975991312548][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:55:04][358975991312548][386 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 17:55:04][358975991312548][386 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 17:55:04][358975991312548][386 ms][DEBUG] rawBody.length=1149 [2025-08-24 17:55:04][358975991312548][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358975991312548\",\"model\":\"SM-F721B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1655\"}'\'' -e'"" [2025-08-24 17:55:04][358975991312548][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:55:04][358975991312548][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358975991312548\",\"model\":\"SM-F721B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1655\"}'\'' -e'"" [2025-08-24 17:55:09][358975991312548][5712 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0f6f9c4f-af1d-4674-bb08-991147ef94ab","id":"QR_0f6f9c4f-af1d-4674-bb08-991147ef94ab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 17:55:10][358975991312548][5868 ms][DEBUG] proc_open done in 5482 ms; code=255; res.len=3343 [2025-08-24 17:55:10][358975991312548][5868 ms][DEBUG] END runCmdUntilRes#1 in 5482 ms [2025-08-24 17:55:10][358975991312548][5868 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 17:58:05][350471129008917][1 ms][INFO] === Request start === [2025-08-24 17:58:05][350471129008917][1 ms][DEBUG] START check_scloud [2025-08-24 17:58:05][350471129008917][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 17:58:05][350471129008917][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 11815 4973 24981940 168248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 17:58:05][350471129008917][321 ms][DEBUG] targetPkg: running [2025-08-24 17:58:05][350471129008917][321 ms][DEBUG] END check_scloud in 320 ms [2025-08-24 17:58:05][350471129008917][321 ms][DEBUG] START check_boot_completed [2025-08-24 17:58:05][350471129008917][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 17:58:05][350471129008917][353 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 17:58:05][350471129008917][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 17:58:05][350471129008917][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 17:58:05][350471129008917][400 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 17:58:05][350471129008917][400 ms][DEBUG] START check_internet [2025-08-24 17:58:05][350471129008917][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 17:58:05][350471129008917][962 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.666/201.666/201.666/0.000 ms\n [2025-08-24 17:58:05][350471129008917][962 ms][DEBUG] check_internet: online [2025-08-24 17:58:05][350471129008917][962 ms][DEBUG] END check_internet in 562 ms [2025-08-24 17:58:05][350471129008917][962 ms][DEBUG] rawBody.length=1149 [2025-08-24 17:58:05][350471129008917][962 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471129008917\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"BVO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1523\"}'\'' -e'"" [2025-08-24 17:58:05][350471129008917][962 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 17:58:05][350471129008917][963 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471129008917\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"BVO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1523\"}'\'' -e'"" [2025-08-24 17:58:11][350471129008917][6320 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a317d0c0-002d-4739-a248-954bb75269cc","id":"QR_a317d0c0-002d-4739-a248-954bb75269cc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 17:58:11][350471129008917][6476 ms][DEBUG] proc_open done in 5513 ms; code=255; res.len=3343 [2025-08-24 17:58:11][350471129008917][6476 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-24 17:58:11][350471129008917][6476 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:04:03][350938288999961][1 ms][INFO] === Request start === [2025-08-24 18:04:03][350938288999961][1 ms][DEBUG] START check_scloud [2025-08-24 18:04:03][350938288999961][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:04:04][350938288999961][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 11815 4973 25124376 178676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:04:04][350938288999961][308 ms][DEBUG] targetPkg: running [2025-08-24 18:04:04][350938288999961][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-24 18:04:04][350938288999961][308 ms][DEBUG] START check_boot_completed [2025-08-24 18:04:04][350938288999961][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:04:04][350938288999961][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 18:04:04][350938288999961][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:04:04][350938288999961][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 18:04:04][350938288999961][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 18:04:04][350938288999961][387 ms][DEBUG] START check_internet [2025-08-24 18:04:04][350938288999961][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 18:04:04][350938288999961][918 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.605/202.605/202.605/0.000 ms\n [2025-08-24 18:04:04][350938288999961][918 ms][DEBUG] check_internet: online [2025-08-24 18:04:04][350938288999961][918 ms][DEBUG] END check_internet in 531 ms [2025-08-24 18:04:04][350938288999961][918 ms][DEBUG] rawBody.length=1148 [2025-08-24 18:04:04][350938288999961][918 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938288999961\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3348\"}'\'' -e'"" [2025-08-24 18:04:04][350938288999961][918 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:04:04][350938288999961][918 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938288999961\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3348\"}'\'' -e'"" [2025-08-24 18:04:09][350938288999961][5854 ms][DEBUG] proc_open done in 4935 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 18:04:09][350938288999961][5854 ms][DEBUG] END runCmdUntilRes#1 in 4936 ms [2025-08-24 18:04:09][350938288999961][5854 ms][WARN] Detected error: Process with pid 11815 either refused to load frida-agent, or terminated during injection [2025-08-24 18:04:09][350938288999961][5854 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 18:04:09][350938288999961][5995 ms][DEBUG] SU: done in 141 ms; out [2025-08-24 18:04:09][350938288999961][5995 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 18:04:09][350938288999961][5995 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 18:04:09][350938288999961][6135 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 18:04:09][350938288999961][6135 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 18:04:10][350938288999961][6293 ms][DEBUG] SU: done in 157 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 18:04:12][350938288999961][8306 ms][DEBUG] START check_boot_completed [2025-08-24 18:04:12][350938288999961][8307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:04:12][350938288999961][8353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 18:04:12][350938288999961][8354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:04:12][350938288999961][8416 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 18:04:12][350938288999961][8416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 18:04:15][350938288999961][11431 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 18:04:15][350938288999961][11431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938288999961\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3348\"}'\'' -e'"" [2025-08-24 18:04:19][350938288999961][15820 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f056aae6-d674-4c89-94f3-4e4728962175","id":"QR_f056aae6-d674-4c89-94f3-4e4728962175","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:04:19][350938288999961][15977 ms][DEBUG] proc_open done in 4546 ms; code=255; res.len=3343 [2025-08-24 18:04:19][350938288999961][15977 ms][DEBUG] END runCmdUntilRes#2 in 4546 ms [2025-08-24 18:04:19][350938288999961][15977 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:07:31][357576780102198][1 ms][INFO] === Request start === [2025-08-24 18:07:31][357576780102198][1 ms][DEBUG] START check_scloud [2025-08-24 18:07:31][357576780102198][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:07:31][357576780102198][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 18997 4973 23766464 127708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:07:31][357576780102198][317 ms][DEBUG] targetPkg: running [2025-08-24 18:07:31][357576780102198][317 ms][DEBUG] END check_scloud in 315 ms [2025-08-24 18:07:31][357576780102198][317 ms][DEBUG] START check_boot_completed [2025-08-24 18:07:31][357576780102198][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:07:31][357576780102198][347 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 18:07:31][357576780102198][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:07:31][357576780102198][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 18:07:31][357576780102198][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 18:07:31][357576780102198][395 ms][DEBUG] rawBody.length=1149 [2025-08-24 18:07:31][357576780102198][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576780102198\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3188\"}'\'' -e'"" [2025-08-24 18:07:31][357576780102198][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:07:31][357576780102198][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576780102198\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3188\"}'\'' -e'"" [2025-08-24 18:07:38][357576780102198][7830 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_895f874b-c1a9-4888-b350-dd2a7f16dd0f","id":"QR_895f874b-c1a9-4888-b350-dd2a7f16dd0f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:07:39][357576780102198][7986 ms][DEBUG] proc_open done in 7591 ms; code=255; res.len=3343 [2025-08-24 18:07:39][357576780102198][7986 ms][DEBUG] END runCmdUntilRes#1 in 7591 ms [2025-08-24 18:07:39][357576780102198][7986 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:08:05][355139240672722][0 ms][INFO] === Request start === [2025-08-24 18:08:05][355139240672722][1 ms][DEBUG] START check_scloud [2025-08-24 18:08:05][355139240672722][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:08:05][355139240672722][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 18997 4973 23886180 138332 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:08:05][355139240672722][268 ms][DEBUG] targetPkg: running [2025-08-24 18:08:05][355139240672722][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-24 18:08:05][355139240672722][268 ms][DEBUG] START check_boot_completed [2025-08-24 18:08:05][355139240672722][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:08:05][355139240672722][315 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 18:08:05][355139240672722][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:08:05][355139240672722][393 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 18:08:05][355139240672722][393 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-24 18:08:05][355139240672722][393 ms][DEBUG] START check_internet [2025-08-24 18:08:05][355139240672722][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 18:08:06][355139240672722][736 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=249 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 249.703/249.703/249.703/0.000 ms\n [2025-08-24 18:08:06][355139240672722][737 ms][DEBUG] check_internet: online [2025-08-24 18:08:06][355139240672722][737 ms][DEBUG] END check_internet in 344 ms [2025-08-24 18:08:06][355139240672722][737 ms][DEBUG] rawBody.length=1149 [2025-08-24 18:08:06][355139240672722][737 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355139240672722\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2589\"}'\'' -e'"" [2025-08-24 18:08:06][355139240672722][737 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:08:06][355139240672722][737 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355139240672722\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2589\"}'\'' -e'"" [2025-08-24 18:08:11][355139240672722][5782 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7438657a-0085-4315-bcea-a1d26df3dc67","id":"QR_7438657a-0085-4315-bcea-a1d26df3dc67","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:08:11][355139240672722][5938 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-08-24 18:08:11][355139240672722][5938 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-08-24 18:08:11][355139240672722][5938 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:09:03][350938282796645][1 ms][INFO] === Request start === [2025-08-24 18:09:03][350938282796645][1 ms][DEBUG] START check_scloud [2025-08-24 18:09:03][350938282796645][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:09:04][350938282796645][296 ms][DEBUG] SU: done in 294 ms; outu0_a118 18997 4973 24022536 149748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:09:04][350938282796645][296 ms][DEBUG] targetPkg: running [2025-08-24 18:09:04][350938282796645][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-24 18:09:04][350938282796645][296 ms][DEBUG] START check_boot_completed [2025-08-24 18:09:04][350938282796645][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:09:04][350938282796645][342 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 18:09:04][350938282796645][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:09:04][350938282796645][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 18:09:04][350938282796645][389 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 18:09:04][350938282796645][389 ms][DEBUG] rawBody.length=1148 [2025-08-24 18:09:04][350938282796645][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938282796645\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4093\"}'\'' -e'"" [2025-08-24 18:09:04][350938282796645][389 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:09:04][350938282796645][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938282796645\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4093\"}'\'' -e'"" [2025-08-24 18:09:08][350938282796645][4591 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_42040d6b-0ddd-4c70-98d4-13c6d87d7300","id":"QR_42040d6b-0ddd-4c70-98d4-13c6d87d7300","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:09:08][350938282796645][4748 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3343 [2025-08-24 18:09:08][350938282796645][4748 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-24 18:09:08][350938282796645][4748 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:11:03][352375450592357][0 ms][INFO] === Request start === [2025-08-24 18:11:03][352375450592357][1 ms][DEBUG] START check_scloud [2025-08-24 18:11:03][352375450592357][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:11:04][352375450592357][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 18997 4973 24142508 160764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:11:04][352375450592357][305 ms][DEBUG] targetPkg: running [2025-08-24 18:11:04][352375450592357][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-24 18:11:04][352375450592357][305 ms][DEBUG] START check_boot_completed [2025-08-24 18:11:04][352375450592357][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:11:04][352375450592357][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 18:11:04][352375450592357][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:11:04][352375450592357][445 ms][DEBUG] SU: done in 94 ms; out [2025-08-24 18:11:04][352375450592357][445 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-24 18:11:04][352375450592357][445 ms][DEBUG] rawBody.length=1148 [2025-08-24 18:11:04][352375450592357][445 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352375450592357\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9876\"}'\'' -e'"" [2025-08-24 18:11:04][352375450592357][446 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:11:04][352375450592357][446 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352375450592357\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9876\"}'\'' -e'"" [2025-08-24 18:11:08][352375450592357][5163 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8dc1ded7-bdce-45d1-bf8d-b0038ca09eee","id":"QR_8dc1ded7-bdce-45d1-bf8d-b0038ca09eee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:11:09][352375450592357][5319 ms][DEBUG] proc_open done in 4873 ms; code=255; res.len=3343 [2025-08-24 18:11:09][352375450592357][5319 ms][DEBUG] END runCmdUntilRes#1 in 4874 ms [2025-08-24 18:11:09][352375450592357][5320 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:11:13][353600815946801][1 ms][INFO] === Request start === [2025-08-24 18:11:13][353600815946801][1 ms][DEBUG] START check_scloud [2025-08-24 18:11:13][353600815946801][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:11:13][353600815946801][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 18997 4973 24321716 171268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:11:13][353600815946801][252 ms][DEBUG] targetPkg: running [2025-08-24 18:11:13][353600815946801][252 ms][DEBUG] END check_scloud in 251 ms [2025-08-24 18:11:13][353600815946801][252 ms][DEBUG] START check_boot_completed [2025-08-24 18:11:13][353600815946801][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:11:13][353600815946801][298 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 18:11:13][353600815946801][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:11:13][353600815946801][345 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 18:11:13][353600815946801][345 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 18:11:13][353600815946801][345 ms][DEBUG] rawBody.length=1149 [2025-08-24 18:11:13][353600815946801][345 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600815946801\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9245\"}'\'' -e'"" [2025-08-24 18:11:13][353600815946801][345 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:11:13][353600815946801][345 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600815946801\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9245\"}'\'' -e'"" [2025-08-24 18:11:20][353600815946801][7484 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cc2ef6bb-080e-4693-aa2b-cef59ef3420c","id":"QR_cc2ef6bb-080e-4693-aa2b-cef59ef3420c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:11:21][353600815946801][7640 ms][DEBUG] proc_open done in 7295 ms; code=255; res.len=3343 [2025-08-24 18:11:21][353600815946801][7640 ms][DEBUG] END runCmdUntilRes#1 in 7295 ms [2025-08-24 18:11:21][353600815946801][7640 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:12:03][351684400268393][0 ms][INFO] === Request start === [2025-08-24 18:12:03][351684400268393][1 ms][DEBUG] START check_scloud [2025-08-24 18:12:03][351684400268393][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:12:03][351684400268393][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 18997 4973 24427316 183232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:12:03][351684400268393][300 ms][DEBUG] targetPkg: running [2025-08-24 18:12:03][351684400268393][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-24 18:12:03][351684400268393][300 ms][DEBUG] START check_boot_completed [2025-08-24 18:12:03][351684400268393][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:12:03][351684400268393][330 ms][DEBUG] ADB: done in 30 ms; out [2025-08-24 18:12:03][351684400268393][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:12:03][351684400268393][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 18:12:03][351684400268393][377 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-24 18:12:03][351684400268393][377 ms][DEBUG] START check_internet [2025-08-24 18:12:03][351684400268393][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 18:12:04][351684400268393][1143 ms][DEBUG] SU: done in 766 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=512 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 512.167/512.167/512.167/0.000 ms\n [2025-08-24 18:12:04][351684400268393][1143 ms][DEBUG] check_internet: online [2025-08-24 18:12:04][351684400268393][1143 ms][DEBUG] END check_internet in 766 ms [2025-08-24 18:12:04][351684400268393][1143 ms][DEBUG] rawBody.length=1148 [2025-08-24 18:12:04][351684400268393][1143 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351684400268393\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2152\"}'\'' -e'"" [2025-08-24 18:12:04][351684400268393][1143 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:12:04][351684400268393][1143 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351684400268393\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2152\"}'\'' -e'"" [2025-08-24 18:12:08][351684400268393][5282 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3384fc00-dc33-4808-9142-601761eb9842","id":"QR_3384fc00-dc33-4808-9142-601761eb9842","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:12:08][351684400268393][5438 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-24 18:12:08][351684400268393][5438 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-24 18:12:08][351684400268393][5438 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:12:14][355824558078634][0 ms][INFO] === Request start === [2025-08-24 18:12:14][355824558078634][1 ms][DEBUG] START check_scloud [2025-08-24 18:12:14][355824558078634][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:12:15][355824558078634][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 18997 4973 24555452 194384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:12:15][355824558078634][313 ms][DEBUG] targetPkg: running [2025-08-24 18:12:15][355824558078634][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-24 18:12:15][355824558078634][313 ms][DEBUG] START check_boot_completed [2025-08-24 18:12:15][355824558078634][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:12:15][355824558078634][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 18:12:15][355824558078634][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:12:15][355824558078634][422 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 18:12:15][355824558078634][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 18:12:15][355824558078634][422 ms][DEBUG] START check_internet [2025-08-24 18:12:15][355824558078634][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 18:12:15][355824558078634][828 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=294 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 294.982/294.982/294.982/0.000 ms\n [2025-08-24 18:12:15][355824558078634][829 ms][DEBUG] check_internet: online [2025-08-24 18:12:15][355824558078634][829 ms][DEBUG] END check_internet in 406 ms [2025-08-24 18:12:15][355824558078634][829 ms][DEBUG] rawBody.length=1149 [2025-08-24 18:12:15][355824558078634][829 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824558078634\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3941\"}'\'' -e'"" [2025-08-24 18:12:15][355824558078634][829 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:12:15][355824558078634][829 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824558078634\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3941\"}'\'' -e'"" [2025-08-24 18:12:22][355824558078634][7827 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 18:12:22][355824558078634][7983 ms][DEBUG] proc_open done in 7154 ms; code=255; res.len=107 [2025-08-24 18:12:22][355824558078634][7983 ms][DEBUG] END runCmdUntilRes#1 in 7154 ms [2025-08-24 18:12:22][355824558078634][7983 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 18:12:23][][0 ms][INFO] === Request start === [2025-08-24 18:12:23][][1 ms][DEBUG] START check_scloud [2025-08-24 18:12:23][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:12:23][][317 ms][DEBUG] SU: done in 317 ms; outu0_a118 18997 4973 24734788 206128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:12:23][][318 ms][DEBUG] targetPkg: running [2025-08-24 18:12:23][][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-24 18:12:23][][318 ms][DEBUG] START check_boot_completed [2025-08-24 18:12:23][][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:12:23][][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 18:12:23][][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:12:23][][412 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 18:12:23][][412 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 18:12:23][][412 ms][DEBUG] START check_internet [2025-08-24 18:12:23][][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 18:12:24][][1005 ms][DEBUG] SU: done in 593 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=450 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 450.004/450.004/450.004/0.000 ms\n [2025-08-24 18:12:24][][1005 ms][DEBUG] check_internet: online [2025-08-24 18:12:24][][1005 ms][DEBUG] END check_internet in 593 ms [2025-08-24 18:12:24][][1005 ms][DEBUG] rawBody.length=1130 [2025-08-24 18:12:24][][1005 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8XA00Q9NJ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5649\"}'\'' -e'"" [2025-08-24 18:12:24][][1005 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:12:24][][1005 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8XA00Q9NJ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5649\"}'\'' -e'"" [2025-08-24 18:12:28][][5441 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 18:12:28][][5597 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=107 [2025-08-24 18:12:28][][5597 ms][DEBUG] END runCmdUntilRes#1 in 4593 ms [2025-08-24 18:12:28][][5597 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 18:12:29][355824558078634][0 ms][INFO] === Request start === [2025-08-24 18:12:29][355824558078634][1 ms][DEBUG] START check_scloud [2025-08-24 18:12:29][355824558078634][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:12:29][355824558078634][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 18997 4973 24856872 216888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:12:29][355824558078634][311 ms][DEBUG] targetPkg: running [2025-08-24 18:12:29][355824558078634][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-24 18:12:29][355824558078634][311 ms][DEBUG] START check_boot_completed [2025-08-24 18:12:29][355824558078634][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:12:29][355824558078634][357 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 18:12:29][355824558078634][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:12:30][355824558078634][406 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 18:12:30][355824558078634][406 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 18:12:30][355824558078634][406 ms][DEBUG] START check_internet [2025-08-24 18:12:30][355824558078634][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 18:12:30][355824558078634][1154 ms][DEBUG] SU: done in 748 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=633 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 633.415/633.415/633.415/0.000 ms\n [2025-08-24 18:12:30][355824558078634][1154 ms][DEBUG] check_internet: online [2025-08-24 18:12:30][355824558078634][1154 ms][DEBUG] END check_internet in 748 ms [2025-08-24 18:12:30][355824558078634][1154 ms][DEBUG] rawBody.length=1148 [2025-08-24 18:12:30][355824558078634][1154 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824558078634\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8014\"}'\'' -e'"" [2025-08-24 18:12:30][355824558078634][1154 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:12:30][355824558078634][1154 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824558078634\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8014\"}'\'' -e'"" [2025-08-24 18:13:06][355824558078634][1 ms][INFO] === Request start === [2025-08-24 18:13:06][355824558078634][1 ms][DEBUG] START check_scloud [2025-08-24 18:13:06][355824558078634][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:13:06][355824558078634][308 ms][DEBUG] SU: done in 307 ms; out [2025-08-24 18:13:06][355824558078634][308 ms][WARN] targetPkg: not running, restarting [2025-08-24 18:13:06][355824558078634][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 18:13:06][355824558078634][449 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 18:13:06][355824558078634][449 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 18:13:07][355824558078634][730 ms][DEBUG] SU: done in 281 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 18:13:09][355824558078634][2745 ms][DEBUG] END check_scloud in 2744 ms [2025-08-24 18:13:09][355824558078634][2745 ms][DEBUG] START check_boot_completed [2025-08-24 18:13:09][355824558078634][2745 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:13:09][355824558078634][2776 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 18:13:09][355824558078634][2776 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:13:09][355824558078634][2839 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 18:13:09][355824558078634][2839 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 18:13:09][355824558078634][2839 ms][DEBUG] rawBody.length=1149 [2025-08-24 18:13:09][355824558078634][2839 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824558078634\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7560\"}'\'' -e'"" [2025-08-24 18:13:09][355824558078634][2839 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:13:09][355824558078634][2839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824558078634\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7560\"}'\'' -e'"" [2025-08-24 18:13:19][355824558078634][13117 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 18:13:19][355824558078634][13274 ms][DEBUG] proc_open done in 10435 ms; code=255; res.len=107 [2025-08-24 18:13:19][355824558078634][13274 ms][DEBUG] END runCmdUntilRes#1 in 10435 ms [2025-08-24 18:13:19][355824558078634][13274 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 18:13:20][][0 ms][INFO] === Request start === [2025-08-24 18:13:20][][1 ms][DEBUG] START check_scloud [2025-08-24 18:13:20][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:13:20][][384 ms][DEBUG] SU: done in 384 ms; outu0_a118 22466 20653 23447904 117216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:13:20][][385 ms][DEBUG] targetPkg: running [2025-08-24 18:13:20][][385 ms][DEBUG] END check_scloud in 384 ms [2025-08-24 18:13:20][][385 ms][DEBUG] START check_boot_completed [2025-08-24 18:13:20][][385 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:13:20][][431 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 18:13:20][][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:13:20][][494 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 18:13:20][][494 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 18:13:20][][494 ms][DEBUG] rawBody.length=1130 [2025-08-24 18:13:20][][494 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8XA00Q9NJ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2061\"}'\'' -e'"" [2025-08-24 18:13:20][][494 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:13:20][][494 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8XA00Q9NJ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2061\"}'\'' -e'"" [2025-08-24 18:13:25][][5883 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 18:13:26][][6039 ms][DEBUG] proc_open done in 5545 ms; code=255; res.len=107 [2025-08-24 18:13:26][][6039 ms][DEBUG] END runCmdUntilRes#1 in 5545 ms [2025-08-24 18:13:26][][6039 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 18:13:26][355824558078634][0 ms][INFO] === Request start === [2025-08-24 18:13:26][355824558078634][1 ms][DEBUG] START check_scloud [2025-08-24 18:13:26][355824558078634][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:13:27][355824558078634][342 ms][DEBUG] SU: done in 341 ms; outu0_a118 22466 20653 23594472 103192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:13:27][355824558078634][342 ms][DEBUG] targetPkg: running [2025-08-24 18:13:27][355824558078634][342 ms][DEBUG] END check_scloud in 341 ms [2025-08-24 18:13:27][355824558078634][342 ms][DEBUG] START check_boot_completed [2025-08-24 18:13:27][355824558078634][342 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:13:27][355824558078634][389 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 18:13:27][355824558078634][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:13:27][355824558078634][436 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 18:13:27][355824558078634][436 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 18:13:27][355824558078634][437 ms][DEBUG] rawBody.length=1148 [2025-08-24 18:13:27][355824558078634][437 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824558078634\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7831\"}'\'' -e'"" [2025-08-24 18:13:27][355824558078634][437 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:13:27][355824558078634][437 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824558078634\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7831\"}'\'' -e'"" [2025-08-24 18:13:32][355824558078634][5809 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e814af24-8f09-4b06-8eed-3dcf86879ee7","id":"QR_e814af24-8f09-4b06-8eed-3dcf86879ee7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:13:32][355824558078634][5965 ms][DEBUG] proc_open done in 5528 ms; code=255; res.len=3343 [2025-08-24 18:13:32][355824558078634][5965 ms][DEBUG] END runCmdUntilRes#1 in 5529 ms [2025-08-24 18:13:32][355824558078634][5965 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:14:05][359271103272591][0 ms][INFO] === Request start === [2025-08-24 18:14:05][359271103272591][1 ms][DEBUG] START check_scloud [2025-08-24 18:14:05][359271103272591][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:14:05][359271103272591][407 ms][DEBUG] SU: done in 407 ms; outu0_a118 22466 20653 23655612 66244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:14:05][359271103272591][407 ms][DEBUG] targetPkg: running [2025-08-24 18:14:05][359271103272591][407 ms][DEBUG] END check_scloud in 407 ms [2025-08-24 18:14:05][359271103272591][407 ms][DEBUG] START check_boot_completed [2025-08-24 18:14:05][359271103272591][408 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:14:05][359271103272591][454 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 18:14:05][359271103272591][454 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:14:05][359271103272591][503 ms][DEBUG] SU: done in 49 ms; out [2025-08-24 18:14:05][359271103272591][503 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 18:14:05][359271103272591][503 ms][DEBUG] START check_internet [2025-08-24 18:14:05][359271103272591][503 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 18:14:06][359271103272591][938 ms][DEBUG] SU: done in 436 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.822/142.822/142.822/0.000 ms\n [2025-08-24 18:14:06][359271103272591][939 ms][DEBUG] check_internet: online [2025-08-24 18:14:06][359271103272591][939 ms][DEBUG] END check_internet in 436 ms [2025-08-24 18:14:06][359271103272591][939 ms][DEBUG] rawBody.length=1149 [2025-08-24 18:14:06][359271103272591][939 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359271103272591\",\"model\":\"SM-N975U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4035\"}'\'' -e'"" [2025-08-24 18:14:06][359271103272591][939 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:14:06][359271103272591][939 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359271103272591\",\"model\":\"SM-N975U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4035\"}'\'' -e'"" [2025-08-24 18:14:11][359271103272591][6859 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_74cf7729-e184-40ae-a8cb-ba8f25e028ab","id":"QR_74cf7729-e184-40ae-a8cb-ba8f25e028ab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:14:12][359271103272591][7015 ms][DEBUG] proc_open done in 6076 ms; code=255; res.len=3343 [2025-08-24 18:14:12][359271103272591][7015 ms][DEBUG] END runCmdUntilRes#1 in 6076 ms [2025-08-24 18:14:12][359271103272591][7015 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:15:03][354068196436025][0 ms][INFO] === Request start === [2025-08-24 18:15:03][354068196436025][1 ms][DEBUG] START check_scloud [2025-08-24 18:15:03][354068196436025][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:15:03][354068196436025][357 ms][DEBUG] SU: done in 356 ms; outu0_a118 22466 20653 23777504 74504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:15:03][354068196436025][357 ms][DEBUG] targetPkg: running [2025-08-24 18:15:03][354068196436025][358 ms][DEBUG] END check_scloud in 357 ms [2025-08-24 18:15:03][354068196436025][358 ms][DEBUG] START check_boot_completed [2025-08-24 18:15:03][354068196436025][358 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:15:03][354068196436025][404 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 18:15:03][354068196436025][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:15:03][354068196436025][467 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 18:15:03][354068196436025][467 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 18:15:03][354068196436025][467 ms][DEBUG] rawBody.length=1148 [2025-08-24 18:15:03][354068196436025][467 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068196436025\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7426\"}'\'' -e'"" [2025-08-24 18:15:03][354068196436025][467 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:15:03][354068196436025][467 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068196436025\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7426\"}'\'' -e'"" [2025-08-24 18:15:08][354068196436025][4825 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5a317ce2-3177-4cad-b0d0-9a47db027794","id":"QR_5a317ce2-3177-4cad-b0d0-9a47db027794","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:15:08][354068196436025][4981 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=3343 [2025-08-24 18:15:08][354068196436025][4981 ms][DEBUG] END runCmdUntilRes#1 in 4514 ms [2025-08-24 18:15:08][354068196436025][4981 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:16:05][350098751714403][1 ms][INFO] === Request start === [2025-08-24 18:16:05][350098751714403][1 ms][DEBUG] START check_scloud [2025-08-24 18:16:05][350098751714403][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:16:05][350098751714403][325 ms][DEBUG] SU: done in 323 ms; outu0_a118 22466 20653 23898360 89736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:16:05][350098751714403][325 ms][DEBUG] targetPkg: running [2025-08-24 18:16:05][350098751714403][325 ms][DEBUG] END check_scloud in 324 ms [2025-08-24 18:16:05][350098751714403][325 ms][DEBUG] START check_boot_completed [2025-08-24 18:16:05][350098751714403][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:16:05][350098751714403][371 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 18:16:05][350098751714403][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:16:05][350098751714403][434 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 18:16:05][350098751714403][434 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 18:16:05][350098751714403][434 ms][DEBUG] START check_internet [2025-08-24 18:16:05][350098751714403][434 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 18:16:06][350098751714403][981 ms][DEBUG] SU: done in 546 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.112/200.112/200.112/0.000 ms\n [2025-08-24 18:16:06][350098751714403][981 ms][DEBUG] check_internet: online [2025-08-24 18:16:06][350098751714403][981 ms][DEBUG] END check_internet in 547 ms [2025-08-24 18:16:06][350098751714403][981 ms][DEBUG] rawBody.length=1149 [2025-08-24 18:16:06][350098751714403][981 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350098751714403\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5200\"}'\'' -e'"" [2025-08-24 18:16:06][350098751714403][981 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:16:06][350098751714403][981 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350098751714403\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5200\"}'\'' -e'"" [2025-08-24 18:16:11][350098751714403][6120 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9bf11c34-6763-48ca-9324-61b547458843","id":"QR_9bf11c34-6763-48ca-9324-61b547458843","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:16:11][350098751714403][6276 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-08-24 18:16:11][350098751714403][6276 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-08-24 18:16:11][350098751714403][6276 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:20:03][358184574193660][1 ms][INFO] === Request start === [2025-08-24 18:20:03][358184574193660][1 ms][DEBUG] START check_scloud [2025-08-24 18:20:03][358184574193660][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:20:03][358184574193660][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 22466 20653 24061404 101452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:20:03][358184574193660][274 ms][DEBUG] targetPkg: running [2025-08-24 18:20:03][358184574193660][274 ms][DEBUG] END check_scloud in 273 ms [2025-08-24 18:20:03][358184574193660][274 ms][DEBUG] START check_boot_completed [2025-08-24 18:20:03][358184574193660][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:20:03][358184574193660][305 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 18:20:03][358184574193660][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:20:03][358184574193660][352 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 18:20:03][358184574193660][352 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 18:20:03][358184574193660][352 ms][DEBUG] START check_internet [2025-08-24 18:20:03][358184574193660][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 18:20:04][358184574193660][727 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=276 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 276.470/276.470/276.470/0.000 ms\n [2025-08-24 18:20:04][358184574193660][727 ms][DEBUG] check_internet: online [2025-08-24 18:20:04][358184574193660][727 ms][DEBUG] END check_internet in 375 ms [2025-08-24 18:20:04][358184574193660][727 ms][DEBUG] rawBody.length=1148 [2025-08-24 18:20:04][358184574193660][727 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184574193660\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3320\"}'\'' -e'"" [2025-08-24 18:20:04][358184574193660][727 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:20:04][358184574193660][727 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184574193660\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3320\"}'\'' -e'"" [2025-08-24 18:20:08][358184574193660][4976 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4231abe9-ee1b-43ec-b426-f0b8e4cc326c","id":"QR_4231abe9-ee1b-43ec-b426-f0b8e4cc326c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:20:08][358184574193660][5132 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-08-24 18:20:08][358184574193660][5132 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-24 18:20:08][358184574193660][5132 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:21:03][351272333278034][0 ms][INFO] === Request start === [2025-08-24 18:21:03][351272333278034][1 ms][DEBUG] START check_scloud [2025-08-24 18:21:03][351272333278034][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:21:04][351272333278034][335 ms][DEBUG] SU: done in 334 ms; outu0_a118 22466 20653 24181312 113340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:21:04][351272333278034][335 ms][DEBUG] targetPkg: running [2025-08-24 18:21:04][351272333278034][335 ms][DEBUG] END check_scloud in 334 ms [2025-08-24 18:21:04][351272333278034][335 ms][DEBUG] START check_boot_completed [2025-08-24 18:21:04][351272333278034][335 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:21:04][351272333278034][382 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 18:21:04][351272333278034][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:21:04][351272333278034][428 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 18:21:04][351272333278034][429 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 18:21:04][351272333278034][429 ms][DEBUG] rawBody.length=1148 [2025-08-24 18:21:04][351272333278034][429 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272333278034\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5303\"}'\'' -e'"" [2025-08-24 18:21:04][351272333278034][429 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:21:04][351272333278034][429 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272333278034\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5303\"}'\'' -e'"" [2025-08-24 18:21:08][351272333278034][4474 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_65f51e78-7adb-49b3-aff6-048bf46fee86","id":"QR_65f51e78-7adb-49b3-aff6-048bf46fee86","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:21:08][351272333278034][4631 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-24 18:21:08][351272333278034][4631 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-24 18:21:08][351272333278034][4631 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:23:03][357962501663017][1 ms][INFO] === Request start === [2025-08-24 18:23:03][357962501663017][1 ms][DEBUG] START check_scloud [2025-08-24 18:23:03][357962501663017][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:23:03][357962501663017][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 22466 20653 24317540 124464 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:23:03][357962501663017][319 ms][DEBUG] targetPkg: running [2025-08-24 18:23:03][357962501663017][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-24 18:23:03][357962501663017][319 ms][DEBUG] START check_boot_completed [2025-08-24 18:23:03][357962501663017][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:23:03][357962501663017][366 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 18:23:03][357962501663017][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:23:03][357962501663017][428 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 18:23:03][357962501663017][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 18:23:03][357962501663017][429 ms][DEBUG] rawBody.length=1148 [2025-08-24 18:23:03][357962501663017][429 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962501663017\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5721\"}'\'' -e'"" [2025-08-24 18:23:03][357962501663017][429 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:23:03][357962501663017][429 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962501663017\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5721\"}'\'' -e'"" [2025-08-24 18:23:07][357962501663017][4677 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c978cd42-3425-4421-8ac1-88a59827539a","id":"QR_c978cd42-3425-4421-8ac1-88a59827539a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:23:07][357962501663017][4833 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-08-24 18:23:07][357962501663017][4834 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-24 18:23:07][357962501663017][4834 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:26:03][352549930569264][1 ms][INFO] === Request start === [2025-08-24 18:26:03][352549930569264][1 ms][DEBUG] START check_scloud [2025-08-24 18:26:03][352549930569264][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:26:03][352549930569264][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 22466 20653 24468296 135440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:26:03][352549930569264][302 ms][DEBUG] targetPkg: running [2025-08-24 18:26:03][352549930569264][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-24 18:26:03][352549930569264][302 ms][DEBUG] START check_boot_completed [2025-08-24 18:26:03][352549930569264][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:26:03][352549930569264][332 ms][DEBUG] ADB: done in 29 ms; out [2025-08-24 18:26:03][352549930569264][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:26:03][352549930569264][379 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 18:26:03][352549930569264][379 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-24 18:26:03][352549930569264][379 ms][DEBUG] START check_internet [2025-08-24 18:26:03][352549930569264][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 18:26:04][352549930569264][972 ms][DEBUG] SU: done in 593 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.357/201.357/201.357/0.000 ms\n [2025-08-24 18:26:04][352549930569264][972 ms][DEBUG] check_internet: online [2025-08-24 18:26:04][352549930569264][972 ms][DEBUG] END check_internet in 593 ms [2025-08-24 18:26:04][352549930569264][972 ms][DEBUG] rawBody.length=1148 [2025-08-24 18:26:04][352549930569264][972 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549930569264\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7280\"}'\'' -e'"" [2025-08-24 18:26:04][352549930569264][972 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:26:04][352549930569264][972 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549930569264\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7280\"}'\'' -e'"" [2025-08-24 18:26:08][352549930569264][5018 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b3ce4d60-ba48-46d0-9916-91c17e8e6dd5","id":"QR_b3ce4d60-ba48-46d0-9916-91c17e8e6dd5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:26:08][352549930569264][5174 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-24 18:26:08][352549930569264][5174 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-24 18:26:08][352549930569264][5174 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:32:05][358558825595593][1 ms][INFO] === Request start === [2025-08-24 18:32:05][358558825595593][1 ms][DEBUG] START check_scloud [2025-08-24 18:32:05][358558825595593][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:32:05][358558825595593][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 22466 20653 24612396 141080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:32:05][358558825595593][282 ms][DEBUG] targetPkg: running [2025-08-24 18:32:05][358558825595593][282 ms][DEBUG] END check_scloud in 281 ms [2025-08-24 18:32:05][358558825595593][282 ms][DEBUG] START check_boot_completed [2025-08-24 18:32:05][358558825595593][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:32:05][358558825595593][328 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 18:32:05][358558825595593][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:32:05][358558825595593][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 18:32:05][358558825595593][375 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 18:32:05][358558825595593][375 ms][DEBUG] START check_internet [2025-08-24 18:32:05][358558825595593][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 18:32:06][358558825595593][844 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.188/203.188/203.188/0.000 ms\n [2025-08-24 18:32:06][358558825595593][844 ms][DEBUG] check_internet: online [2025-08-24 18:32:06][358558825595593][844 ms][DEBUG] END check_internet in 469 ms [2025-08-24 18:32:06][358558825595593][844 ms][DEBUG] rawBody.length=1149 [2025-08-24 18:32:06][358558825595593][844 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558825595593\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8057\"}'\'' -e'"" [2025-08-24 18:32:06][358558825595593][844 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:32:06][358558825595593][845 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558825595593\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8057\"}'\'' -e'"" [2025-08-24 18:32:11][358558825595593][6608 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cfb4d07a-aba3-40be-945c-3fd627c5a4a0","id":"QR_cfb4d07a-aba3-40be-945c-3fd627c5a4a0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:32:12][358558825595593][6764 ms][DEBUG] proc_open done in 5920 ms; code=255; res.len=3343 [2025-08-24 18:32:12][358558825595593][6764 ms][DEBUG] END runCmdUntilRes#1 in 5920 ms [2025-08-24 18:32:12][358558825595593][6765 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:33:03][358870085104119][0 ms][INFO] === Request start === [2025-08-24 18:33:03][358870085104119][1 ms][DEBUG] START check_scloud [2025-08-24 18:33:03][358870085104119][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:33:03][358870085104119][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 22466 20653 24773396 139384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:33:03][358870085104119][276 ms][DEBUG] targetPkg: running [2025-08-24 18:33:03][358870085104119][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-24 18:33:03][358870085104119][276 ms][DEBUG] START check_boot_completed [2025-08-24 18:33:03][358870085104119][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:33:03][358870085104119][322 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 18:33:03][358870085104119][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:33:03][358870085104119][369 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 18:33:03][358870085104119][369 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 18:33:03][358870085104119][369 ms][DEBUG] rawBody.length=1148 [2025-08-24 18:33:03][358870085104119][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358870085104119\",\"model\":\"SM-J330F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"NEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8807\"}'\'' -e'"" [2025-08-24 18:33:03][358870085104119][369 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:33:03][358870085104119][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358870085104119\",\"model\":\"SM-J330F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"NEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8807\"}'\'' -e'"" [2025-08-24 18:33:08][358870085104119][4696 ms][DEBUG] proc_open done in 4327 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 18:33:08][358870085104119][4696 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-24 18:33:08][358870085104119][4696 ms][WARN] Detected error: Process with pid 22466 either refused to load frida-agent, or terminated during injection [2025-08-24 18:33:08][358870085104119][4696 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 18:33:08][358870085104119][4837 ms][DEBUG] SU: done in 141 ms; out [2025-08-24 18:33:08][358870085104119][4837 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 18:33:08][358870085104119][4837 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 18:33:08][358870085104119][4962 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 18:33:08][358870085104119][4962 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 18:33:08][358870085104119][5118 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 18:33:10][358870085104119][7133 ms][DEBUG] START check_boot_completed [2025-08-24 18:33:10][358870085104119][7133 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:33:10][358870085104119][7180 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 18:33:10][358870085104119][7180 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:33:10][358870085104119][7227 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 18:33:10][358870085104119][7227 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 18:33:13][358870085104119][10242 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 18:33:13][358870085104119][10242 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358870085104119\",\"model\":\"SM-J330F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"NEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8807\"}'\'' -e'"" [2025-08-24 18:33:17][358870085104119][14397 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_02c0b21d-d81f-4d73-9571-381c06954a94","id":"QR_02c0b21d-d81f-4d73-9571-381c06954a94","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:33:18][358870085104119][14553 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-24 18:33:18][358870085104119][14553 ms][DEBUG] END runCmdUntilRes#2 in 4312 ms [2025-08-24 18:33:18][358870085104119][14553 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:33:20][354791644612554][0 ms][INFO] === Request start === [2025-08-24 18:33:20][354791644612554][0 ms][DEBUG] START check_scloud [2025-08-24 18:33:20][354791644612554][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:33:20][354791644612554][279 ms][DEBUG] SU: done in 279 ms; outu0_a118 2483 20653 23394460 126196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:33:20][354791644612554][279 ms][DEBUG] targetPkg: running [2025-08-24 18:33:20][354791644612554][279 ms][DEBUG] END check_scloud in 279 ms [2025-08-24 18:33:20][354791644612554][279 ms][DEBUG] START check_boot_completed [2025-08-24 18:33:20][354791644612554][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:33:21][354791644612554][326 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 18:33:21][354791644612554][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:33:21][354791644612554][404 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 18:33:21][354791644612554][404 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-24 18:33:21][354791644612554][404 ms][DEBUG] rawBody.length=1148 [2025-08-24 18:33:21][354791644612554][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354791644612554\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2866\"}'\'' -e'"" [2025-08-24 18:33:21][354791644612554][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:33:21][354791644612554][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354791644612554\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2866\"}'\'' -e'"" [2025-08-24 18:33:25][354791644612554][4403 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eeec735a-19ce-4434-b49a-d3c0005a75d3","id":"QR_eeec735a-19ce-4434-b49a-d3c0005a75d3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:33:25][354791644612554][4559 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-24 18:33:25][354791644612554][4559 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-24 18:33:25][354791644612554][4559 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:33:27][352288960671316][0 ms][INFO] === Request start === [2025-08-24 18:33:27][352288960671316][1 ms][DEBUG] START check_scloud [2025-08-24 18:33:27][352288960671316][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:33:28][352288960671316][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 2483 20653 23574960 139240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:33:28][352288960671316][261 ms][DEBUG] targetPkg: running [2025-08-24 18:33:28][352288960671316][261 ms][DEBUG] END check_scloud in 261 ms [2025-08-24 18:33:28][352288960671316][261 ms][DEBUG] START check_boot_completed [2025-08-24 18:33:28][352288960671316][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:33:28][352288960671316][308 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 18:33:28][352288960671316][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:33:28][352288960671316][355 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 18:33:28][352288960671316][355 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 18:33:28][352288960671316][355 ms][DEBUG] rawBody.length=1148 [2025-08-24 18:33:28][352288960671316][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288960671316\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1120\"}'\'' -e'"" [2025-08-24 18:33:28][352288960671316][355 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:33:28][352288960671316][355 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288960671316\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1120\"}'\'' -e'"" [2025-08-24 18:33:31][352288960671316][3995 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_91c7c051-4f9f-49e6-8c70-b67eab5a050c","id":"QR_91c7c051-4f9f-49e6-8c70-b67eab5a050c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:33:31][352288960671316][4151 ms][DEBUG] proc_open done in 3796 ms; code=255; res.len=3343 [2025-08-24 18:33:31][352288960671316][4151 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-24 18:33:31][352288960671316][4151 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:35:04][351652534521250][1 ms][INFO] === Request start === [2025-08-24 18:35:04][351652534521250][1 ms][DEBUG] START check_scloud [2025-08-24 18:35:04][351652534521250][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:35:04][351652534521250][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 2483 20653 23585436 151488 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:35:04][351652534521250][307 ms][DEBUG] targetPkg: running [2025-08-24 18:35:04][351652534521250][308 ms][DEBUG] END check_scloud in 306 ms [2025-08-24 18:35:04][351652534521250][308 ms][DEBUG] START check_boot_completed [2025-08-24 18:35:04][351652534521250][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:35:04][351652534521250][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 18:35:04][351652534521250][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:35:04][351652534521250][417 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 18:35:04][351652534521250][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 18:35:04][351652534521250][417 ms][DEBUG] rawBody.length=1149 [2025-08-24 18:35:04][351652534521250][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351652534521250\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5936\"}'\'' -e'"" [2025-08-24 18:35:04][351652534521250][417 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:35:04][351652534521250][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351652534521250\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5936\"}'\'' -e'"" [2025-08-24 18:35:09][351652534521250][5509 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ff50a6ae-a66b-41fa-b6dc-1bebfd56e1f9","id":"QR_ff50a6ae-a66b-41fa-b6dc-1bebfd56e1f9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:35:10][351652534521250][5665 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-08-24 18:35:10][351652534521250][5665 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-08-24 18:35:10][351652534521250][5665 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:35:15][353684142092661][0 ms][INFO] === Request start === [2025-08-24 18:35:15][353684142092661][1 ms][DEBUG] START check_scloud [2025-08-24 18:35:15][353684142092661][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:35:15][353684142092661][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 2483 20653 23714456 162528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:35:15][353684142092661][268 ms][DEBUG] targetPkg: running [2025-08-24 18:35:15][353684142092661][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-24 18:35:15][353684142092661][268 ms][DEBUG] START check_boot_completed [2025-08-24 18:35:15][353684142092661][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:35:15][353684142092661][315 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 18:35:15][353684142092661][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:35:15][353684142092661][362 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 18:35:15][353684142092661][362 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 18:35:15][353684142092661][362 ms][DEBUG] rawBody.length=1148 [2025-08-24 18:35:15][353684142092661][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684142092661\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6406\"}'\'' -e'"" [2025-08-24 18:35:15][353684142092661][362 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:35:15][353684142092661][362 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684142092661\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6406\"}'\'' -e'"" [2025-08-24 18:35:19][353684142092661][4439 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_771bdd37-3e34-4ebd-9969-249f7ff3dcea","id":"QR_771bdd37-3e34-4ebd-9969-249f7ff3dcea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:35:19][353684142092661][4595 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-24 18:35:19][353684142092661][4595 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-24 18:35:19][353684142092661][4595 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:44:03][350938286689481][1 ms][INFO] === Request start === [2025-08-24 18:44:03][350938286689481][1 ms][DEBUG] START check_scloud [2025-08-24 18:44:03][350938286689481][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:44:04][350938286689481][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 2483 20653 23822988 174156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:44:04][350938286689481][315 ms][DEBUG] targetPkg: running [2025-08-24 18:44:04][350938286689481][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-24 18:44:04][350938286689481][315 ms][DEBUG] START check_boot_completed [2025-08-24 18:44:04][350938286689481][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:44:04][350938286689481][346 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 18:44:04][350938286689481][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:44:04][350938286689481][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 18:44:04][350938286689481][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 18:44:04][350938286689481][393 ms][DEBUG] START check_internet [2025-08-24 18:44:04][350938286689481][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 18:44:04][350938286689481][925 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.017/203.017/203.017/0.000 ms\n [2025-08-24 18:44:04][350938286689481][925 ms][DEBUG] check_internet: online [2025-08-24 18:44:04][350938286689481][925 ms][DEBUG] END check_internet in 531 ms [2025-08-24 18:44:04][350938286689481][925 ms][DEBUG] rawBody.length=1148 [2025-08-24 18:44:04][350938286689481][925 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938286689481\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3928\"}'\'' -e'"" [2025-08-24 18:44:04][350938286689481][925 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:44:04][350938286689481][925 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938286689481\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3928\"}'\'' -e'"" [2025-08-24 18:44:08][350938286689481][4892 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0b0a8b7a-0842-4a14-ac0d-20dcb69b731f","id":"QR_0b0a8b7a-0842-4a14-ac0d-20dcb69b731f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:44:08][350938286689481][5049 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-08-24 18:44:08][350938286689481][5049 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-24 18:44:08][350938286689481][5049 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:45:03][355084250553158][1 ms][INFO] === Request start === [2025-08-24 18:45:03][355084250553158][1 ms][DEBUG] START check_scloud [2025-08-24 18:45:03][355084250553158][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:45:04][355084250553158][266 ms][DEBUG] SU: done in 264 ms; outu0_a118 2483 20653 23962428 185600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:45:04][355084250553158][266 ms][DEBUG] targetPkg: running [2025-08-24 18:45:04][355084250553158][266 ms][DEBUG] END check_scloud in 265 ms [2025-08-24 18:45:04][355084250553158][266 ms][DEBUG] START check_boot_completed [2025-08-24 18:45:04][355084250553158][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:45:04][355084250553158][312 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 18:45:04][355084250553158][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:45:04][355084250553158][359 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 18:45:04][355084250553158][359 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 18:45:04][355084250553158][359 ms][DEBUG] rawBody.length=1148 [2025-08-24 18:45:04][355084250553158][359 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355084250553158\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7565\"}'\'' -e'"" [2025-08-24 18:45:04][355084250553158][360 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:45:04][355084250553158][360 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355084250553158\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7565\"}'\'' -e'"" [2025-08-24 18:45:08][355084250553158][4295 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6f74995f-f412-47e1-a517-2a8525b53534","id":"QR_6f74995f-f412-47e1-a517-2a8525b53534","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:45:08][355084250553158][4452 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-08-24 18:45:08][355084250553158][4452 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-24 18:45:08][355084250553158][4452 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:48:05][355464111553086][1 ms][INFO] === Request start === [2025-08-24 18:48:05][355464111553086][1 ms][DEBUG] START check_scloud [2025-08-24 18:48:05][355464111553086][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:48:05][355464111553086][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 2483 20653 24104928 196460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:48:05][355464111553086][257 ms][DEBUG] targetPkg: running [2025-08-24 18:48:05][355464111553086][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-24 18:48:05][355464111553086][257 ms][DEBUG] START check_boot_completed [2025-08-24 18:48:05][355464111553086][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:48:05][355464111553086][288 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 18:48:05][355464111553086][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:48:05][355464111553086][335 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 18:48:05][355464111553086][335 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 18:48:05][355464111553086][335 ms][DEBUG] START check_internet [2025-08-24 18:48:05][355464111553086][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 18:48:05][355464111553086][834 ms][DEBUG] SU: done in 499 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.654/200.654/200.654/0.000 ms\n [2025-08-24 18:48:05][355464111553086][834 ms][DEBUG] check_internet: online [2025-08-24 18:48:05][355464111553086][834 ms][DEBUG] END check_internet in 500 ms [2025-08-24 18:48:05][355464111553086][835 ms][DEBUG] rawBody.length=1149 [2025-08-24 18:48:05][355464111553086][835 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355464111553086\",\"model\":\"SM-G986U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4129\"}'\'' -e'"" [2025-08-24 18:48:05][355464111553086][835 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:48:05][355464111553086][835 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355464111553086\",\"model\":\"SM-G986U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4129\"}'\'' -e'"" [2025-08-24 18:48:11][355464111553086][6896 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_51e0c6a2-3f2a-4ae1-b692-cedc9d48127b","id":"QR_51e0c6a2-3f2a-4ae1-b692-cedc9d48127b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:48:12][355464111553086][7052 ms][DEBUG] proc_open done in 6217 ms; code=255; res.len=3343 [2025-08-24 18:48:12][355464111553086][7052 ms][DEBUG] END runCmdUntilRes#1 in 6217 ms [2025-08-24 18:48:12][355464111553086][7052 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:50:03][350987615537234][0 ms][INFO] === Request start === [2025-08-24 18:50:03][350987615537234][1 ms][DEBUG] START check_scloud [2025-08-24 18:50:03][350987615537234][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:50:03][350987615537234][341 ms][DEBUG] SU: done in 340 ms; outu0_a118 2483 20653 24256800 183688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:50:03][350987615537234][341 ms][DEBUG] targetPkg: running [2025-08-24 18:50:03][350987615537234][341 ms][DEBUG] END check_scloud in 340 ms [2025-08-24 18:50:03][350987615537234][341 ms][DEBUG] START check_boot_completed [2025-08-24 18:50:03][350987615537234][341 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:50:03][350987615537234][387 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 18:50:03][350987615537234][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:50:04][350987615537234][481 ms][DEBUG] SU: done in 94 ms; out [2025-08-24 18:50:04][350987615537234][481 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-24 18:50:04][350987615537234][481 ms][DEBUG] START check_internet [2025-08-24 18:50:04][350987615537234][481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 18:50:04][350987615537234][965 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.530/202.530/202.530/0.000 ms\n [2025-08-24 18:50:04][350987615537234][965 ms][DEBUG] check_internet: online [2025-08-24 18:50:04][350987615537234][965 ms][DEBUG] END check_internet in 484 ms [2025-08-24 18:50:04][350987615537234][965 ms][DEBUG] rawBody.length=1148 [2025-08-24 18:50:04][350987615537234][965 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350987615537234\",\"model\":\"SM-E225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8827\"}'\'' -e'"" [2025-08-24 18:50:04][350987615537234][965 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:50:04][350987615537234][966 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350987615537234\",\"model\":\"SM-E225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8827\"}'\'' -e'"" [2025-08-24 18:50:09][350987615537234][5495 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa3f4e3e-a9ab-4992-bf28-b2ac06eaf237","id":"QR_fa3f4e3e-a9ab-4992-bf28-b2ac06eaf237","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:50:09][350987615537234][5651 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-08-24 18:50:09][350987615537234][5651 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-08-24 18:50:09][350987615537234][5651 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:54:04][352600229022687][1 ms][INFO] === Request start === [2025-08-24 18:54:04][352600229022687][1 ms][DEBUG] START check_scloud [2025-08-24 18:54:04][352600229022687][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:54:04][352600229022687][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 2483 20653 24411652 173300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:54:04][352600229022687][308 ms][DEBUG] targetPkg: running [2025-08-24 18:54:04][352600229022687][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-24 18:54:04][352600229022687][308 ms][DEBUG] START check_boot_completed [2025-08-24 18:54:04][352600229022687][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:54:04][352600229022687][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 18:54:04][352600229022687][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:54:04][352600229022687][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 18:54:04][352600229022687][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 18:54:04][352600229022687][386 ms][DEBUG] START check_internet [2025-08-24 18:54:04][352600229022687][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 18:54:05][352600229022687][886 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.220/202.220/202.220/0.000 ms\n [2025-08-24 18:54:05][352600229022687][886 ms][DEBUG] check_internet: online [2025-08-24 18:54:05][352600229022687][886 ms][DEBUG] END check_internet in 500 ms [2025-08-24 18:54:05][352600229022687][886 ms][DEBUG] rawBody.length=1148 [2025-08-24 18:54:05][352600229022687][886 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229022687\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MDA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2994\"}'\'' -e'"" [2025-08-24 18:54:05][352600229022687][886 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:54:05][352600229022687][886 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229022687\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MDA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2994\"}'\'' -e'"" [2025-08-24 18:54:09][352600229022687][4947 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7bb0c11b-c136-495b-b8e8-f35559c88fe1","id":"QR_7bb0c11b-c136-495b-b8e8-f35559c88fe1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:54:09][352600229022687][5104 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-24 18:54:09][352600229022687][5104 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-24 18:54:09][352600229022687][5104 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:59:03][353089180547446][1 ms][INFO] === Request start === [2025-08-24 18:59:03][353089180547446][1 ms][DEBUG] START check_scloud [2025-08-24 18:59:03][353089180547446][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:59:03][353089180547446][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 2483 20653 24527468 186716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:59:03][353089180547446][295 ms][DEBUG] targetPkg: running [2025-08-24 18:59:03][353089180547446][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-24 18:59:03][353089180547446][295 ms][DEBUG] START check_boot_completed [2025-08-24 18:59:03][353089180547446][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:59:03][353089180547446][327 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 18:59:03][353089180547446][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:59:03][353089180547446][374 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 18:59:03][353089180547446][374 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 18:59:03][353089180547446][374 ms][DEBUG] rawBody.length=1148 [2025-08-24 18:59:03][353089180547446][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353089180547446\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9128\"}'\'' -e'"" [2025-08-24 18:59:03][353089180547446][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:59:03][353089180547446][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353089180547446\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9128\"}'\'' -e'"" [2025-08-24 18:59:07][353089180547446][4732 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2914bc80-618d-4e20-94d5-228a7e568bdd","id":"QR_2914bc80-618d-4e20-94d5-228a7e568bdd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 18:59:08][353089180547446][4888 ms][DEBUG] proc_open done in 4513 ms; code=255; res.len=3343 [2025-08-24 18:59:08][353089180547446][4888 ms][DEBUG] END runCmdUntilRes#1 in 4514 ms [2025-08-24 18:59:08][353089180547446][4888 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 18:59:36][352208772309491][0 ms][INFO] === Request start === [2025-08-24 18:59:36][352208772309491][1 ms][DEBUG] START check_scloud [2025-08-24 18:59:36][352208772309491][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:59:37][352208772309491][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 2483 20653 24686416 185856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:59:37][352208772309491][268 ms][DEBUG] targetPkg: running [2025-08-24 18:59:37][352208772309491][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-24 18:59:37][352208772309491][268 ms][DEBUG] START check_boot_completed [2025-08-24 18:59:37][352208772309491][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:59:37][352208772309491][315 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 18:59:37][352208772309491][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:59:37][352208772309491][377 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 18:59:37][352208772309491][377 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 18:59:37][352208772309491][377 ms][DEBUG] rawBody.length=1148 [2025-08-24 18:59:37][352208772309491][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208772309491\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2478\"}'\'' -e'"" [2025-08-24 18:59:37][352208772309491][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:59:37][352208772309491][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208772309491\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2478\"}'\'' -e'"" [2025-08-24 18:59:41][352208772309491][4235 ms][DEBUG] proc_open done in 3858 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-24 18:59:41][352208772309491][4236 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-24 18:59:41][352208772309491][4236 ms][WARN] Detected error: Process with pid 2483 either refused to load frida-agent, or terminated during injection [2025-08-24 18:59:41][352208772309491][4236 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 18:59:41][352208772309491][4361 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 18:59:41][352208772309491][4361 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 18:59:41][352208772309491][4361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 18:59:41][352208772309491][4501 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 18:59:41][352208772309491][4501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 18:59:41][352208772309491][4673 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 18:59:43][352208772309491][6688 ms][DEBUG] START check_boot_completed [2025-08-24 18:59:43][352208772309491][6688 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:59:43][352208772309491][6735 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 18:59:43][352208772309491][6735 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:59:43][352208772309491][6782 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 18:59:43][352208772309491][6783 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 18:59:46][352208772309491][9797 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 18:59:46][352208772309491][9797 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208772309491\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2478\"}'\'' -e'"" [2025-08-24 18:59:50][352208772309491][13343 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 18:59:50][352208772309491][13499 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=107 [2025-08-24 18:59:50][352208772309491][13499 ms][DEBUG] END runCmdUntilRes#2 in 3702 ms [2025-08-24 18:59:50][352208772309491][13499 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 18:59:50][][0 ms][INFO] === Request start === [2025-08-24 18:59:50][][1 ms][DEBUG] START check_scloud [2025-08-24 18:59:50][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:59:50][][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 4653 20653 23436956 125544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:59:50][][246 ms][DEBUG] targetPkg: running [2025-08-24 18:59:50][][246 ms][DEBUG] END check_scloud in 245 ms [2025-08-24 18:59:50][][246 ms][DEBUG] START check_boot_completed [2025-08-24 18:59:50][][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:59:51][][277 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 18:59:51][][277 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:59:51][][324 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 18:59:51][][324 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 18:59:51][][324 ms][DEBUG] rawBody.length=1129 [2025-08-24 18:59:51][][324 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXB281PED\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1978\"}'\'' -e'"" [2025-08-24 18:59:51][][324 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:59:51][][324 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXB281PED\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1978\"}'\'' -e'"" [2025-08-24 18:59:54][][3792 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 18:59:54][][3948 ms][DEBUG] proc_open done in 3624 ms; code=255; res.len=107 [2025-08-24 18:59:54][][3948 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-08-24 18:59:54][][3948 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 18:59:56][352208772309491][0 ms][INFO] === Request start === [2025-08-24 18:59:56][352208772309491][1 ms][DEBUG] START check_scloud [2025-08-24 18:59:56][352208772309491][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 18:59:57][352208772309491][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 4653 20653 23591780 137096 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 18:59:57][352208772309491][254 ms][DEBUG] targetPkg: running [2025-08-24 18:59:57][352208772309491][254 ms][DEBUG] END check_scloud in 254 ms [2025-08-24 18:59:57][352208772309491][254 ms][DEBUG] START check_boot_completed [2025-08-24 18:59:57][352208772309491][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 18:59:57][352208772309491][301 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 18:59:57][352208772309491][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 18:59:57][352208772309491][348 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 18:59:57][352208772309491][348 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 18:59:57][352208772309491][348 ms][DEBUG] rawBody.length=1149 [2025-08-24 18:59:57][352208772309491][348 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208772309491\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3020\"}'\'' -e'"" [2025-08-24 18:59:57][352208772309491][348 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 18:59:57][352208772309491][348 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208772309491\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3020\"}'\'' -e'"" [2025-08-24 19:00:02][352208772309491][5550 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_07a4be9d-76d7-4dba-a1f0-7708cff51afc","id":"QR_07a4be9d-76d7-4dba-a1f0-7708cff51afc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 19:00:02][352208772309491][5706 ms][DEBUG] proc_open done in 5357 ms; code=255; res.len=3343 [2025-08-24 19:00:02][352208772309491][5706 ms][DEBUG] END runCmdUntilRes#1 in 5358 ms [2025-08-24 19:00:02][352208772309491][5706 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 19:00:31][352208772309491][0 ms][INFO] === Request start === [2025-08-24 19:00:31][352208772309491][1 ms][DEBUG] START check_scloud [2025-08-24 19:00:31][352208772309491][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:00:31][352208772309491][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 4653 20653 23652892 151920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:00:31][352208772309491][311 ms][DEBUG] targetPkg: running [2025-08-24 19:00:31][352208772309491][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-24 19:00:31][352208772309491][311 ms][DEBUG] START check_boot_completed [2025-08-24 19:00:31][352208772309491][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:00:31][352208772309491][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 19:00:31][352208772309491][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:00:31][352208772309491][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 19:00:31][352208772309491][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 19:00:31][352208772309491][404 ms][DEBUG] START check_internet [2025-08-24 19:00:31][352208772309491][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 19:00:32][352208772309491][904 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.625/200.625/200.625/0.000 ms\n [2025-08-24 19:00:32][352208772309491][905 ms][DEBUG] check_internet: online [2025-08-24 19:00:32][352208772309491][905 ms][DEBUG] END check_internet in 500 ms [2025-08-24 19:00:32][352208772309491][905 ms][DEBUG] rawBody.length=1148 [2025-08-24 19:00:32][352208772309491][905 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208772309491\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3863\"}'\'' -e'"" [2025-08-24 19:00:32][352208772309491][905 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:00:32][352208772309491][905 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208772309491\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3863\"}'\'' -e'"" [2025-08-24 19:00:36][352208772309491][4841 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 19:00:36][352208772309491][4997 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=107 [2025-08-24 19:00:36][352208772309491][4997 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-24 19:00:36][352208772309491][4997 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 19:00:36][][0 ms][INFO] === Request start === [2025-08-24 19:00:36][][1 ms][DEBUG] START check_scloud [2025-08-24 19:00:36][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:00:36][][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 4653 20653 23801508 162812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:00:36][][309 ms][DEBUG] targetPkg: running [2025-08-24 19:00:36][][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-24 19:00:36][][309 ms][DEBUG] START check_boot_completed [2025-08-24 19:00:36][][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:00:36][][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 19:00:36][][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:00:36][][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 19:00:36][][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 19:00:36][][418 ms][DEBUG] START check_internet [2025-08-24 19:00:36][][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 19:00:37][][668 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=138 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 138.253/138.253/138.253/0.000 ms\n [2025-08-24 19:00:37][][668 ms][DEBUG] check_internet: online [2025-08-24 19:00:37][][668 ms][DEBUG] END check_internet in 250 ms [2025-08-24 19:00:37][][668 ms][DEBUG] rawBody.length=1129 [2025-08-24 19:00:37][][668 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXB281PED\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9526\"}'\'' -e'"" [2025-08-24 19:00:37][][668 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:00:37][][668 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXB281PED\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9526\"}'\'' -e'"" [2025-08-24 19:00:40][][4026 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 19:00:40][][4182 ms][DEBUG] proc_open done in 3514 ms; code=255; res.len=107 [2025-08-24 19:00:40][][4182 ms][DEBUG] END runCmdUntilRes#1 in 3514 ms [2025-08-24 19:00:40][][4182 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 19:00:42][352208772309491][1 ms][INFO] === Request start === [2025-08-24 19:00:42][352208772309491][1 ms][DEBUG] START check_scloud [2025-08-24 19:00:42][352208772309491][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:00:43][352208772309491][287 ms][DEBUG] SU: done in 285 ms; outu0_a118 4653 20653 23931564 172912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:00:43][352208772309491][287 ms][DEBUG] targetPkg: running [2025-08-24 19:00:43][352208772309491][287 ms][DEBUG] END check_scloud in 286 ms [2025-08-24 19:00:43][352208772309491][287 ms][DEBUG] START check_boot_completed [2025-08-24 19:00:43][352208772309491][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:00:43][352208772309491][333 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 19:00:43][352208772309491][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:00:43][352208772309491][380 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 19:00:43][352208772309491][380 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 19:00:43][352208772309491][380 ms][DEBUG] START check_internet [2025-08-24 19:00:43][352208772309491][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 19:00:43][352208772309491][630 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=138 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 138.153/138.153/138.153/0.000 ms\n [2025-08-24 19:00:43][352208772309491][630 ms][DEBUG] check_internet: online [2025-08-24 19:00:43][352208772309491][630 ms][DEBUG] END check_internet in 250 ms [2025-08-24 19:00:43][352208772309491][630 ms][DEBUG] rawBody.length=1149 [2025-08-24 19:00:43][352208772309491][631 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208772309491\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5029\"}'\'' -e'"" [2025-08-24 19:00:43][352208772309491][631 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:00:43][352208772309491][631 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208772309491\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5029\"}'\'' -e'"" [2025-08-24 19:00:48][352208772309491][5129 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_68ecca89-c2d1-416a-90d5-73974e6565b8","id":"QR_68ecca89-c2d1-416a-90d5-73974e6565b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 19:00:48][352208772309491][5285 ms][DEBUG] proc_open done in 4655 ms; code=255; res.len=3343 [2025-08-24 19:00:48][352208772309491][5285 ms][DEBUG] END runCmdUntilRes#1 in 4655 ms [2025-08-24 19:00:48][352208772309491][5285 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 19:01:03][357879703040937][0 ms][INFO] === Request start === [2025-08-24 19:01:03][357879703040937][1 ms][DEBUG] START check_scloud [2025-08-24 19:01:03][357879703040937][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:01:03][357879703040937][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 4653 20653 24063816 184944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:01:03][357879703040937][305 ms][DEBUG] targetPkg: running [2025-08-24 19:01:03][357879703040937][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-24 19:01:03][357879703040937][305 ms][DEBUG] START check_boot_completed [2025-08-24 19:01:03][357879703040937][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:01:04][357879703040937][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 19:01:04][357879703040937][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:01:04][357879703040937][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 19:01:04][357879703040937][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 19:01:04][357879703040937][399 ms][DEBUG] rawBody.length=1148 [2025-08-24 19:01:04][357879703040937][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357879703040937\",\"model\":\"SM-N981B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5010\"}'\'' -e'"" [2025-08-24 19:01:04][357879703040937][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:01:04][357879703040937][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357879703040937\",\"model\":\"SM-N981B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5010\"}'\'' -e'"" [2025-08-24 19:01:07][357879703040937][4132 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb411ff0-946d-48a1-b251-fd1b84ffa43d","id":"QR_cb411ff0-946d-48a1-b251-fd1b84ffa43d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 19:01:07][357879703040937][4288 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-08-24 19:01:07][357879703040937][4288 ms][DEBUG] END runCmdUntilRes#1 in 3890 ms [2025-08-24 19:01:07][357879703040937][4288 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 19:01:10][358141435584339][0 ms][INFO] === Request start === [2025-08-24 19:01:10][358141435584339][1 ms][DEBUG] START check_scloud [2025-08-24 19:01:10][358141435584339][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:01:10][358141435584339][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 4653 20653 24225772 195848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:01:10][358141435584339][316 ms][DEBUG] targetPkg: running [2025-08-24 19:01:10][358141435584339][316 ms][DEBUG] END check_scloud in 316 ms [2025-08-24 19:01:10][358141435584339][316 ms][DEBUG] START check_boot_completed [2025-08-24 19:01:10][358141435584339][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:01:10][358141435584339][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 19:01:10][358141435584339][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:01:10][358141435584339][441 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 19:01:10][358141435584339][441 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-24 19:01:10][358141435584339][441 ms][DEBUG] rawBody.length=1148 [2025-08-24 19:01:10][358141435584339][441 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141435584339\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8864\"}'\'' -e'"" [2025-08-24 19:01:10][358141435584339][442 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:01:10][358141435584339][442 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141435584339\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8864\"}'\'' -e'"" [2025-08-24 19:01:14][358141435584339][4315 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e0d7766f-4058-4823-9166-0ca7c446c40c","id":"QR_e0d7766f-4058-4823-9166-0ca7c446c40c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 19:01:15][358141435584339][4471 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-24 19:01:15][358141435584339][4471 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-24 19:01:15][358141435584339][4471 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 19:15:04][358141435299854][1 ms][INFO] === Request start === [2025-08-24 19:15:04][358141435299854][1 ms][DEBUG] START check_scloud [2025-08-24 19:15:04][358141435299854][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:15:04][358141435299854][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 4653 20653 24318868 207164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:15:04][358141435299854][264 ms][DEBUG] targetPkg: running [2025-08-24 19:15:04][358141435299854][264 ms][DEBUG] END check_scloud in 262 ms [2025-08-24 19:15:04][358141435299854][264 ms][DEBUG] START check_boot_completed [2025-08-24 19:15:04][358141435299854][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:15:04][358141435299854][295 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 19:15:04][358141435299854][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:15:04][358141435299854][342 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 19:15:04][358141435299854][342 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 19:15:04][358141435299854][342 ms][DEBUG] rawBody.length=1148 [2025-08-24 19:15:04][358141435299854][342 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141435299854\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5459\"}'\'' -e'"" [2025-08-24 19:15:04][358141435299854][342 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:15:04][358141435299854][342 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141435299854\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5459\"}'\'' -e'"" [2025-08-24 19:15:08][358141435299854][4465 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_081a2e7e-e7c3-41e1-9620-0e6531028731","id":"QR_081a2e7e-e7c3-41e1-9620-0e6531028731","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 19:15:08][358141435299854][4622 ms][DEBUG] proc_open done in 4279 ms; code=255; res.len=3343 [2025-08-24 19:15:08][358141435299854][4622 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-24 19:15:08][358141435299854][4622 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 19:17:05][350849448331138][1 ms][INFO] === Request start === [2025-08-24 19:17:05][350849448331138][1 ms][DEBUG] START check_scloud [2025-08-24 19:17:05][350849448331138][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:17:05][350849448331138][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 4653 20653 24476868 218876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:17:05][350849448331138][302 ms][DEBUG] targetPkg: running [2025-08-24 19:17:05][350849448331138][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-24 19:17:05][350849448331138][302 ms][DEBUG] START check_boot_completed [2025-08-24 19:17:05][350849448331138][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:17:05][350849448331138][333 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 19:17:05][350849448331138][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:17:05][350849448331138][380 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 19:17:05][350849448331138][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 19:17:05][350849448331138][380 ms][DEBUG] rawBody.length=1149 [2025-08-24 19:17:05][350849448331138][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350849448331138\",\"model\":\"SM-S921W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4877\"}'\'' -e'"" [2025-08-24 19:17:05][350849448331138][380 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:17:05][350849448331138][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350849448331138\",\"model\":\"SM-S921W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4877\"}'\'' -e'"" [2025-08-24 19:17:11][350849448331138][5723 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6b70261f-0bef-497a-8575-d6461f90ea53","id":"QR_6b70261f-0bef-497a-8575-d6461f90ea53","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 19:17:11][350849448331138][5879 ms][DEBUG] proc_open done in 5499 ms; code=255; res.len=3343 [2025-08-24 19:17:11][350849448331138][5879 ms][DEBUG] END runCmdUntilRes#1 in 5499 ms [2025-08-24 19:17:11][350849448331138][5879 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 19:17:16][352192669170861][0 ms][INFO] === Request start === [2025-08-24 19:17:16][352192669170861][1 ms][DEBUG] START check_scloud [2025-08-24 19:17:16][352192669170861][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:17:16][352192669170861][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 4653 20653 24623564 230684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:17:16][352192669170861][251 ms][DEBUG] targetPkg: running [2025-08-24 19:17:16][352192669170861][251 ms][DEBUG] END check_scloud in 251 ms [2025-08-24 19:17:16][352192669170861][251 ms][DEBUG] START check_boot_completed [2025-08-24 19:17:16][352192669170861][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:17:16][352192669170861][298 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 19:17:16][352192669170861][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:17:16][352192669170861][346 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 19:17:16][352192669170861][346 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-24 19:17:16][352192669170861][346 ms][DEBUG] rawBody.length=1148 [2025-08-24 19:17:16][352192669170861][346 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192669170861\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9249\"}'\'' -e'"" [2025-08-24 19:17:16][352192669170861][346 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:17:16][352192669170861][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192669170861\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9249\"}'\'' -e'"" [2025-08-24 19:17:21][352192669170861][4672 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7a23d0d6-2d66-44f0-a241-dae5f96889fb","id":"QR_7a23d0d6-2d66-44f0-a241-dae5f96889fb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 19:17:21][352192669170861][4828 ms][DEBUG] proc_open done in 4481 ms; code=255; res.len=3343 [2025-08-24 19:17:21][352192669170861][4828 ms][DEBUG] END runCmdUntilRes#1 in 4481 ms [2025-08-24 19:17:21][352192669170861][4828 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 19:17:23][352938777038642][0 ms][INFO] === Request start === [2025-08-24 19:17:23][352938777038642][1 ms][DEBUG] START check_scloud [2025-08-24 19:17:23][352938777038642][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:17:24][352938777038642][283 ms][DEBUG] SU: done in 283 ms; outu0_a118 4653 20653 24798932 241528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:17:24][352938777038642][283 ms][DEBUG] targetPkg: running [2025-08-24 19:17:24][352938777038642][284 ms][DEBUG] END check_scloud in 283 ms [2025-08-24 19:17:24][352938777038642][284 ms][DEBUG] START check_boot_completed [2025-08-24 19:17:24][352938777038642][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:17:24][352938777038642][328 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 19:17:24][352938777038642][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:17:24][352938777038642][438 ms][DEBUG] SU: done in 109 ms; out [2025-08-24 19:17:24][352938777038642][438 ms][DEBUG] END check_boot_completed in 154 ms [2025-08-24 19:17:24][352938777038642][438 ms][DEBUG] rawBody.length=1148 [2025-08-24 19:17:24][352938777038642][438 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352938777038642\",\"model\":\"SM-A525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3961\"}'\'' -e'"" [2025-08-24 19:17:24][352938777038642][438 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:17:24][352938777038642][438 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352938777038642\",\"model\":\"SM-A525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3961\"}'\'' -e'"" [2025-08-24 19:17:28][352938777038642][4265 ms][DEBUG] proc_open done in 3827 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-24 19:17:28][352938777038642][4265 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-24 19:17:28][352938777038642][4265 ms][WARN] Detected error: Process with pid 4653 either refused to load frida-agent, or terminated during injection [2025-08-24 19:17:28][352938777038642][4265 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 19:17:28][352938777038642][4406 ms][DEBUG] SU: done in 141 ms; out [2025-08-24 19:17:28][352938777038642][4406 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 19:17:28][352938777038642][4406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 19:17:28][352938777038642][4546 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 19:17:28][352938777038642][4546 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 19:17:28][352938777038642][4702 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 19:17:30][352938777038642][6717 ms][DEBUG] START check_boot_completed [2025-08-24 19:17:30][352938777038642][6717 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:17:30][352938777038642][6764 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 19:17:30][352938777038642][6764 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:17:30][352938777038642][6811 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 19:17:30][352938777038642][6811 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 19:17:33][352938777038642][9826 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 19:17:33][352938777038642][9826 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352938777038642\",\"model\":\"SM-A525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3961\"}'\'' -e'"" [2025-08-24 19:17:37][352938777038642][13825 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6f6fb711-6ab2-48a8-87b8-d627cae16de6","id":"QR_6f6fb711-6ab2-48a8-87b8-d627cae16de6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 19:17:37][352938777038642][13981 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-24 19:17:37][352938777038642][13981 ms][DEBUG] END runCmdUntilRes#2 in 4156 ms [2025-08-24 19:17:37][352938777038642][13982 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 19:23:04][354106708165987][1 ms][INFO] === Request start === [2025-08-24 19:23:04][354106708165987][1 ms][DEBUG] START check_scloud [2025-08-24 19:23:04][354106708165987][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:23:05][354106708165987][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 7016 20653 23286052 129948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:23:05][354106708165987][310 ms][DEBUG] targetPkg: running [2025-08-24 19:23:05][354106708165987][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-24 19:23:05][354106708165987][310 ms][DEBUG] START check_boot_completed [2025-08-24 19:23:05][354106708165987][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:23:05][354106708165987][342 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 19:23:05][354106708165987][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:23:05][354106708165987][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 19:23:05][354106708165987][389 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 19:23:05][354106708165987][389 ms][DEBUG] rawBody.length=1149 [2025-08-24 19:23:05][354106708165987][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106708165987\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5350\"}'\'' -e'"" [2025-08-24 19:23:05][354106708165987][389 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:23:05][354106708165987][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106708165987\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5350\"}'\'' -e'"" [2025-08-24 19:23:11][354106708165987][6418 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0d6c1fa-bbb1-4cca-9b34-0dbfe8533e90","id":"QR_b0d6c1fa-bbb1-4cca-9b34-0dbfe8533e90","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 19:23:11][354106708165987][6574 ms][DEBUG] proc_open done in 6185 ms; code=255; res.len=3343 [2025-08-24 19:23:11][354106708165987][6575 ms][DEBUG] END runCmdUntilRes#1 in 6185 ms [2025-08-24 19:23:11][354106708165987][6575 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 19:27:02][352665189507175][1 ms][INFO] === Request start === [2025-08-24 19:27:02][352665189507175][1 ms][DEBUG] START check_scloud [2025-08-24 19:27:02][352665189507175][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:27:03][352665189507175][266 ms][DEBUG] SU: done in 264 ms; outu0_a118 7016 20653 23403912 132628 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:27:03][352665189507175][266 ms][DEBUG] targetPkg: running [2025-08-24 19:27:03][352665189507175][266 ms][DEBUG] END check_scloud in 265 ms [2025-08-24 19:27:03][352665189507175][266 ms][DEBUG] START check_boot_completed [2025-08-24 19:27:03][352665189507175][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:27:03][352665189507175][312 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 19:27:03][352665189507175][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:27:03][352665189507175][360 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 19:27:03][352665189507175][360 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 19:27:03][352665189507175][360 ms][DEBUG] rawBody.length=1148 [2025-08-24 19:27:03][352665189507175][360 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665189507175\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1327\"}'\'' -e'"" [2025-08-24 19:27:03][352665189507175][360 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:27:03][352665189507175][360 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665189507175\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1327\"}'\'' -e'"" [2025-08-24 19:27:07][352665189507175][4514 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_69b2757a-fb64-4ee4-8357-604aa97e3f6c","id":"QR_69b2757a-fb64-4ee4-8357-604aa97e3f6c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 19:27:07][352665189507175][4671 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-24 19:27:07][352665189507175][4671 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-24 19:27:07][352665189507175][4671 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 19:28:04][359021100162745][0 ms][INFO] === Request start === [2025-08-24 19:28:04][359021100162745][1 ms][DEBUG] START check_scloud [2025-08-24 19:28:04][359021100162745][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:28:05][359021100162745][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 7016 20653 23547428 141252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:28:05][359021100162745][307 ms][DEBUG] targetPkg: running [2025-08-24 19:28:05][359021100162745][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-24 19:28:05][359021100162745][307 ms][DEBUG] START check_boot_completed [2025-08-24 19:28:05][359021100162745][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:28:05][359021100162745][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 19:28:05][359021100162745][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:28:05][359021100162745][416 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 19:28:05][359021100162745][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 19:28:05][359021100162745][416 ms][DEBUG] START check_internet [2025-08-24 19:28:05][359021100162745][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 19:28:05][359021100162745][885 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.454/202.454/202.454/0.000 ms\n [2025-08-24 19:28:05][359021100162745][885 ms][DEBUG] check_internet: online [2025-08-24 19:28:05][359021100162745][885 ms][DEBUG] END check_internet in 469 ms [2025-08-24 19:28:05][359021100162745][885 ms][DEBUG] rawBody.length=1149 [2025-08-24 19:28:05][359021100162745][885 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359021100162745\",\"model\":\"SM-N970F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1098\"}'\'' -e'"" [2025-08-24 19:28:05][359021100162745][885 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:28:05][359021100162745][885 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359021100162745\",\"model\":\"SM-N970F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1098\"}'\'' -e'"" [2025-08-24 19:28:11][359021100162745][6368 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b59dc2b1-86ec-45b3-a44d-d191a3dc31cf","id":"QR_b59dc2b1-86ec-45b3-a44d-d191a3dc31cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 19:28:11][359021100162745][6524 ms][DEBUG] proc_open done in 5639 ms; code=255; res.len=3343 [2025-08-24 19:28:11][359021100162745][6524 ms][DEBUG] END runCmdUntilRes#1 in 5639 ms [2025-08-24 19:28:11][359021100162745][6524 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 19:29:05][355915853498780][1 ms][INFO] === Request start === [2025-08-24 19:29:05][355915853498780][1 ms][DEBUG] START check_scloud [2025-08-24 19:29:05][355915853498780][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:29:06][355915853498780][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 7016 20653 23698120 152288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:29:06][355915853498780][318 ms][DEBUG] targetPkg: running [2025-08-24 19:29:06][355915853498780][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-24 19:29:06][355915853498780][318 ms][DEBUG] START check_boot_completed [2025-08-24 19:29:06][355915853498780][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:29:06][355915853498780][365 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 19:29:06][355915853498780][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:29:06][355915853498780][428 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 19:29:06][355915853498780][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 19:29:06][355915853498780][428 ms][DEBUG] rawBody.length=1148 [2025-08-24 19:29:06][355915853498780][428 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355915853498780\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6075\"}'\'' -e'"" [2025-08-24 19:29:06][355915853498780][428 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:29:06][355915853498780][428 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355915853498780\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6075\"}'\'' -e'"" [2025-08-24 19:29:10][355915853498780][4255 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-24 19:29:10][355915853498780][4411 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=115 [2025-08-24 19:29:10][355915853498780][4411 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-24 19:29:10][355915853498780][4411 ms][INFO] SUCCESS response from frida (len=115) [2025-08-24 19:29:10][][0 ms][INFO] === Request start === [2025-08-24 19:29:10][][1 ms][DEBUG] START check_scloud [2025-08-24 19:29:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:29:10][][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 7016 20653 23859024 162856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:29:10][][306 ms][DEBUG] targetPkg: running [2025-08-24 19:29:10][][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-24 19:29:10][][306 ms][DEBUG] START check_boot_completed [2025-08-24 19:29:10][][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:29:10][][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 19:29:10][][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:29:10][][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 19:29:10][][399 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 19:29:10][][400 ms][DEBUG] rawBody.length=1129 [2025-08-24 19:29:10][][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX61BX1GH\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7160\"}'\'' -e'"" [2025-08-24 19:29:10][][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:29:10][][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX61BX1GH\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7160\"}'\'' -e'"" [2025-08-24 19:29:14][][3805 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 19:29:14][][3961 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=107 [2025-08-24 19:29:14][][3961 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-08-24 19:29:14][][3961 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 19:29:16][355915853498780][0 ms][INFO] === Request start === [2025-08-24 19:29:16][355915853498780][1 ms][DEBUG] START check_scloud [2025-08-24 19:29:16][355915853498780][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:29:17][355915853498780][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 7016 20653 24011864 174704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:29:17][355915853498780][314 ms][DEBUG] targetPkg: running [2025-08-24 19:29:17][355915853498780][314 ms][DEBUG] END check_scloud in 314 ms [2025-08-24 19:29:17][355915853498780][314 ms][DEBUG] START check_boot_completed [2025-08-24 19:29:17][355915853498780][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:29:17][355915853498780][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 19:29:17][355915853498780][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:29:17][355915853498780][424 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 19:29:17][355915853498780][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 19:29:17][355915853498780][424 ms][DEBUG] rawBody.length=1149 [2025-08-24 19:29:17][355915853498780][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355915853498780\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2182\"}'\'' -e'"" [2025-08-24 19:29:17][355915853498780][424 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:29:17][355915853498780][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355915853498780\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2182\"}'\'' -e'"" [2025-08-24 19:29:21][355915853498780][4672 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 19:29:21][355915853498780][4829 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=107 [2025-08-24 19:29:21][355915853498780][4829 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-24 19:29:21][355915853498780][4829 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 19:29:22][][0 ms][INFO] === Request start === [2025-08-24 19:29:22][][1 ms][DEBUG] START check_scloud [2025-08-24 19:29:22][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:29:22][][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 7016 20653 24193376 185360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:29:22][][307 ms][DEBUG] targetPkg: running [2025-08-24 19:29:22][][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-24 19:29:22][][307 ms][DEBUG] START check_boot_completed [2025-08-24 19:29:22][][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:29:22][][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 19:29:22][][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:29:22][][416 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 19:29:22][][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 19:29:22][][416 ms][DEBUG] rawBody.length=1130 [2025-08-24 19:29:22][][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCX61BX1GH\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7420\"}'\'' -e'"" [2025-08-24 19:29:22][][417 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:29:22][][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCX61BX1GH\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7420\"}'\'' -e'"" [2025-08-24 19:29:26][][4806 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 19:29:27][][4962 ms][DEBUG] proc_open done in 4545 ms; code=255; res.len=107 [2025-08-24 19:29:27][][4962 ms][DEBUG] END runCmdUntilRes#1 in 4545 ms [2025-08-24 19:29:27][][4962 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 19:31:03][351771924459036][1 ms][INFO] === Request start === [2025-08-24 19:31:03][351771924459036][1 ms][DEBUG] START check_scloud [2025-08-24 19:31:03][351771924459036][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:31:04][351771924459036][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 7016 20653 24286360 196888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:31:04][351771924459036][301 ms][DEBUG] targetPkg: running [2025-08-24 19:31:04][351771924459036][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-24 19:31:04][351771924459036][301 ms][DEBUG] START check_boot_completed [2025-08-24 19:31:04][351771924459036][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:31:04][351771924459036][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 19:31:04][351771924459036][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:31:04][351771924459036][412 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 19:31:04][351771924459036][412 ms][DEBUG] END check_boot_completed in 111 ms [2025-08-24 19:31:04][351771924459036][412 ms][DEBUG] rawBody.length=1148 [2025-08-24 19:31:04][351771924459036][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771924459036\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8300\"}'\'' -e'"" [2025-08-24 19:31:04][351771924459036][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:31:04][351771924459036][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771924459036\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8300\"}'\'' -e'"" [2025-08-24 19:31:08][351771924459036][4612 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eedff808-31a4-45e2-82c3-b21f7f4d9b0b","id":"QR_eedff808-31a4-45e2-82c3-b21f7f4d9b0b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 19:31:08][351771924459036][4768 ms][DEBUG] proc_open done in 4356 ms; code=255; res.len=3343 [2025-08-24 19:31:08][351771924459036][4768 ms][DEBUG] END runCmdUntilRes#1 in 4357 ms [2025-08-24 19:31:08][351771924459036][4769 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 19:34:03][354485115414927][1 ms][INFO] === Request start === [2025-08-24 19:34:03][354485115414927][1 ms][DEBUG] START check_scloud [2025-08-24 19:34:03][354485115414927][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:34:04][354485115414927][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 7016 20653 24428924 204940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:34:04][354485115414927][313 ms][DEBUG] targetPkg: running [2025-08-24 19:34:04][354485115414927][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-24 19:34:04][354485115414927][313 ms][DEBUG] START check_boot_completed [2025-08-24 19:34:04][354485115414927][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:34:04][354485115414927][344 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 19:34:04][354485115414927][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:34:04][354485115414927][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 19:34:04][354485115414927][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 19:34:04][354485115414927][391 ms][DEBUG] START check_internet [2025-08-24 19:34:04][354485115414927][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 19:34:04][354485115414927][922 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.546/201.546/201.546/0.000 ms\n [2025-08-24 19:34:04][354485115414927][923 ms][DEBUG] check_internet: online [2025-08-24 19:34:04][354485115414927][923 ms][DEBUG] END check_internet in 531 ms [2025-08-24 19:34:04][354485115414927][923 ms][DEBUG] rawBody.length=1148 [2025-08-24 19:34:04][354485115414927][923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354485115414927\",\"model\":\"SM-A516N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1296\"}'\'' -e'"" [2025-08-24 19:34:04][354485115414927][923 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:34:04][354485115414927][923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354485115414927\",\"model\":\"SM-A516N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1296\"}'\'' -e'"" [2025-08-24 19:34:09][354485115414927][5452 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4b6ca5d5-72dc-4cbf-823a-f1ea3b1f2c27","id":"QR_4b6ca5d5-72dc-4cbf-823a-f1ea3b1f2c27","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 19:34:09][354485115414927][5609 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-08-24 19:34:09][354485115414927][5609 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-08-24 19:34:09][354485115414927][5609 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 19:34:11][355490898153238][0 ms][INFO] === Request start === [2025-08-24 19:34:11][355490898153238][0 ms][DEBUG] START check_scloud [2025-08-24 19:34:11][355490898153238][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:34:12][355490898153238][279 ms][DEBUG] SU: done in 279 ms; outu0_a118 7016 20653 24594052 213564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:34:12][355490898153238][279 ms][DEBUG] targetPkg: running [2025-08-24 19:34:12][355490898153238][279 ms][DEBUG] END check_scloud in 279 ms [2025-08-24 19:34:12][355490898153238][279 ms][DEBUG] START check_boot_completed [2025-08-24 19:34:12][355490898153238][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:34:12][355490898153238][310 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 19:34:12][355490898153238][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:34:12][355490898153238][357 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 19:34:12][355490898153238][357 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 19:34:12][355490898153238][357 ms][DEBUG] START check_internet [2025-08-24 19:34:12][355490898153238][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 19:34:12][355490898153238][701 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=238 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 238.600/238.600/238.600/0.000 ms\n [2025-08-24 19:34:12][355490898153238][701 ms][DEBUG] check_internet: online [2025-08-24 19:34:12][355490898153238][701 ms][DEBUG] END check_internet in 344 ms [2025-08-24 19:34:12][355490898153238][701 ms][DEBUG] rawBody.length=1148 [2025-08-24 19:34:12][355490898153238][702 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490898153238\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2400\"}'\'' -e'"" [2025-08-24 19:34:12][355490898153238][702 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:34:12][355490898153238][702 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490898153238\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2400\"}'\'' -e'"" [2025-08-24 19:34:16][355490898153238][4528 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bf7a5420-27d3-4237-8ccb-8f91600db50e","id":"QR_bf7a5420-27d3-4237-8ccb-8f91600db50e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 19:34:16][355490898153238][4684 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-24 19:34:16][355490898153238][4684 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-24 19:34:16][355490898153238][4685 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 19:37:04][352058601438254][1 ms][INFO] === Request start === [2025-08-24 19:37:04][352058601438254][1 ms][DEBUG] START check_scloud [2025-08-24 19:37:04][352058601438254][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:37:05][352058601438254][267 ms][DEBUG] SU: done in 265 ms; outu0_a118 7016 20653 24695620 219296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:37:05][352058601438254][267 ms][DEBUG] targetPkg: running [2025-08-24 19:37:05][352058601438254][267 ms][DEBUG] END check_scloud in 266 ms [2025-08-24 19:37:05][352058601438254][267 ms][DEBUG] START check_boot_completed [2025-08-24 19:37:05][352058601438254][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:37:05][352058601438254][298 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 19:37:05][352058601438254][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:37:05][352058601438254][345 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 19:37:05][352058601438254][345 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 19:37:05][352058601438254][345 ms][DEBUG] rawBody.length=1149 [2025-08-24 19:37:05][352058601438254][345 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352058601438254\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7476\"}'\'' -e'"" [2025-08-24 19:37:05][352058601438254][345 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:37:05][352058601438254][345 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352058601438254\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7476\"}'\'' -e'"" [2025-08-24 19:37:09][352058601438254][4407 ms][DEBUG] proc_open done in 4062 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-24 19:37:09][352058601438254][4407 ms][DEBUG] END runCmdUntilRes#1 in 4062 ms [2025-08-24 19:37:09][352058601438254][4407 ms][WARN] Detected error: Process with pid 7016 either refused to load frida-agent, or terminated during injection [2025-08-24 19:37:09][352058601438254][4407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 19:37:09][352058601438254][4563 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 19:37:09][352058601438254][4563 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 19:37:09][352058601438254][4563 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 19:37:09][352058601438254][4689 ms][DEBUG] SU: done in 126 ms; out [2025-08-24 19:37:09][352058601438254][4689 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 19:37:09][352058601438254][4860 ms][DEBUG] SU: done in 171 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 19:37:11][352058601438254][6874 ms][DEBUG] START check_boot_completed [2025-08-24 19:37:11][352058601438254][6875 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:37:11][352058601438254][6921 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 19:37:11][352058601438254][6922 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:37:11][352058601438254][6968 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 19:37:11][352058601438254][6969 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 19:37:14][352058601438254][9983 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 19:37:14][352058601438254][9983 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352058601438254\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7476\"}'\'' -e'"" [2025-08-24 19:37:19][352058601438254][14779 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bd788193-5dd9-413f-9608-bec7db9f95e6","id":"QR_bd788193-5dd9-413f-9608-bec7db9f95e6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 19:37:19][352058601438254][14935 ms][DEBUG] proc_open done in 4952 ms; code=255; res.len=3343 [2025-08-24 19:37:19][352058601438254][14935 ms][DEBUG] END runCmdUntilRes#2 in 4952 ms [2025-08-24 19:37:19][352058601438254][14935 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 19:41:04][351065780872253][1 ms][INFO] === Request start === [2025-08-24 19:41:04][351065780872253][1 ms][DEBUG] START check_scloud [2025-08-24 19:41:04][351065780872253][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:41:04][351065780872253][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 9586 20653 23318344 128760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:41:04][351065780872253][298 ms][DEBUG] targetPkg: running [2025-08-24 19:41:04][351065780872253][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-24 19:41:04][351065780872253][298 ms][DEBUG] START check_boot_completed [2025-08-24 19:41:04][351065780872253][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:41:05][351065780872253][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 19:41:05][351065780872253][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:41:05][351065780872253][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 19:41:05][351065780872253][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 19:41:05][351065780872253][377 ms][DEBUG] rawBody.length=1149 [2025-08-24 19:41:05][351065780872253][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351065780872253\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3912\"}'\'' -e'"" [2025-08-24 19:41:05][351065780872253][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:41:05][351065780872253][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351065780872253\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3912\"}'\'' -e'"" [2025-08-24 19:41:10][351065780872253][6125 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_326a1ed8-c159-4536-88d5-71065d9f509f","id":"QR_326a1ed8-c159-4536-88d5-71065d9f509f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 19:41:10][351065780872253][6281 ms][DEBUG] proc_open done in 5904 ms; code=255; res.len=3343 [2025-08-24 19:41:10][351065780872253][6281 ms][DEBUG] END runCmdUntilRes#1 in 5904 ms [2025-08-24 19:41:10][351065780872253][6281 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 19:42:05][350341124568944][0 ms][INFO] === Request start === [2025-08-24 19:42:05][350341124568944][1 ms][DEBUG] START check_scloud [2025-08-24 19:42:05][350341124568944][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:42:05][350341124568944][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 9586 20653 23428140 140124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:42:05][350341124568944][316 ms][DEBUG] targetPkg: running [2025-08-24 19:42:05][350341124568944][316 ms][DEBUG] END check_scloud in 316 ms [2025-08-24 19:42:05][350341124568944][317 ms][DEBUG] START check_boot_completed [2025-08-24 19:42:05][350341124568944][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:42:05][350341124568944][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 19:42:05][350341124568944][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:42:05][350341124568944][426 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 19:42:05][350341124568944][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 19:42:05][350341124568944][426 ms][DEBUG] START check_internet [2025-08-24 19:42:05][350341124568944][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 19:42:05][350341124568944][957 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.053/203.053/203.053/0.000 ms\n [2025-08-24 19:42:05][350341124568944][957 ms][DEBUG] check_internet: online [2025-08-24 19:42:05][350341124568944][957 ms][DEBUG] END check_internet in 531 ms [2025-08-24 19:42:05][350341124568944][957 ms][DEBUG] rawBody.length=1149 [2025-08-24 19:42:05][350341124568944][957 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341124568944\",\"model\":\"SM-M135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3810\"}'\'' -e'"" [2025-08-24 19:42:05][350341124568944][957 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:42:05][350341124568944][957 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341124568944\",\"model\":\"SM-M135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3810\"}'\'' -e'"" [2025-08-24 19:42:11][350341124568944][6612 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_732d6311-0b8d-49d6-a73b-eb4d5d0a5336","id":"QR_732d6311-0b8d-49d6-a73b-eb4d5d0a5336","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 19:42:11][350341124568944][6768 ms][DEBUG] proc_open done in 5811 ms; code=255; res.len=3343 [2025-08-24 19:42:11][350341124568944][6768 ms][DEBUG] END runCmdUntilRes#1 in 5811 ms [2025-08-24 19:42:11][350341124568944][6768 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 19:46:03][350536258350684][1 ms][INFO] === Request start === [2025-08-24 19:46:03][350536258350684][1 ms][DEBUG] START check_scloud [2025-08-24 19:46:03][350536258350684][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:46:03][350536258350684][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 9586 20653 23575724 151084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:46:03][350536258350684][314 ms][DEBUG] targetPkg: running [2025-08-24 19:46:03][350536258350684][314 ms][DEBUG] END check_scloud in 312 ms [2025-08-24 19:46:03][350536258350684][314 ms][DEBUG] START check_boot_completed [2025-08-24 19:46:03][350536258350684][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:46:03][350536258350684][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 19:46:03][350536258350684][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:46:04][350536258350684][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 19:46:04][350536258350684][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 19:46:04][350536258350684][407 ms][DEBUG] START check_internet [2025-08-24 19:46:04][350536258350684][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 19:46:04][350536258350684][860 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.297/202.297/202.297/0.000 ms\n [2025-08-24 19:46:04][350536258350684][861 ms][DEBUG] check_internet: online [2025-08-24 19:46:04][350536258350684][861 ms][DEBUG] END check_internet in 453 ms [2025-08-24 19:46:04][350536258350684][861 ms][DEBUG] rawBody.length=1148 [2025-08-24 19:46:04][350536258350684][861 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536258350684\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7210\"}'\'' -e'"" [2025-08-24 19:46:04][350536258350684][861 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:46:04][350536258350684][861 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536258350684\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7210\"}'\'' -e'"" [2025-08-24 19:46:08][350536258350684][5312 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d8a329d0-ca62-4927-971b-8f405f3b96bb","id":"QR_d8a329d0-ca62-4927-971b-8f405f3b96bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 19:46:09][350536258350684][5468 ms][DEBUG] proc_open done in 4607 ms; code=255; res.len=3343 [2025-08-24 19:46:09][350536258350684][5468 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-08-24 19:46:09][350536258350684][5468 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 19:47:03][357260750363672][0 ms][INFO] === Request start === [2025-08-24 19:47:03][357260750363672][1 ms][DEBUG] START check_scloud [2025-08-24 19:47:03][357260750363672][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:47:04][357260750363672][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 9586 20653 23707984 162536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:47:04][357260750363672][300 ms][DEBUG] targetPkg: running [2025-08-24 19:47:04][357260750363672][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-24 19:47:04][357260750363672][300 ms][DEBUG] START check_boot_completed [2025-08-24 19:47:04][357260750363672][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:47:04][357260750363672][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 19:47:04][357260750363672][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:47:04][357260750363672][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 19:47:04][357260750363672][393 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 19:47:04][357260750363672][393 ms][DEBUG] rawBody.length=1148 [2025-08-24 19:47:04][357260750363672][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357260750363672\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3191\"}'\'' -e'"" [2025-08-24 19:47:04][357260750363672][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:47:04][357260750363672][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357260750363672\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3191\"}'\'' -e'"" [2025-08-24 19:47:08][357260750363672][4330 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_482b37a1-a0bb-40c6-9ede-ced27a84eef3","id":"QR_482b37a1-a0bb-40c6-9ede-ced27a84eef3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 19:47:08][357260750363672][4486 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-08-24 19:47:08][357260750363672][4486 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-08-24 19:47:08][357260750363672][4486 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 19:48:03][357211248890537][1 ms][INFO] === Request start === [2025-08-24 19:48:03][357211248890537][1 ms][DEBUG] START check_scloud [2025-08-24 19:48:03][357211248890537][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:48:04][357211248890537][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 9586 20653 23882164 173436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:48:04][357211248890537][298 ms][DEBUG] targetPkg: running [2025-08-24 19:48:04][357211248890537][299 ms][DEBUG] END check_scloud in 297 ms [2025-08-24 19:48:04][357211248890537][299 ms][DEBUG] START check_boot_completed [2025-08-24 19:48:04][357211248890537][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:48:04][357211248890537][345 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 19:48:04][357211248890537][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:48:04][357211248890537][423 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 19:48:04][357211248890537][423 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-24 19:48:04][357211248890537][423 ms][DEBUG] START check_internet [2025-08-24 19:48:04][357211248890537][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 19:48:04][357211248890537][798 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=259 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 259.984/259.984/259.984/0.000 ms\n [2025-08-24 19:48:04][357211248890537][798 ms][DEBUG] check_internet: online [2025-08-24 19:48:04][357211248890537][798 ms][DEBUG] END check_internet in 375 ms [2025-08-24 19:48:04][357211248890537][798 ms][DEBUG] rawBody.length=1148 [2025-08-24 19:48:04][357211248890537][798 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211248890537\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2276\"}'\'' -e'"" [2025-08-24 19:48:04][357211248890537][799 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:48:04][357211248890537][799 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211248890537\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2276\"}'\'' -e'"" [2025-08-24 19:48:08][357211248890537][4953 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_551e1b04-808a-4962-991e-497c4b7cf3d9","id":"QR_551e1b04-808a-4962-991e-497c4b7cf3d9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 19:48:09][357211248890537][5110 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-24 19:48:09][357211248890537][5110 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-24 19:48:09][357211248890537][5110 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 19:55:03][350938289606359][1 ms][INFO] === Request start === [2025-08-24 19:55:03][350938289606359][1 ms][DEBUG] START check_scloud [2025-08-24 19:55:03][350938289606359][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:55:03][350938289606359][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 9586 20653 24017356 185736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:55:03][350938289606359][305 ms][DEBUG] targetPkg: running [2025-08-24 19:55:03][350938289606359][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-24 19:55:03][350938289606359][306 ms][DEBUG] START check_boot_completed [2025-08-24 19:55:03][350938289606359][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:55:03][350938289606359][337 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 19:55:03][350938289606359][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:55:03][350938289606359][399 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 19:55:03][350938289606359][400 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 19:55:03][350938289606359][400 ms][DEBUG] rawBody.length=1148 [2025-08-24 19:55:03][350938289606359][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938289606359\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5701\"}'\'' -e'"" [2025-08-24 19:55:03][350938289606359][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:55:03][350938289606359][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938289606359\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5701\"}'\'' -e'"" [2025-08-24 19:55:07][350938289606359][4523 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8a2804d2-c8f5-4c48-ab54-efcb5b31a4a8","id":"QR_8a2804d2-c8f5-4c48-ab54-efcb5b31a4a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 19:55:07][350938289606359][4679 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-24 19:55:07][350938289606359][4679 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-24 19:55:07][350938289606359][4680 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 19:57:03][352053265843451][0 ms][INFO] === Request start === [2025-08-24 19:57:03][352053265843451][1 ms][DEBUG] START check_scloud [2025-08-24 19:57:03][352053265843451][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 19:57:03][352053265843451][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 9586 20653 24172668 196204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 19:57:03][352053265843451][314 ms][DEBUG] targetPkg: running [2025-08-24 19:57:03][352053265843451][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-24 19:57:03][352053265843451][315 ms][DEBUG] START check_boot_completed [2025-08-24 19:57:03][352053265843451][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 19:57:03][352053265843451][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 19:57:03][352053265843451][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 19:57:03][352053265843451][408 ms][DEBUG] SU: done in 46 ms; out [2025-08-24 19:57:03][352053265843451][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 19:57:03][352053265843451][408 ms][DEBUG] rawBody.length=1148 [2025-08-24 19:57:03][352053265843451][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053265843451\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8982\"}'\'' -e'"" [2025-08-24 19:57:03][352053265843451][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 19:57:03][352053265843451][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053265843451\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8982\"}'\'' -e'"" [2025-08-24 19:57:07][352053265843451][4626 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e241f144-0c68-4e63-81ff-2b8f3c717cc1","id":"QR_e241f144-0c68-4e63-81ff-2b8f3c717cc1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 19:57:08][352053265843451][4782 ms][DEBUG] proc_open done in 4374 ms; code=255; res.len=3343 [2025-08-24 19:57:08][352053265843451][4782 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-24 19:57:08][352053265843451][4782 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:01:05][351672492903811][1 ms][INFO] === Request start === [2025-08-24 20:01:05][351672492903811][1 ms][DEBUG] START check_scloud [2025-08-24 20:01:05][351672492903811][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:01:05][351672492903811][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 9586 20653 24290656 207356 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:01:05][351672492903811][307 ms][DEBUG] targetPkg: running [2025-08-24 20:01:05][351672492903811][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-24 20:01:05][351672492903811][307 ms][DEBUG] START check_boot_completed [2025-08-24 20:01:05][351672492903811][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:01:05][351672492903811][337 ms][DEBUG] ADB: done in 30 ms; out [2025-08-24 20:01:05][351672492903811][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:01:05][351672492903811][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 20:01:05][351672492903811][384 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-24 20:01:05][351672492903811][384 ms][DEBUG] rawBody.length=1149 [2025-08-24 20:01:05][351672492903811][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351672492903811\",\"model\":\"SM-S908W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5661\"}'\'' -e'"" [2025-08-24 20:01:05][351672492903811][384 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:01:05][351672492903811][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351672492903811\",\"model\":\"SM-S908W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5661\"}'\'' -e'"" [2025-08-24 20:01:10][351672492903811][5101 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-24 20:01:10][351672492903811][5258 ms][DEBUG] proc_open done in 4874 ms; code=255; res.len=115 [2025-08-24 20:01:10][351672492903811][5258 ms][DEBUG] END runCmdUntilRes#1 in 4874 ms [2025-08-24 20:01:10][351672492903811][5258 ms][INFO] SUCCESS response from frida (len=115) [2025-08-24 20:01:10][][0 ms][INFO] === Request start === [2025-08-24 20:01:10][][1 ms][DEBUG] START check_scloud [2025-08-24 20:01:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:01:11][][258 ms][DEBUG] SU: done in 258 ms; outu0_a118 9586 20653 24457704 218944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:01:11][][258 ms][DEBUG] targetPkg: running [2025-08-24 20:01:11][][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-24 20:01:11][][259 ms][DEBUG] START check_boot_completed [2025-08-24 20:01:11][][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:01:11][][305 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 20:01:11][][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:01:11][][352 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 20:01:11][][352 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 20:01:11][][352 ms][DEBUG] rawBody.length=1130 [2025-08-24 20:01:11][][352 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CTB1ZYT8L\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5505\"}'\'' -e'"" [2025-08-24 20:01:11][][352 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:01:11][][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CTB1ZYT8L\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5505\"}'\'' -e'"" [2025-08-24 20:01:14][][4039 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 20:01:15][][4195 ms][DEBUG] proc_open done in 3843 ms; code=255; res.len=107 [2025-08-24 20:01:15][][4195 ms][DEBUG] END runCmdUntilRes#1 in 3843 ms [2025-08-24 20:01:15][][4195 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 20:01:15][351672492903811][0 ms][INFO] === Request start === [2025-08-24 20:01:15][351672492903811][1 ms][DEBUG] START check_scloud [2025-08-24 20:01:15][351672492903811][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:01:16][351672492903811][289 ms][DEBUG] SU: done in 289 ms; outu0_a118 9586 20653 24604272 229380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:01:16][351672492903811][289 ms][DEBUG] targetPkg: running [2025-08-24 20:01:16][351672492903811][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-24 20:01:16][351672492903811][290 ms][DEBUG] START check_boot_completed [2025-08-24 20:01:16][351672492903811][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:01:16][351672492903811][336 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 20:01:16][351672492903811][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:01:16][351672492903811][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 20:01:16][351672492903811][383 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 20:01:16][351672492903811][383 ms][DEBUG] rawBody.length=1148 [2025-08-24 20:01:16][351672492903811][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351672492903811\",\"model\":\"SM-S908W\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1811\"}'\'' -e'"" [2025-08-24 20:01:16][351672492903811][384 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:01:16][351672492903811][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351672492903811\",\"model\":\"SM-S908W\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1811\"}'\'' -e'"" [2025-08-24 20:01:20][351672492903811][4413 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8aeff95-e37a-494a-8453-56b0f68c8e57","id":"QR_e8aeff95-e37a-494a-8453-56b0f68c8e57","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:01:20][351672492903811][4569 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-24 20:01:20][351672492903811][4570 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-24 20:01:20][351672492903811][4570 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:03:04][353722793069875][0 ms][INFO] === Request start === [2025-08-24 20:03:04][353722793069875][1 ms][DEBUG] START check_scloud [2025-08-24 20:03:04][353722793069875][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:03:04][353722793069875][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 9586 20653 24701712 241552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:03:04][353722793069875][308 ms][DEBUG] targetPkg: running [2025-08-24 20:03:04][353722793069875][308 ms][DEBUG] END check_scloud in 308 ms [2025-08-24 20:03:04][353722793069875][308 ms][DEBUG] START check_boot_completed [2025-08-24 20:03:04][353722793069875][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:03:05][353722793069875][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 20:03:05][353722793069875][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:03:05][353722793069875][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 20:03:05][353722793069875][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 20:03:05][353722793069875][418 ms][DEBUG] rawBody.length=1149 [2025-08-24 20:03:05][353722793069875][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722793069875\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5152\"}'\'' -e'"" [2025-08-24 20:03:05][353722793069875][418 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:03:05][353722793069875][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722793069875\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5152\"}'\'' -e'"" [2025-08-24 20:03:08][353722793069875][4120 ms][DEBUG] proc_open done in 3702 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-24 20:03:08][353722793069875][4120 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-24 20:03:08][353722793069875][4120 ms][WARN] Detected error: Process with pid 9586 either refused to load frida-agent, or terminated during injection [2025-08-24 20:03:08][353722793069875][4120 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 20:03:08][353722793069875][4262 ms][DEBUG] SU: done in 143 ms; out [2025-08-24 20:03:08][353722793069875][4263 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 20:03:08][353722793069875][4263 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 20:03:09][353722793069875][4385 ms][DEBUG] SU: done in 122 ms; out [2025-08-24 20:03:09][353722793069875][4385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 20:03:09][353722793069875][4526 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 20:03:11][353722793069875][6541 ms][DEBUG] START check_boot_completed [2025-08-24 20:03:11][353722793069875][6541 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:03:11][353722793069875][6588 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 20:03:11][353722793069875][6588 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:03:11][353722793069875][6635 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 20:03:11][353722793069875][6635 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 20:03:14][353722793069875][9650 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 20:03:14][353722793069875][9650 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722793069875\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5152\"}'\'' -e'"" [2025-08-24 20:03:19][353722793069875][14758 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6c6f1871-2be6-4515-a891-9f4facb612dd","id":"QR_6c6f1871-2be6-4515-a891-9f4facb612dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:03:19][353722793069875][14914 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-08-24 20:03:19][353722793069875][14914 ms][DEBUG] END runCmdUntilRes#2 in 5264 ms [2025-08-24 20:03:19][353722793069875][14914 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:08:05][350456240989228][1 ms][INFO] === Request start === [2025-08-24 20:08:05][350456240989228][1 ms][DEBUG] START check_scloud [2025-08-24 20:08:05][350456240989228][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:08:05][350456240989228][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 11552 20653 23354752 128408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:08:05][350456240989228][313 ms][DEBUG] targetPkg: running [2025-08-24 20:08:05][350456240989228][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-24 20:08:05][350456240989228][313 ms][DEBUG] START check_boot_completed [2025-08-24 20:08:05][350456240989228][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:08:05][350456240989228][344 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 20:08:05][350456240989228][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:08:05][350456240989228][392 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 20:08:05][350456240989228][392 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 20:08:05][350456240989228][392 ms][DEBUG] START check_internet [2025-08-24 20:08:05][350456240989228][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 20:08:06][350456240989228][938 ms][DEBUG] SU: done in 546 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.589/202.589/202.589/0.000 ms\n [2025-08-24 20:08:06][350456240989228][938 ms][DEBUG] check_internet: online [2025-08-24 20:08:06][350456240989228][938 ms][DEBUG] END check_internet in 546 ms [2025-08-24 20:08:06][350456240989228][938 ms][DEBUG] rawBody.length=1149 [2025-08-24 20:08:06][350456240989228][938 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350456240989228\",\"model\":\"SM-G781B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8773\"}'\'' -e'"" [2025-08-24 20:08:06][350456240989228][938 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:08:06][350456240989228][938 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350456240989228\",\"model\":\"SM-G781B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8773\"}'\'' -e'"" [2025-08-24 20:08:13][350456240989228][8655 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c59335fe-2388-4284-8746-63f250c31eca","id":"QR_c59335fe-2388-4284-8746-63f250c31eca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:08:13][350456240989228][8811 ms][DEBUG] proc_open done in 7872 ms; code=255; res.len=3343 [2025-08-24 20:08:13][350456240989228][8811 ms][DEBUG] END runCmdUntilRes#1 in 7873 ms [2025-08-24 20:08:13][350456240989228][8811 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:08:20][351326801653803][0 ms][INFO] === Request start === [2025-08-24 20:08:20][351326801653803][1 ms][DEBUG] START check_scloud [2025-08-24 20:08:20][351326801653803][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:08:20][351326801653803][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 11552 20653 23528072 139368 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:08:20][351326801653803][313 ms][DEBUG] targetPkg: running [2025-08-24 20:08:20][351326801653803][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-24 20:08:20][351326801653803][313 ms][DEBUG] START check_boot_completed [2025-08-24 20:08:20][351326801653803][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:08:21][351326801653803][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 20:08:21][351326801653803][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:08:21][351326801653803][422 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 20:08:21][351326801653803][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 20:08:21][351326801653803][422 ms][DEBUG] START check_internet [2025-08-24 20:08:21][351326801653803][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 20:08:21][351326801653803][721 ms][DEBUG] SU: done in 298 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=158 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 158.108/158.108/158.108/0.000 ms\n [2025-08-24 20:08:21][351326801653803][721 ms][DEBUG] check_internet: online [2025-08-24 20:08:21][351326801653803][721 ms][DEBUG] END check_internet in 299 ms [2025-08-24 20:08:21][351326801653803][721 ms][DEBUG] rawBody.length=1149 [2025-08-24 20:08:21][351326801653803][721 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351326801653803\",\"model\":\"SM-A336M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6419\"}'\'' -e'"" [2025-08-24 20:08:21][351326801653803][721 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:08:21][351326801653803][721 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351326801653803\",\"model\":\"SM-A336M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6419\"}'\'' -e'"" [2025-08-24 20:08:26][351326801653803][5780 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_257e939b-7aa6-4298-96b3-0da6fa6d4c9a","id":"QR_257e939b-7aa6-4298-96b3-0da6fa6d4c9a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:08:26][351326801653803][5936 ms][DEBUG] proc_open done in 5215 ms; code=255; res.len=3343 [2025-08-24 20:08:26][351326801653803][5936 ms][DEBUG] END runCmdUntilRes#1 in 5215 ms [2025-08-24 20:08:26][351326801653803][5936 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:10:03][350100284635020][0 ms][INFO] === Request start === [2025-08-24 20:10:03][350100284635020][1 ms][DEBUG] START check_scloud [2025-08-24 20:10:03][350100284635020][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:10:03][350100284635020][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 11552 20653 23662152 151244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:10:03][350100284635020][298 ms][DEBUG] targetPkg: running [2025-08-24 20:10:03][350100284635020][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-24 20:10:03][350100284635020][298 ms][DEBUG] START check_boot_completed [2025-08-24 20:10:03][350100284635020][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:10:03][350100284635020][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 20:10:03][350100284635020][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:10:03][350100284635020][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 20:10:03][350100284635020][391 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 20:10:03][350100284635020][391 ms][DEBUG] START check_internet [2025-08-24 20:10:03][350100284635020][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 20:10:04][350100284635020][719 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=211 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 211.306/211.306/211.306/0.000 ms\n [2025-08-24 20:10:04][350100284635020][719 ms][DEBUG] check_internet: online [2025-08-24 20:10:04][350100284635020][719 ms][DEBUG] END check_internet in 328 ms [2025-08-24 20:10:04][350100284635020][720 ms][DEBUG] rawBody.length=1148 [2025-08-24 20:10:04][350100284635020][720 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100284635020\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8389\"}'\'' -e'"" [2025-08-24 20:10:04][350100284635020][720 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:10:04][350100284635020][720 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100284635020\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8389\"}'\'' -e'"" [2025-08-24 20:10:08][350100284635020][4796 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e45e6196-9db5-4600-9c06-592ca8700e7c","id":"QR_e45e6196-9db5-4600-9c06-592ca8700e7c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:10:08][350100284635020][4952 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-24 20:10:08][350100284635020][4952 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-24 20:10:08][350100284635020][4953 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:20:03][350832442489003][1 ms][INFO] === Request start === [2025-08-24 20:20:03][350832442489003][1 ms][DEBUG] START check_scloud [2025-08-24 20:20:03][350832442489003][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:20:03][350832442489003][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 11552 20653 23772640 162568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:20:03][350832442489003][316 ms][DEBUG] targetPkg: running [2025-08-24 20:20:03][350832442489003][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-24 20:20:03][350832442489003][316 ms][DEBUG] START check_boot_completed [2025-08-24 20:20:03][350832442489003][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:20:03][350832442489003][347 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 20:20:03][350832442489003][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:20:04][350832442489003][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 20:20:04][350832442489003][394 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 20:20:04][350832442489003][394 ms][DEBUG] START check_internet [2025-08-24 20:20:04][350832442489003][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 20:20:04][350832442489003][941 ms][DEBUG] SU: done in 546 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.176/203.176/203.176/0.000 ms\n [2025-08-24 20:20:04][350832442489003][941 ms][DEBUG] check_internet: online [2025-08-24 20:20:04][350832442489003][941 ms][DEBUG] END check_internet in 547 ms [2025-08-24 20:20:04][350832442489003][941 ms][DEBUG] rawBody.length=1148 [2025-08-24 20:20:04][350832442489003][941 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442489003\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4999\"}'\'' -e'"" [2025-08-24 20:20:04][350832442489003][941 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:20:04][350832442489003][941 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442489003\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4999\"}'\'' -e'"" [2025-08-24 20:20:08][350832442489003][4909 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7551b516-6f9a-4191-af2e-9954842cb3ac","id":"QR_7551b516-6f9a-4191-af2e-9954842cb3ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:20:08][350832442489003][5065 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-08-24 20:20:08][350832442489003][5065 ms][DEBUG] END runCmdUntilRes#1 in 4123 ms [2025-08-24 20:20:08][350832442489003][5065 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:21:04][354356401214398][0 ms][INFO] === Request start === [2025-08-24 20:21:04][354356401214398][1 ms][DEBUG] START check_scloud [2025-08-24 20:21:04][354356401214398][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:21:05][354356401214398][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 11552 20653 23904080 173292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:21:05][354356401214398][319 ms][DEBUG] targetPkg: running [2025-08-24 20:21:05][354356401214398][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-24 20:21:05][354356401214398][319 ms][DEBUG] START check_boot_completed [2025-08-24 20:21:05][354356401214398][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:21:05][354356401214398][366 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 20:21:05][354356401214398][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:21:05][354356401214398][412 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 20:21:05][354356401214398][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 20:21:05][354356401214398][412 ms][DEBUG] rawBody.length=1149 [2025-08-24 20:21:05][354356401214398][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354356401214398\",\"model\":\"SM-A136U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4472\"}'\'' -e'"" [2025-08-24 20:21:05][354356401214398][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:21:05][354356401214398][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354356401214398\",\"model\":\"SM-A136U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4472\"}'\'' -e'"" [2025-08-24 20:21:10][354356401214398][5677 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a606cd96-41ff-42a4-ad72-3359c4f0dc02","id":"QR_a606cd96-41ff-42a4-ad72-3359c4f0dc02","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:21:10][354356401214398][5833 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-08-24 20:21:10][354356401214398][5833 ms][DEBUG] END runCmdUntilRes#1 in 5421 ms [2025-08-24 20:21:10][354356401214398][5833 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:24:05][354103131109419][1 ms][INFO] === Request start === [2025-08-24 20:24:05][354103131109419][1 ms][DEBUG] START check_scloud [2025-08-24 20:24:05][354103131109419][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:24:05][354103131109419][322 ms][DEBUG] SU: done in 320 ms; outu0_a118 11552 20653 24031248 141236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:24:05][354103131109419][322 ms][DEBUG] targetPkg: running [2025-08-24 20:24:05][354103131109419][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-24 20:24:05][354103131109419][322 ms][DEBUG] START check_boot_completed [2025-08-24 20:24:05][354103131109419][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:24:05][354103131109419][368 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 20:24:05][354103131109419][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:24:05][354103131109419][415 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 20:24:05][354103131109419][415 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 20:24:05][354103131109419][415 ms][DEBUG] START check_internet [2025-08-24 20:24:05][354103131109419][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 20:24:06][354103131109419][978 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.042/202.042/202.042/0.000 ms\n [2025-08-24 20:24:06][354103131109419][978 ms][DEBUG] check_internet: online [2025-08-24 20:24:06][354103131109419][978 ms][DEBUG] END check_internet in 562 ms [2025-08-24 20:24:06][354103131109419][978 ms][DEBUG] rawBody.length=1149 [2025-08-24 20:24:06][354103131109419][978 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354103131109419\",\"model\":\"SM-S901E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9574\"}'\'' -e'"" [2025-08-24 20:24:06][354103131109419][978 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:24:06][354103131109419][978 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354103131109419\",\"model\":\"SM-S901E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9574\"}'\'' -e'"" [2025-08-24 20:24:13][354103131109419][7882 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_64257924-ab79-43ca-80eb-7c4902ada05a","id":"QR_64257924-ab79-43ca-80eb-7c4902ada05a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:24:13][354103131109419][8038 ms][DEBUG] proc_open done in 7061 ms; code=255; res.len=3343 [2025-08-24 20:24:13][354103131109419][8038 ms][DEBUG] END runCmdUntilRes#1 in 7061 ms [2025-08-24 20:24:13][354103131109419][8038 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:31:03][356513702502628][1 ms][INFO] === Request start === [2025-08-24 20:31:03][356513702502628][1 ms][DEBUG] START check_scloud [2025-08-24 20:31:03][356513702502628][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:31:04][356513702502628][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 11552 20653 24178728 150776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:31:04][356513702502628][309 ms][DEBUG] targetPkg: running [2025-08-24 20:31:04][356513702502628][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-24 20:31:04][356513702502628][309 ms][DEBUG] START check_boot_completed [2025-08-24 20:31:04][356513702502628][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:31:04][356513702502628][354 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 20:31:04][356513702502628][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:31:04][356513702502628][403 ms][DEBUG] SU: done in 49 ms; out [2025-08-24 20:31:04][356513702502628][403 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 20:31:04][356513702502628][403 ms][DEBUG] rawBody.length=1148 [2025-08-24 20:31:04][356513702502628][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356513702502628\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8065\"}'\'' -e'"" [2025-08-24 20:31:04][356513702502628][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:31:04][356513702502628][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356513702502628\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8065\"}'\'' -e'"" [2025-08-24 20:31:08][356513702502628][4869 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1f1718b5-ce0e-48da-9116-15e99b9328e4","id":"QR_1f1718b5-ce0e-48da-9116-15e99b9328e4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:31:08][356513702502628][5025 ms][DEBUG] proc_open done in 4621 ms; code=255; res.len=3343 [2025-08-24 20:31:08][356513702502628][5025 ms][DEBUG] END runCmdUntilRes#1 in 4621 ms [2025-08-24 20:31:08][356513702502628][5025 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:31:12][350496873776799][0 ms][INFO] === Request start === [2025-08-24 20:31:12][350496873776799][1 ms][DEBUG] START check_scloud [2025-08-24 20:31:12][350496873776799][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:31:12][350496873776799][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 11552 20653 24332540 160220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:31:12][350496873776799][319 ms][DEBUG] targetPkg: running [2025-08-24 20:31:12][350496873776799][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-24 20:31:12][350496873776799][319 ms][DEBUG] START check_boot_completed [2025-08-24 20:31:12][350496873776799][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:31:12][350496873776799][366 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 20:31:12][350496873776799][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:31:12][350496873776799][413 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 20:31:12][350496873776799][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 20:31:12][350496873776799][413 ms][DEBUG] rawBody.length=1149 [2025-08-24 20:31:12][350496873776799][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350496873776799\",\"model\":\"SM-S928U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LLA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9972\"}'\'' -e'"" [2025-08-24 20:31:12][350496873776799][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:31:12][350496873776799][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350496873776799\",\"model\":\"SM-S928U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LLA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9972\"}'\'' -e'"" [2025-08-24 20:31:20][350496873776799][8395 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b3a39371-b51c-4f2f-a833-91976eb32f76","id":"QR_b3a39371-b51c-4f2f-a833-91976eb32f76","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:31:21][350496873776799][8551 ms][DEBUG] proc_open done in 8139 ms; code=255; res.len=3343 [2025-08-24 20:31:21][350496873776799][8551 ms][DEBUG] END runCmdUntilRes#1 in 8139 ms [2025-08-24 20:31:21][350496873776799][8551 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:35:03][350100282463813][1 ms][INFO] === Request start === [2025-08-24 20:35:03][350100282463813][1 ms][DEBUG] START check_scloud [2025-08-24 20:35:03][350100282463813][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:35:04][350100282463813][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 11552 20653 24490428 172548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:35:04][350100282463813][308 ms][DEBUG] targetPkg: running [2025-08-24 20:35:04][350100282463813][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-24 20:35:04][350100282463813][308 ms][DEBUG] START check_boot_completed [2025-08-24 20:35:04][350100282463813][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:35:04][350100282463813][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 20:35:04][350100282463813][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:35:04][350100282463813][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 20:35:04][350100282463813][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 20:35:04][350100282463813][387 ms][DEBUG] rawBody.length=1148 [2025-08-24 20:35:04][350100282463813][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100282463813\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3453\"}'\'' -e'"" [2025-08-24 20:35:04][350100282463813][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:35:04][350100282463813][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100282463813\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3453\"}'\'' -e'"" [2025-08-24 20:35:08][350100282463813][4323 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_699d0daa-9c77-4906-a887-3b9d059fce27","id":"QR_699d0daa-9c77-4906-a887-3b9d059fce27","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:35:08][350100282463813][4479 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-08-24 20:35:08][350100282463813][4479 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-24 20:35:08][350100282463813][4480 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:37:02][351234166489591][0 ms][INFO] === Request start === [2025-08-24 20:37:02][351234166489591][0 ms][DEBUG] START check_scloud [2025-08-24 20:37:02][351234166489591][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:37:03][351234166489591][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 11552 20653 24637092 183488 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:37:03][351234166489591][291 ms][DEBUG] targetPkg: running [2025-08-24 20:37:03][351234166489591][291 ms][DEBUG] END check_scloud in 291 ms [2025-08-24 20:37:03][351234166489591][291 ms][DEBUG] START check_boot_completed [2025-08-24 20:37:03][351234166489591][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:37:03][351234166489591][337 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 20:37:03][351234166489591][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:37:03][351234166489591][399 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 20:37:03][351234166489591][399 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-24 20:37:03][351234166489591][399 ms][DEBUG] rawBody.length=1148 [2025-08-24 20:37:03][351234166489591][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234166489591\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6676\"}'\'' -e'"" [2025-08-24 20:37:03][351234166489591][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:37:03][351234166489591][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234166489591\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6676\"}'\'' -e'"" [2025-08-24 20:37:07][351234166489591][4429 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6bdd1165-14ba-4a85-b20a-66788a23799b","id":"QR_6bdd1165-14ba-4a85-b20a-66788a23799b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:37:07][351234166489591][4585 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-24 20:37:07][351234166489591][4585 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-24 20:37:07][351234166489591][4585 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:37:08][353818874132358][1 ms][INFO] === Request start === [2025-08-24 20:37:08][353818874132358][1 ms][DEBUG] START check_scloud [2025-08-24 20:37:08][353818874132358][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:37:09][353818874132358][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 11552 20653 24816492 195332 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:37:09][353818874132358][262 ms][DEBUG] targetPkg: running [2025-08-24 20:37:09][353818874132358][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-24 20:37:09][353818874132358][263 ms][DEBUG] START check_boot_completed [2025-08-24 20:37:09][353818874132358][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:37:09][353818874132358][309 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 20:37:09][353818874132358][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:37:09][353818874132358][356 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 20:37:09][353818874132358][356 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 20:37:09][353818874132358][356 ms][DEBUG] rawBody.length=1148 [2025-08-24 20:37:09][353818874132358][356 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818874132358\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8887\"}'\'' -e'"" [2025-08-24 20:37:09][353818874132358][356 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:37:09][353818874132358][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818874132358\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8887\"}'\'' -e'"" [2025-08-24 20:37:13][353818874132358][4496 ms][DEBUG] proc_open done in 4140 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 20:37:13][353818874132358][4496 ms][DEBUG] END runCmdUntilRes#1 in 4140 ms [2025-08-24 20:37:13][353818874132358][4496 ms][WARN] Detected error: Process with pid 11552 either refused to load frida-agent, or terminated during injection [2025-08-24 20:37:13][353818874132358][4496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 20:37:13][353818874132358][4652 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 20:37:13][353818874132358][4652 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 20:37:13][353818874132358][4652 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 20:37:13][353818874132358][4808 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 20:37:13][353818874132358][4808 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 20:37:13][353818874132358][4996 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 20:37:15][353818874132358][7011 ms][DEBUG] START check_boot_completed [2025-08-24 20:37:15][353818874132358][7011 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:37:15][353818874132358][7058 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 20:37:15][353818874132358][7058 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:37:15][353818874132358][7104 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 20:37:15][353818874132358][7104 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 20:37:18][353818874132358][10119 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 20:37:18][353818874132358][10119 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818874132358\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8887\"}'\'' -e'"" [2025-08-24 20:37:19][353818874132358][10729 ms][DEBUG] proc_open done in 609 ms (timeout); code=4; out.len=0 err.len=50 [2025-08-24 20:37:19][353818874132358][10729 ms][DEBUG] END runCmdUntilRes#2 in 610 ms [2025-08-24 20:37:19][353818874132358][10729 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-08-24 20:37:22][351272336925987][0 ms][INFO] === Request start === [2025-08-24 20:37:22][351272336925987][1 ms][DEBUG] START check_scloud [2025-08-24 20:37:22][351272336925987][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:37:22][351272336925987][258 ms][DEBUG] SU: done in 257 ms; out [2025-08-24 20:37:22][351272336925987][258 ms][WARN] targetPkg: not running, restarting [2025-08-24 20:37:22][351272336925987][258 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 20:37:22][351272336925987][399 ms][DEBUG] SU: done in 140 ms; out [2025-08-24 20:37:22][351272336925987][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 20:37:22][351272336925987][555 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 20:37:24][351272336925987][2570 ms][DEBUG] END check_scloud in 2569 ms [2025-08-24 20:37:24][351272336925987][2570 ms][DEBUG] START check_boot_completed [2025-08-24 20:37:24][351272336925987][2570 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:37:25][351272336925987][2617 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 20:37:25][351272336925987][2617 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:37:25][351272336925987][2679 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 20:37:25][351272336925987][2679 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-24 20:37:25][351272336925987][2680 ms][DEBUG] rawBody.length=1148 [2025-08-24 20:37:25][351272336925987][2680 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272336925987\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6775\"}'\'' -e'"" [2025-08-24 20:37:25][351272336925987][2680 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:37:25][351272336925987][2680 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272336925987\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6775\"}'\'' -e'"" [2025-08-24 20:37:26][351272336925987][4476 ms][DEBUG] proc_open done in 1796 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-24 20:37:26][351272336925987][4476 ms][DEBUG] END runCmdUntilRes#1 in 1796 ms [2025-08-24 20:37:26][351272336925987][4476 ms][WARN] Detected error: {"type":"error","description":"TypeError: Cannot read properties of null (reading 'queryIntentActivities')","stack":"TypeError: Cannot read properties of null (reading 'queryIntentActivities')\n at detectLauncherPackageName (/internal-agent.js:403:36)\n at init (/internal-agent.js:49:21)\n at c.perform (frida/node_modules/frida-java-bridge/lib/vm.js:12:1)\n at _performPendingVmOps (frida/node_modules/frida-java-bridge/index.js:250:1)\n at frida/node_modules/frida-java-bridge/index.js:225:1\n at c.perform (frida/node_modules/frida-java-bridge/lib/vm.js:12:1)\n at _performPendingVmOpsWhenReady (frida/node_modules/frida-java-bridge/index.js:223:1)\n at _.perform (frida/node_modules/frida-java-bridge/index.js:204:1)\n at /internal-agent.js:490:6","fileName":"/internal-agent.js","lineNumber":403,"columnNumber":36}java.lang.NullPointerException: Attempt to invoke interface method 'java.util.List android.app.IActivityManager.getRunningAppProcesses()' on a null object reference [2025-08-24 20:37:26][351272336925987][4476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 20:37:27][351272336925987][4601 ms][DEBUG] SU: done in 125 ms; out [2025-08-24 20:37:27][351272336925987][4601 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 20:37:27][351272336925987][4601 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 20:37:27][351272336925987][4757 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 20:37:27][351272336925987][4757 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 20:37:27][351272336925987][4960 ms][DEBUG] SU: done in 203 ms; out [2025-08-24 20:37:29][351272336925987][6975 ms][DEBUG] START check_boot_completed [2025-08-24 20:37:29][351272336925987][6975 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:37:29][351272336925987][7022 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 20:37:29][351272336925987][7022 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:37:29][351272336925987][7085 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 20:37:29][351272336925987][7085 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-24 20:37:32][351272336925987][10099 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 20:37:32][351272336925987][10099 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272336925987\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6775\"}'\'' -e'"" [2025-08-24 20:37:33][351272336925987][11584 ms][DEBUG] proc_open done in 1484 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-24 20:37:33][351272336925987][11584 ms][DEBUG] END runCmdUntilRes#2 in 1484 ms [2025-08-24 20:37:33][351272336925987][11584 ms][WARN] Detected error 2; Reboot the device [2025-08-24 20:37:33][351272336925987][11584 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-24 20:37:34][351272336925987][12286 ms][DEBUG] SU: done in 702 ms; out [2025-08-24 20:38:02][353818874132358][0 ms][INFO] === Request start === [2025-08-24 20:38:02][353818874132358][1 ms][DEBUG] START check_scloud [2025-08-24 20:38:02][353818874132358][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:38:02][353818874132358][34 ms][DEBUG] SU: done in 33 ms; out [2025-08-24 20:38:02][353818874132358][34 ms][WARN] targetPkg: not running, restarting [2025-08-24 20:38:02][353818874132358][34 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 20:38:02][353818874132358][66 ms][DEBUG] SU: done in 31 ms; out [2025-08-24 20:38:02][353818874132358][66 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 20:38:02][353818874132358][97 ms][DEBUG] SU: done in 31 ms; out [2025-08-24 20:38:04][353818874132358][2112 ms][DEBUG] END check_scloud in 2111 ms [2025-08-24 20:38:04][353818874132358][2112 ms][DEBUG] START check_boot_completed [2025-08-24 20:38:04][353818874132358][2112 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:38:34][353818874132358][31596 ms][DEBUG] ADB: done in 29484 ms; out [2025-08-24 20:38:34][353818874132358][31596 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:38:34][353818874132358][31768 ms][DEBUG] SU: done in 172 ms; out [2025-08-24 20:38:34][353818874132358][31768 ms][DEBUG] END check_boot_completed in 29656 ms [2025-08-24 20:38:34][353818874132358][31768 ms][DEBUG] START check_internet [2025-08-24 20:38:34][353818874132358][31768 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 20:38:34][353818874132358][31940 ms][DEBUG] SU: done in 172 ms; out [2025-08-24 20:38:34][353818874132358][31940 ms][WARN] check_internet: offline [2025-08-24 20:38:34][353818874132358][31940 ms][DEBUG] END check_internet in 172 ms [2025-08-24 20:39:02][353818874132358][1 ms][INFO] === Request start === [2025-08-24 20:39:02][353818874132358][1 ms][DEBUG] START check_scloud [2025-08-24 20:39:02][353818874132358][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:39:03][353818874132358][401 ms][DEBUG] SU: done in 399 ms; out [2025-08-24 20:39:03][353818874132358][401 ms][WARN] targetPkg: not running, restarting [2025-08-24 20:39:03][353818874132358][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 20:39:03][353818874132358][558 ms][DEBUG] SU: done in 157 ms; out [2025-08-24 20:39:03][353818874132358][558 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 20:39:03][353818874132358][807 ms][DEBUG] SU: done in 249 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 20:39:05][353818874132358][2822 ms][DEBUG] END check_scloud in 2821 ms [2025-08-24 20:39:05][353818874132358][2822 ms][DEBUG] START check_boot_completed [2025-08-24 20:39:05][353818874132358][2822 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:39:05][353818874132358][2869 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 20:39:05][353818874132358][2869 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:39:05][353818874132358][2947 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 20:39:05][353818874132358][2947 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-24 20:39:05][353818874132358][2947 ms][DEBUG] rawBody.length=1148 [2025-08-24 20:39:05][353818874132358][2947 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818874132358\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5808\"}'\'' -e'"" [2025-08-24 20:39:05][353818874132358][2947 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:39:05][353818874132358][2947 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818874132358\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5808\"}'\'' -e'"" [2025-08-24 20:39:11][353818874132358][8570 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c3daaef5-568b-4e75-9db5-fd9023b83771","id":"QR_c3daaef5-568b-4e75-9db5-fd9023b83771","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:39:11][353818874132358][8727 ms][DEBUG] proc_open done in 5779 ms; code=255; res.len=3343 [2025-08-24 20:39:11][353818874132358][8727 ms][DEBUG] END runCmdUntilRes#1 in 5780 ms [2025-08-24 20:39:11][353818874132358][8727 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:39:12][351272336925987][0 ms][INFO] === Request start === [2025-08-24 20:39:12][351272336925987][0 ms][DEBUG] START check_scloud [2025-08-24 20:39:12][351272336925987][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:39:13][351272336925987][349 ms][DEBUG] SU: done in 349 ms; outu0_a118 10944 4968 23803480 123672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:39:13][351272336925987][350 ms][DEBUG] targetPkg: running [2025-08-24 20:39:13][351272336925987][350 ms][DEBUG] END check_scloud in 349 ms [2025-08-24 20:39:13][351272336925987][350 ms][DEBUG] START check_boot_completed [2025-08-24 20:39:13][351272336925987][350 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:39:13][351272336925987][396 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 20:39:13][351272336925987][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:39:13][351272336925987][459 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 20:39:13][351272336925987][459 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 20:39:13][351272336925987][459 ms][DEBUG] rawBody.length=1148 [2025-08-24 20:39:13][351272336925987][459 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272336925987\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3462\"}'\'' -e'"" [2025-08-24 20:39:13][351272336925987][459 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:39:13][351272336925987][459 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272336925987\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3462\"}'\'' -e'"" [2025-08-24 20:39:17][351272336925987][4380 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_51176a7c-532e-4663-9779-2fbfae414622","id":"QR_51176a7c-532e-4663-9779-2fbfae414622","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:39:17][351272336925987][4536 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=3343 [2025-08-24 20:39:17][351272336925987][4536 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-24 20:39:17][351272336925987][4536 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:39:18][353842196316028][0 ms][INFO] === Request start === [2025-08-24 20:39:18][353842196316028][1 ms][DEBUG] START check_scloud [2025-08-24 20:39:18][353842196316028][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:39:19][353842196316028][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 10944 4968 23921568 125260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:39:19][353842196316028][304 ms][DEBUG] targetPkg: running [2025-08-24 20:39:19][353842196316028][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-24 20:39:19][353842196316028][304 ms][DEBUG] START check_boot_completed [2025-08-24 20:39:19][353842196316028][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:39:19][353842196316028][350 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 20:39:19][353842196316028][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:39:19][353842196316028][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 20:39:19][353842196316028][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 20:39:19][353842196316028][413 ms][DEBUG] rawBody.length=1148 [2025-08-24 20:39:19][353842196316028][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353842196316028\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7245\"}'\'' -e'"" [2025-08-24 20:39:19][353842196316028][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:39:19][353842196316028][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353842196316028\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7245\"}'\'' -e'"" [2025-08-24 20:40:02][353842196316028][1 ms][INFO] === Request start === [2025-08-24 20:40:02][353842196316028][1 ms][DEBUG] START check_scloud [2025-08-24 20:40:02][353842196316028][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:40:03][353842196316028][742 ms][DEBUG] SU: done in 740 ms; out [2025-08-24 20:40:03][353842196316028][742 ms][WARN] targetPkg: not running, restarting [2025-08-24 20:40:03][353842196316028][742 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 20:40:03][353842196316028][898 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 20:40:03][353842196316028][898 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 20:40:03][353842196316028][1398 ms][DEBUG] SU: done in 500 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 20:40:05][353842196316028][3413 ms][DEBUG] END check_scloud in 3412 ms [2025-08-24 20:40:05][353842196316028][3413 ms][DEBUG] START check_boot_completed [2025-08-24 20:40:05][353842196316028][3413 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:40:05][353842196316028][3460 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 20:40:05][353842196316028][3460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:40:06][353842196316028][3522 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 20:40:06][353842196316028][3522 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 20:40:06][353842196316028][3522 ms][DEBUG] START check_internet [2025-08-24 20:40:06][353842196316028][3522 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 20:40:06][353842196316028][4225 ms][DEBUG] SU: done in 703 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.624/199.624/199.624/0.000 ms\n [2025-08-24 20:40:06][353842196316028][4225 ms][DEBUG] check_internet: online [2025-08-24 20:40:06][353842196316028][4225 ms][DEBUG] END check_internet in 703 ms [2025-08-24 20:40:06][353842196316028][4225 ms][DEBUG] rawBody.length=1148 [2025-08-24 20:40:06][353842196316028][4226 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353842196316028\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9224\"}'\'' -e'"" [2025-08-24 20:40:06][353842196316028][4226 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:40:06][353842196316028][4226 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353842196316028\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9224\"}'\'' -e'"" [2025-08-24 20:40:13][353842196316028][10786 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_049603a7-cac9-426b-9dce-6e94ae37eb3b","id":"QR_049603a7-cac9-426b-9dce-6e94ae37eb3b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:40:13][353842196316028][10942 ms][DEBUG] proc_open done in 6716 ms; code=255; res.len=3343 [2025-08-24 20:40:13][353842196316028][10942 ms][DEBUG] END runCmdUntilRes#1 in 6717 ms [2025-08-24 20:40:13][353842196316028][10942 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:40:17][353122993570279][0 ms][INFO] === Request start === [2025-08-24 20:40:17][353122993570279][1 ms][DEBUG] START check_scloud [2025-08-24 20:40:17][353122993570279][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:40:17][353122993570279][355 ms][DEBUG] SU: done in 354 ms; outu0_a118 16220 12465 23734012 107184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:40:17][353122993570279][355 ms][DEBUG] targetPkg: running [2025-08-24 20:40:17][353122993570279][355 ms][DEBUG] END check_scloud in 355 ms [2025-08-24 20:40:17][353122993570279][355 ms][DEBUG] START check_boot_completed [2025-08-24 20:40:17][353122993570279][355 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:40:17][353122993570279][402 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 20:40:17][353122993570279][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:40:18][353122993570279][464 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 20:40:18][353122993570279][464 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 20:40:18][353122993570279][464 ms][DEBUG] START check_internet [2025-08-24 20:40:18][353122993570279][464 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 20:40:18][353122993570279][714 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=140 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 140.636/140.636/140.636/0.000 ms\n [2025-08-24 20:40:18][353122993570279][715 ms][DEBUG] check_internet: online [2025-08-24 20:40:18][353122993570279][715 ms][DEBUG] END check_internet in 250 ms [2025-08-24 20:40:18][353122993570279][715 ms][DEBUG] rawBody.length=1149 [2025-08-24 20:40:18][353122993570279][715 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353122993570279\",\"model\":\"SM-A546U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4296\"}'\'' -e'"" [2025-08-24 20:40:18][353122993570279][715 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:40:18][353122993570279][715 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353122993570279\",\"model\":\"SM-A546U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4296\"}'\'' -e'"" [2025-08-24 20:40:30][353122993570279][13208 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_da57e960-765f-4807-a9cb-221bdb50c629","id":"QR_da57e960-765f-4807-a9cb-221bdb50c629","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:40:30][353122993570279][13364 ms][DEBUG] proc_open done in 12649 ms; code=255; res.len=3343 [2025-08-24 20:40:30][353122993570279][13364 ms][DEBUG] END runCmdUntilRes#1 in 12649 ms [2025-08-24 20:40:30][353122993570279][13364 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:41:02][355755472848076][0 ms][INFO] === Request start === [2025-08-24 20:41:02][355755472848076][1 ms][DEBUG] START check_scloud [2025-08-24 20:41:02][355755472848076][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:41:02][355755472848076][363 ms][DEBUG] SU: done in 362 ms; outu0_a118 16220 12465 23789748 59240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:41:02][355755472848076][363 ms][DEBUG] targetPkg: running [2025-08-24 20:41:02][355755472848076][363 ms][DEBUG] END check_scloud in 363 ms [2025-08-24 20:41:02][355755472848076][363 ms][DEBUG] START check_boot_completed [2025-08-24 20:41:02][355755472848076][363 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:41:02][355755472848076][410 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 20:41:02][355755472848076][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:41:03][355755472848076][488 ms][DEBUG] SU: done in 78 ms; out [2025-08-24 20:41:03][355755472848076][488 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-24 20:41:03][355755472848076][488 ms][DEBUG] rawBody.length=1148 [2025-08-24 20:41:03][355755472848076][488 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355755472848076\",\"model\":\"SM-F731N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1301\"}'\'' -e'"" [2025-08-24 20:41:03][355755472848076][488 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:41:03][355755472848076][488 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355755472848076\",\"model\":\"SM-F731N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1301\"}'\'' -e'"" [2025-08-24 20:41:08][355755472848076][5986 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_30b0f161-1280-4427-9b24-d3cc38390286","id":"QR_30b0f161-1280-4427-9b24-d3cc38390286","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:41:08][355755472848076][6142 ms][DEBUG] proc_open done in 5654 ms; code=255; res.len=3343 [2025-08-24 20:41:08][355755472848076][6142 ms][DEBUG] END runCmdUntilRes#1 in 5654 ms [2025-08-24 20:41:08][355755472848076][6142 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:41:10][352332117278037][0 ms][INFO] === Request start === [2025-08-24 20:41:10][352332117278037][1 ms][DEBUG] START check_scloud [2025-08-24 20:41:10][352332117278037][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:41:10][352332117278037][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 16220 12465 23954748 76076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:41:10][352332117278037][317 ms][DEBUG] targetPkg: running [2025-08-24 20:41:10][352332117278037][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-24 20:41:10][352332117278037][317 ms][DEBUG] START check_boot_completed [2025-08-24 20:41:10][352332117278037][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:41:10][352332117278037][363 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 20:41:10][352332117278037][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:41:10][352332117278037][426 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 20:41:10][352332117278037][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 20:41:10][352332117278037][426 ms][DEBUG] rawBody.length=1148 [2025-08-24 20:41:10][352332117278037][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352332117278037\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9901\"}'\'' -e'"" [2025-08-24 20:41:10][352332117278037][426 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:41:10][352332117278037][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352332117278037\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9901\"}'\'' -e'"" [2025-08-24 20:41:15][352332117278037][5003 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e72e191b-5276-4873-822e-2c9275fca65e","id":"QR_e72e191b-5276-4873-822e-2c9275fca65e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:41:15][352332117278037][5160 ms][DEBUG] proc_open done in 4734 ms; code=255; res.len=3343 [2025-08-24 20:41:15][352332117278037][5160 ms][DEBUG] END runCmdUntilRes#1 in 4734 ms [2025-08-24 20:41:15][352332117278037][5160 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:41:16][353628422664624][0 ms][INFO] === Request start === [2025-08-24 20:41:16][353628422664624][1 ms][DEBUG] START check_scloud [2025-08-24 20:41:16][353628422664624][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:41:16][353628422664624][281 ms][DEBUG] SU: done in 280 ms; outu0_a118 16220 12465 24108732 94960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:41:16][353628422664624][281 ms][DEBUG] targetPkg: running [2025-08-24 20:41:16][353628422664624][281 ms][DEBUG] END check_scloud in 280 ms [2025-08-24 20:41:16][353628422664624][281 ms][DEBUG] START check_boot_completed [2025-08-24 20:41:16][353628422664624][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:41:17][353628422664624][312 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 20:41:17][353628422664624][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:41:17][353628422664624][359 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 20:41:17][353628422664624][359 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 20:41:17][353628422664624][359 ms][DEBUG] rawBody.length=1148 [2025-08-24 20:41:17][353628422664624][359 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628422664624\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6998\"}'\'' -e'"" [2025-08-24 20:41:17][353628422664624][359 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:41:17][353628422664624][359 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628422664624\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6998\"}'\'' -e'"" [2025-08-24 20:41:20][353628422664624][4015 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e26b5983-f4a7-44d0-ba94-28beaeb9dd42","id":"QR_e26b5983-f4a7-44d0-ba94-28beaeb9dd42","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:41:20][353628422664624][4171 ms][DEBUG] proc_open done in 3812 ms; code=255; res.len=3343 [2025-08-24 20:41:20][353628422664624][4171 ms][DEBUG] END runCmdUntilRes#1 in 3812 ms [2025-08-24 20:41:20][353628422664624][4171 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:41:22][357435840568858][0 ms][INFO] === Request start === [2025-08-24 20:41:22][357435840568858][1 ms][DEBUG] START check_scloud [2025-08-24 20:41:22][357435840568858][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:41:22][357435840568858][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 16220 12465 24237060 105180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:41:22][357435840568858][321 ms][DEBUG] targetPkg: running [2025-08-24 20:41:22][357435840568858][321 ms][DEBUG] END check_scloud in 321 ms [2025-08-24 20:41:22][357435840568858][321 ms][DEBUG] START check_boot_completed [2025-08-24 20:41:22][357435840568858][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:41:22][357435840568858][368 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 20:41:22][357435840568858][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:41:22][357435840568858][430 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 20:41:22][357435840568858][430 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 20:41:22][357435840568858][430 ms][DEBUG] rawBody.length=1148 [2025-08-24 20:41:22][357435840568858][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840568858\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4234\"}'\'' -e'"" [2025-08-24 20:41:22][357435840568858][430 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:41:22][357435840568858][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840568858\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4234\"}'\'' -e'"" [2025-08-24 20:41:26][357435840568858][4148 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cedfdf19-373a-47ec-b855-3730c32199d5","id":"QR_cedfdf19-373a-47ec-b855-3730c32199d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:41:26][357435840568858][4306 ms][DEBUG] proc_open done in 3876 ms; code=255; res.len=3343 [2025-08-24 20:41:26][357435840568858][4306 ms][DEBUG] END runCmdUntilRes#1 in 3876 ms [2025-08-24 20:41:26][357435840568858][4306 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:41:27][350938287156035][0 ms][INFO] === Request start === [2025-08-24 20:41:27][350938287156035][0 ms][DEBUG] START check_scloud [2025-08-24 20:41:27][350938287156035][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:41:27][350938287156035][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 16220 12465 24402088 111480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:41:27][350938287156035][263 ms][DEBUG] targetPkg: running [2025-08-24 20:41:27][350938287156035][263 ms][DEBUG] END check_scloud in 262 ms [2025-08-24 20:41:27][350938287156035][263 ms][DEBUG] START check_boot_completed [2025-08-24 20:41:27][350938287156035][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:41:28][350938287156035][294 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 20:41:28][350938287156035][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:41:28][350938287156035][340 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 20:41:28][350938287156035][340 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 20:41:28][350938287156035][340 ms][DEBUG] rawBody.length=1148 [2025-08-24 20:41:28][350938287156035][340 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938287156035\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4428\"}'\'' -e'"" [2025-08-24 20:41:28][350938287156035][341 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:41:28][350938287156035][341 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938287156035\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4428\"}'\'' -e'"" [2025-08-24 20:41:31][350938287156035][4014 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6145fb48-3524-48be-bb41-889c395ced7e","id":"QR_6145fb48-3524-48be-bb41-889c395ced7e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:41:31][350938287156035][4171 ms][DEBUG] proc_open done in 3830 ms; code=255; res.len=3343 [2025-08-24 20:41:31][350938287156035][4171 ms][DEBUG] END runCmdUntilRes#1 in 3830 ms [2025-08-24 20:41:31][350938287156035][4171 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:41:34][357157887029236][0 ms][INFO] === Request start === [2025-08-24 20:41:34][357157887029236][1 ms][DEBUG] START check_scloud [2025-08-24 20:41:34][357157887029236][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:41:34][357157887029236][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 16220 12465 24534284 122808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:41:34][357157887029236][320 ms][DEBUG] targetPkg: running [2025-08-24 20:41:34][357157887029236][320 ms][DEBUG] END check_scloud in 320 ms [2025-08-24 20:41:34][357157887029236][320 ms][DEBUG] START check_boot_completed [2025-08-24 20:41:34][357157887029236][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:41:34][357157887029236][367 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 20:41:34][357157887029236][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:41:34][357157887029236][429 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 20:41:34][357157887029236][430 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 20:41:34][357157887029236][430 ms][DEBUG] rawBody.length=1149 [2025-08-24 20:41:34][357157887029236][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357157887029236\",\"model\":\"SM-A326U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6945\"}'\'' -e'"" [2025-08-24 20:41:34][357157887029236][430 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:41:34][357157887029236][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357157887029236\",\"model\":\"SM-A326U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6945\"}'\'' -e'"" [2025-08-24 20:41:40][357157887029236][5959 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6cdf9919-5182-4a8f-866e-1af7bab03d80","id":"QR_6cdf9919-5182-4a8f-866e-1af7bab03d80","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:41:40][357157887029236][6115 ms][DEBUG] proc_open done in 5685 ms; code=255; res.len=3343 [2025-08-24 20:41:40][357157887029236][6115 ms][DEBUG] END runCmdUntilRes#1 in 5685 ms [2025-08-24 20:41:40][357157887029236][6115 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:42:04][359800202570453][1 ms][INFO] === Request start === [2025-08-24 20:42:04][359800202570453][1 ms][DEBUG] START check_scloud [2025-08-24 20:42:04][359800202570453][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:42:04][359800202570453][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 16220 12465 24633604 134612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:42:04][359800202570453][324 ms][DEBUG] targetPkg: running [2025-08-24 20:42:04][359800202570453][324 ms][DEBUG] END check_scloud in 323 ms [2025-08-24 20:42:04][359800202570453][324 ms][DEBUG] START check_boot_completed [2025-08-24 20:42:04][359800202570453][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:42:04][359800202570453][370 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 20:42:04][359800202570453][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:42:04][359800202570453][417 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 20:42:04][359800202570453][417 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 20:42:04][359800202570453][417 ms][DEBUG] START check_internet [2025-08-24 20:42:04][359800202570453][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 20:42:05][359800202570453][745 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=215 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 215.546/215.546/215.546/0.000 ms\n [2025-08-24 20:42:05][359800202570453][746 ms][DEBUG] check_internet: online [2025-08-24 20:42:05][359800202570453][746 ms][DEBUG] END check_internet in 328 ms [2025-08-24 20:42:05][359800202570453][746 ms][DEBUG] rawBody.length=1149 [2025-08-24 20:42:05][359800202570453][746 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359800202570453\",\"model\":\"SM-F766U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8201\"}'\'' -e'"" [2025-08-24 20:42:05][359800202570453][746 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:42:05][359800202570453][746 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359800202570453\",\"model\":\"SM-F766U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8201\"}'\'' -e'"" [2025-08-24 20:42:09][359800202570453][4791 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 20:42:09][359800202570453][4948 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=107 [2025-08-24 20:42:09][359800202570453][4948 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-24 20:42:09][359800202570453][4948 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 20:42:09][][0 ms][INFO] === Request start === [2025-08-24 20:42:09][][1 ms][DEBUG] START check_scloud [2025-08-24 20:42:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:42:10][][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 16220 12465 24788288 146560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:42:10][][307 ms][DEBUG] targetPkg: running [2025-08-24 20:42:10][][307 ms][DEBUG] END check_scloud in 307 ms [2025-08-24 20:42:10][][307 ms][DEBUG] START check_boot_completed [2025-08-24 20:42:10][][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:42:10][][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 20:42:10][][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:42:10][][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 20:42:10][][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 20:42:10][][401 ms][DEBUG] START check_internet [2025-08-24 20:42:10][][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 20:42:10][][682 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=125 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 125.607/125.607/125.607/0.000 ms\n [2025-08-24 20:42:10][][682 ms][DEBUG] check_internet: online [2025-08-24 20:42:10][][682 ms][DEBUG] END check_internet in 281 ms [2025-08-24 20:42:10][][682 ms][DEBUG] rawBody.length=1130 [2025-08-24 20:42:10][][682 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F766U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CY72QLF9Z\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9906\"}'\'' -e'"" [2025-08-24 20:42:10][][682 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:42:10][][682 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F766U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CY72QLF9Z\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9906\"}'\'' -e'"" [2025-08-24 20:42:14][][4352 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 20:42:14][][4509 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=107 [2025-08-24 20:42:14][][4509 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-24 20:42:14][][4509 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 20:42:16][354775171166621][0 ms][INFO] === Request start === [2025-08-24 20:42:16][354775171166621][1 ms][DEBUG] START check_scloud [2025-08-24 20:42:16][354775171166621][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:42:16][354775171166621][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 16220 12465 24957388 157480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:42:16][354775171166621][301 ms][DEBUG] targetPkg: running [2025-08-24 20:42:16][354775171166621][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-24 20:42:16][354775171166621][301 ms][DEBUG] START check_boot_completed [2025-08-24 20:42:16][354775171166621][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:42:16][354775171166621][330 ms][DEBUG] ADB: done in 29 ms; out [2025-08-24 20:42:16][354775171166621][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:42:16][354775171166621][392 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 20:42:16][354775171166621][392 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-24 20:42:16][354775171166621][392 ms][DEBUG] START check_internet [2025-08-24 20:42:16][354775171166621][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 20:42:17][354775171166621][689 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=192 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 192.295/192.295/192.295/0.000 ms\n [2025-08-24 20:42:17][354775171166621][689 ms][DEBUG] check_internet: online [2025-08-24 20:42:17][354775171166621][689 ms][DEBUG] END check_internet in 297 ms [2025-08-24 20:42:17][354775171166621][689 ms][DEBUG] rawBody.length=1149 [2025-08-24 20:42:17][354775171166621][689 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354775171166621\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8794\"}'\'' -e'"" [2025-08-24 20:42:17][354775171166621][689 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:42:17][354775171166621][689 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354775171166621\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8794\"}'\'' -e'"" [2025-08-24 20:42:23][354775171166621][6985 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_461262cb-544d-43b6-9a3f-1d3abbe31fe1","id":"QR_461262cb-544d-43b6-9a3f-1d3abbe31fe1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:42:23][354775171166621][7141 ms][DEBUG] proc_open done in 6451 ms; code=255; res.len=3343 [2025-08-24 20:42:23][354775171166621][7141 ms][DEBUG] END runCmdUntilRes#1 in 6451 ms [2025-08-24 20:42:23][354775171166621][7141 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:42:28][350832442118594][1 ms][INFO] === Request start === [2025-08-24 20:42:28][350832442118594][1 ms][DEBUG] START check_scloud [2025-08-24 20:42:28][350832442118594][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:42:29][350832442118594][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 16220 12465 25067816 167916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:42:29][350832442118594][302 ms][DEBUG] targetPkg: running [2025-08-24 20:42:29][350832442118594][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-24 20:42:29][350832442118594][302 ms][DEBUG] START check_boot_completed [2025-08-24 20:42:29][350832442118594][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:42:29][350832442118594][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 20:42:29][350832442118594][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:42:29][350832442118594][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 20:42:29][350832442118594][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 20:42:29][350832442118594][395 ms][DEBUG] START check_internet [2025-08-24 20:42:29][350832442118594][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 20:42:29][350832442118594][754 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=250 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 250.562/250.562/250.562/0.000 ms\n [2025-08-24 20:42:29][350832442118594][754 ms][DEBUG] check_internet: online [2025-08-24 20:42:29][350832442118594][754 ms][DEBUG] END check_internet in 360 ms [2025-08-24 20:42:29][350832442118594][754 ms][DEBUG] rawBody.length=1148 [2025-08-24 20:42:29][350832442118594][755 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442118594\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4058\"}'\'' -e'"" [2025-08-24 20:42:29][350832442118594][755 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:42:29][350832442118594][755 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442118594\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4058\"}'\'' -e'"" [2025-08-24 20:42:34][350832442118594][5144 ms][DEBUG] proc_open done in 4389 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 20:42:34][350832442118594][5144 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-24 20:42:34][350832442118594][5144 ms][WARN] Detected error: Process with pid 16220 either refused to load frida-agent, or terminated during injection [2025-08-24 20:42:34][350832442118594][5144 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 20:42:34][350832442118594][5316 ms][DEBUG] SU: done in 171 ms; out [2025-08-24 20:42:34][350832442118594][5316 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 20:42:34][350832442118594][5316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 20:42:34][350832442118594][5472 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 20:42:34][350832442118594][5472 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 20:42:34][350832442118594][5644 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 20:42:36][350832442118594][7659 ms][DEBUG] START check_boot_completed [2025-08-24 20:42:36][350832442118594][7659 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:42:36][350832442118594][7706 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 20:42:36][350832442118594][7706 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:42:36][350832442118594][7768 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 20:42:36][350832442118594][7768 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-24 20:42:39][350832442118594][10783 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 20:42:39][350832442118594][10783 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442118594\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4058\"}'\'' -e'"" [2025-08-24 20:42:43][350832442118594][14751 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5dab794-df7e-489b-b245-b65557aa8dcb","id":"QR_a5dab794-df7e-489b-b245-b65557aa8dcb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:42:43][350832442118594][14907 ms][DEBUG] proc_open done in 4124 ms; code=255; res.len=3343 [2025-08-24 20:42:43][350832442118594][14907 ms][DEBUG] END runCmdUntilRes#2 in 4124 ms [2025-08-24 20:42:43][350832442118594][14907 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:43:03][356414811743833][0 ms][INFO] === Request start === [2025-08-24 20:43:03][356414811743833][1 ms][DEBUG] START check_scloud [2025-08-24 20:43:03][356414811743833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:43:03][356414811743833][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 26715 12465 23777120 127128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:43:03][356414811743833][312 ms][DEBUG] targetPkg: running [2025-08-24 20:43:03][356414811743833][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-24 20:43:03][356414811743833][312 ms][DEBUG] START check_boot_completed [2025-08-24 20:43:03][356414811743833][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:43:03][356414811743833][357 ms][DEBUG] ADB: done in 45 ms; out [2025-08-24 20:43:03][356414811743833][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:43:04][356414811743833][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 20:43:04][356414811743833][404 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-24 20:43:04][356414811743833][404 ms][DEBUG] rawBody.length=1148 [2025-08-24 20:43:04][356414811743833][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414811743833\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4049\"}'\'' -e'"" [2025-08-24 20:43:04][356414811743833][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:43:04][356414811743833][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414811743833\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4049\"}'\'' -e'"" [2025-08-24 20:43:07][356414811743833][4356 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_385bded6-f20c-46b4-b7cb-8ba204ae1941","id":"QR_385bded6-f20c-46b4-b7cb-8ba204ae1941","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:43:08][356414811743833][4512 ms][DEBUG] proc_open done in 4107 ms; code=255; res.len=3343 [2025-08-24 20:43:08][356414811743833][4512 ms][DEBUG] END runCmdUntilRes#1 in 4107 ms [2025-08-24 20:43:08][356414811743833][4512 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:49:06][356544392595986][1 ms][INFO] === Request start === [2025-08-24 20:49:06][356544392595986][1 ms][DEBUG] START check_scloud [2025-08-24 20:49:06][356544392595986][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:49:07][356544392595986][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 26715 12465 23805576 138584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:49:07][356544392595986][291 ms][DEBUG] targetPkg: running [2025-08-24 20:49:07][356544392595986][291 ms][DEBUG] END check_scloud in 289 ms [2025-08-24 20:49:07][356544392595986][291 ms][DEBUG] START check_boot_completed [2025-08-24 20:49:07][356544392595986][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:49:07][356544392595986][322 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 20:49:07][356544392595986][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:49:07][356544392595986][368 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 20:49:07][356544392595986][368 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 20:49:07][356544392595986][369 ms][DEBUG] rawBody.length=1149 [2025-08-24 20:49:07][356544392595986][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544392595986\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4454\"}'\'' -e'"" [2025-08-24 20:49:07][356544392595986][369 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:49:07][356544392595986][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544392595986\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4454\"}'\'' -e'"" [2025-08-24 20:49:11][356544392595986][4461 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 20:49:11][356544392595986][4618 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=107 [2025-08-24 20:49:11][356544392595986][4618 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-24 20:49:11][356544392595986][4618 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 20:49:11][][0 ms][INFO] === Request start === [2025-08-24 20:49:11][][1 ms][DEBUG] START check_scloud [2025-08-24 20:49:11][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:49:12][][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 26715 12465 23972624 150320 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:49:12][][315 ms][DEBUG] targetPkg: running [2025-08-24 20:49:12][][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-24 20:49:12][][315 ms][DEBUG] START check_boot_completed [2025-08-24 20:49:12][][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:49:12][][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 20:49:12][][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:49:12][][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 20:49:12][][408 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 20:49:12][][408 ms][DEBUG] rawBody.length=1130 [2025-08-24 20:49:12][][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCX100LNTN\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8501\"}'\'' -e'"" [2025-08-24 20:49:12][][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:49:12][][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCX100LNTN\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8501\"}'\'' -e'"" [2025-08-24 20:49:16][][4751 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 20:49:16][][4907 ms][DEBUG] proc_open done in 4498 ms; code=255; res.len=107 [2025-08-24 20:49:16][][4907 ms][DEBUG] END runCmdUntilRes#1 in 4499 ms [2025-08-24 20:49:16][][4907 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 20:49:17][356544392595986][0 ms][INFO] === Request start === [2025-08-24 20:49:17][356544392595986][1 ms][DEBUG] START check_scloud [2025-08-24 20:49:17][356544392595986][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:49:17][356544392595986][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 26715 12465 24131416 161300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:49:17][356544392595986][307 ms][DEBUG] targetPkg: running [2025-08-24 20:49:17][356544392595986][307 ms][DEBUG] END check_scloud in 307 ms [2025-08-24 20:49:17][356544392595986][307 ms][DEBUG] START check_boot_completed [2025-08-24 20:49:17][356544392595986][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:49:17][356544392595986][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 20:49:17][356544392595986][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:49:17][356544392595986][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 20:49:17][356544392595986][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 20:49:17][356544392595986][401 ms][DEBUG] rawBody.length=1148 [2025-08-24 20:49:17][356544392595986][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544392595986\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8328\"}'\'' -e'"" [2025-08-24 20:49:17][356544392595986][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:49:17][356544392595986][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544392595986\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8328\"}'\'' -e'"" [2025-08-24 20:49:22][356544392595986][4587 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2bfaae28-8681-4670-98f7-99025d459f2a","id":"QR_2bfaae28-8681-4670-98f7-99025d459f2a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:49:22][356544392595986][4743 ms][DEBUG] proc_open done in 4343 ms; code=255; res.len=3343 [2025-08-24 20:49:22][356544392595986][4743 ms][DEBUG] END runCmdUntilRes#1 in 4343 ms [2025-08-24 20:49:22][356544392595986][4743 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 20:56:04][357450471025540][1 ms][INFO] === Request start === [2025-08-24 20:56:04][357450471025540][1 ms][DEBUG] START check_scloud [2025-08-24 20:56:04][357450471025540][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 20:56:04][357450471025540][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 26715 12465 24203048 172696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 20:56:04][357450471025540][303 ms][DEBUG] targetPkg: running [2025-08-24 20:56:04][357450471025540][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-24 20:56:04][357450471025540][303 ms][DEBUG] START check_boot_completed [2025-08-24 20:56:04][357450471025540][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 20:56:04][357450471025540][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 20:56:04][357450471025540][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 20:56:04][357450471025540][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 20:56:04][357450471025540][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 20:56:04][357450471025540][397 ms][DEBUG] START check_internet [2025-08-24 20:56:04][357450471025540][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 20:56:05][357450471025540][959 ms][DEBUG] SU: done in 563 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.663/201.663/201.663/0.000 ms\n [2025-08-24 20:56:05][357450471025540][959 ms][DEBUG] check_internet: online [2025-08-24 20:56:05][357450471025540][959 ms][DEBUG] END check_internet in 563 ms [2025-08-24 20:56:05][357450471025540][959 ms][DEBUG] rawBody.length=1148 [2025-08-24 20:56:05][357450471025540][960 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450471025540\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9006\"}'\'' -e'"" [2025-08-24 20:56:05][357450471025540][960 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 20:56:05][357450471025540][960 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450471025540\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9006\"}'\'' -e'"" [2025-08-24 20:56:09][357450471025540][5286 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a010f30d-7af5-4ce5-8b46-15031d5ff2e9","id":"QR_a010f30d-7af5-4ce5-8b46-15031d5ff2e9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 20:56:09][357450471025540][5442 ms][DEBUG] proc_open done in 4482 ms; code=255; res.len=3343 [2025-08-24 20:56:09][357450471025540][5442 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-24 20:56:09][357450471025540][5442 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 21:01:02][350011602066618][1 ms][INFO] === Request start === [2025-08-24 21:01:02][350011602066618][1 ms][DEBUG] START check_scloud [2025-08-24 21:01:02][350011602066618][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 21:01:02][350011602066618][337 ms][DEBUG] SU: done in 336 ms; outu0_a118 26715 12465 24340440 97524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 21:01:02][350011602066618][337 ms][DEBUG] targetPkg: running [2025-08-24 21:01:02][350011602066618][337 ms][DEBUG] END check_scloud in 336 ms [2025-08-24 21:01:02][350011602066618][337 ms][DEBUG] START check_boot_completed [2025-08-24 21:01:02][350011602066618][337 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 21:01:02][350011602066618][384 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 21:01:02][350011602066618][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 21:01:02][350011602066618][431 ms][DEBUG] SU: done in 46 ms; out [2025-08-24 21:01:02][350011602066618][431 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 21:01:02][350011602066618][431 ms][DEBUG] rawBody.length=1148 [2025-08-24 21:01:02][350011602066618][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350011602066618\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9122\"}'\'' -e'"" [2025-08-24 21:01:02][350011602066618][431 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 21:01:02][350011602066618][431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350011602066618\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9122\"}'\'' -e'"" [2025-08-24 21:01:06][350011602066618][4836 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8137f33e-7171-46b8-a5ea-555261f772f5","id":"QR_8137f33e-7171-46b8-a5ea-555261f772f5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 21:01:07][350011602066618][4992 ms][DEBUG] proc_open done in 4561 ms; code=255; res.len=3343 [2025-08-24 21:01:07][350011602066618][4992 ms][DEBUG] END runCmdUntilRes#1 in 4561 ms [2025-08-24 21:01:07][350011602066618][4992 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 21:02:02][350471121604630][0 ms][INFO] === Request start === [2025-08-24 21:02:02][350471121604630][1 ms][DEBUG] START check_scloud [2025-08-24 21:02:02][350471121604630][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 21:02:02][350471121604630][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 26715 12465 24476860 114892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 21:02:02][350471121604630][319 ms][DEBUG] targetPkg: running [2025-08-24 21:02:02][350471121604630][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-24 21:02:02][350471121604630][319 ms][DEBUG] START check_boot_completed [2025-08-24 21:02:02][350471121604630][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 21:02:02][350471121604630][366 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 21:02:02][350471121604630][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 21:02:02][350471121604630][428 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 21:02:02][350471121604630][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 21:02:02][350471121604630][428 ms][DEBUG] START check_internet [2025-08-24 21:02:02][350471121604630][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 21:02:03][350471121604630][975 ms][DEBUG] SU: done in 546 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.913/201.913/201.913/0.000 ms\n [2025-08-24 21:02:03][350471121604630][975 ms][DEBUG] check_internet: online [2025-08-24 21:02:03][350471121604630][975 ms][DEBUG] END check_internet in 547 ms [2025-08-24 21:02:03][350471121604630][975 ms][DEBUG] rawBody.length=1148 [2025-08-24 21:02:03][350471121604630][975 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471121604630\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2632\"}'\'' -e'"" [2025-08-24 21:02:03][350471121604630][975 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 21:02:03][350471121604630][975 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471121604630\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2632\"}'\'' -e'"" [2025-08-24 21:02:07][350471121604630][5021 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_645b72e2-2cb4-4626-951c-9b6eb708e990","id":"QR_645b72e2-2cb4-4626-951c-9b6eb708e990","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 21:02:07][350471121604630][5177 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3343 [2025-08-24 21:02:07][350471121604630][5177 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-24 21:02:07][350471121604630][5177 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 21:11:03][356663763374225][1 ms][INFO] === Request start === [2025-08-24 21:11:03][356663763374225][1 ms][DEBUG] START check_scloud [2025-08-24 21:11:03][356663763374225][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 21:11:03][356663763374225][320 ms][DEBUG] SU: done in 318 ms; outu0_a118 26715 12465 24571220 125904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 21:11:03][356663763374225][320 ms][DEBUG] targetPkg: running [2025-08-24 21:11:03][356663763374225][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-24 21:11:03][356663763374225][320 ms][DEBUG] START check_boot_completed [2025-08-24 21:11:03][356663763374225][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 21:11:03][356663763374225][351 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 21:11:03][356663763374225][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 21:11:03][356663763374225][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 21:11:03][356663763374225][398 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 21:11:03][356663763374225][398 ms][DEBUG] rawBody.length=1148 [2025-08-24 21:11:03][356663763374225][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663763374225\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6910\"}'\'' -e'"" [2025-08-24 21:11:03][356663763374225][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 21:11:03][356663763374225][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663763374225\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6910\"}'\'' -e'"" [2025-08-24 21:11:08][356663763374225][4631 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1bd29a0e-a820-4650-ae35-eb9541813f69","id":"QR_1bd29a0e-a820-4650-ae35-eb9541813f69","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 21:11:08][356663763374225][4787 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-24 21:11:08][356663763374225][4787 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-24 21:11:08][356663763374225][4787 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 21:15:05][352659534717092][1 ms][INFO] === Request start === [2025-08-24 21:15:05][352659534717092][1 ms][DEBUG] START check_scloud [2025-08-24 21:15:05][352659534717092][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 21:15:05][352659534717092][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 26715 12465 24735364 135660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 21:15:05][352659534717092][268 ms][DEBUG] targetPkg: running [2025-08-24 21:15:05][352659534717092][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-24 21:15:05][352659534717092][268 ms][DEBUG] START check_boot_completed [2025-08-24 21:15:05][352659534717092][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 21:15:05][352659534717092][315 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 21:15:05][352659534717092][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 21:15:05][352659534717092][362 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 21:15:05][352659534717092][362 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 21:15:05][352659534717092][362 ms][DEBUG] rawBody.length=1149 [2025-08-24 21:15:05][352659534717092][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352659534717092\",\"model\":\"SM-S926W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3394\"}'\'' -e'"" [2025-08-24 21:15:05][352659534717092][362 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 21:15:05][352659534717092][362 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352659534717092\",\"model\":\"SM-S926W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3394\"}'\'' -e'"" [2025-08-24 21:15:10][352659534717092][5642 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6bf3c9bd-d884-4a61-bb7f-2b0b7793a64a","id":"QR_6bf3c9bd-d884-4a61-bb7f-2b0b7793a64a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 21:15:10][352659534717092][5798 ms][DEBUG] proc_open done in 5436 ms; code=255; res.len=3343 [2025-08-24 21:15:10][352659534717092][5798 ms][DEBUG] END runCmdUntilRes#1 in 5436 ms [2025-08-24 21:15:10][352659534717092][5798 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 21:19:04][350792526040496][1 ms][INFO] === Request start === [2025-08-24 21:19:04][350792526040496][1 ms][DEBUG] START check_scloud [2025-08-24 21:19:04][350792526040496][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 21:19:05][350792526040496][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 26715 12465 24893288 108448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 21:19:05][350792526040496][324 ms][DEBUG] targetPkg: running [2025-08-24 21:19:05][350792526040496][324 ms][DEBUG] END check_scloud in 323 ms [2025-08-24 21:19:05][350792526040496][324 ms][DEBUG] START check_boot_completed [2025-08-24 21:19:05][350792526040496][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 21:19:05][350792526040496][371 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 21:19:05][350792526040496][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 21:19:05][350792526040496][418 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 21:19:05][350792526040496][418 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 21:19:05][350792526040496][418 ms][DEBUG] rawBody.length=1149 [2025-08-24 21:19:05][350792526040496][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792526040496\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2260\"}'\'' -e'"" [2025-08-24 21:19:05][350792526040496][418 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 21:19:05][350792526040496][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792526040496\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2260\"}'\'' -e'"" [2025-08-24 21:19:16][350792526040496][11977 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c500e0f3-4766-4f8d-a6fb-8a151fddcefc","id":"QR_c500e0f3-4766-4f8d-a6fb-8a151fddcefc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 21:19:17][350792526040496][12134 ms][DEBUG] proc_open done in 11715 ms; code=255; res.len=3343 [2025-08-24 21:19:17][350792526040496][12134 ms][DEBUG] END runCmdUntilRes#1 in 11715 ms [2025-08-24 21:19:17][350792526040496][12134 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 21:27:03][350356671899518][1 ms][INFO] === Request start === [2025-08-24 21:27:03][350356671899518][1 ms][DEBUG] START check_scloud [2025-08-24 21:27:03][350356671899518][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 21:27:03][350356671899518][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 26715 12465 25036800 103984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 21:27:03][350356671899518][306 ms][DEBUG] targetPkg: running [2025-08-24 21:27:03][350356671899518][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-24 21:27:03][350356671899518][306 ms][DEBUG] START check_boot_completed [2025-08-24 21:27:03][350356671899518][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 21:27:03][350356671899518][337 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 21:27:03][350356671899518][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 21:27:03][350356671899518][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 21:27:03][350356671899518][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 21:27:03][350356671899518][384 ms][DEBUG] rawBody.length=1148 [2025-08-24 21:27:03][350356671899518][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350356671899518\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4973\"}'\'' -e'"" [2025-08-24 21:27:03][350356671899518][384 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 21:27:03][350356671899518][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350356671899518\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4973\"}'\'' -e'"" [2025-08-24 21:27:08][350356671899518][4883 ms][DEBUG] proc_open done in 4498 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 21:27:08][350356671899518][4883 ms][DEBUG] END runCmdUntilRes#1 in 4499 ms [2025-08-24 21:27:08][350356671899518][4883 ms][WARN] Detected error: Process with pid 26715 either refused to load frida-agent, or terminated during injection [2025-08-24 21:27:08][350356671899518][4883 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 21:27:08][350356671899518][5024 ms][DEBUG] SU: done in 141 ms; out [2025-08-24 21:27:08][350356671899518][5024 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 21:27:08][350356671899518][5024 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 21:27:08][350356671899518][5180 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 21:27:08][350356671899518][5180 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 21:27:08][350356671899518][5508 ms][DEBUG] SU: done in 328 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 21:27:10][350356671899518][7523 ms][DEBUG] START check_boot_completed [2025-08-24 21:27:10][350356671899518][7523 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 21:27:11][350356671899518][7570 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 21:27:11][350356671899518][7570 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 21:27:11][350356671899518][7616 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 21:27:11][350356671899518][7616 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 21:27:14][350356671899518][10631 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 21:27:14][350356671899518][10631 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350356671899518\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4973\"}'\'' -e'"" [2025-08-24 21:27:18][350356671899518][14990 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_40bb749e-2699-49b8-9e79-898041283611","id":"QR_40bb749e-2699-49b8-9e79-898041283611","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 21:27:18][350356671899518][15146 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=3343 [2025-08-24 21:27:18][350356671899518][15146 ms][DEBUG] END runCmdUntilRes#2 in 4515 ms [2025-08-24 21:27:18][350356671899518][15146 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 21:28:04][354261835973314][1 ms][INFO] === Request start === [2025-08-24 21:28:04][354261835973314][1 ms][DEBUG] START check_scloud [2025-08-24 21:28:04][354261835973314][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 21:28:04][354261835973314][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 30136 12465 23677428 125780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 21:28:04][354261835973314][313 ms][DEBUG] targetPkg: running [2025-08-24 21:28:04][354261835973314][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-24 21:28:04][354261835973314][313 ms][DEBUG] START check_boot_completed [2025-08-24 21:28:04][354261835973314][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 21:28:04][354261835973314][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 21:28:04][354261835973314][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 21:28:05][354261835973314][422 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 21:28:05][354261835973314][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 21:28:05][354261835973314][422 ms][DEBUG] START check_internet [2025-08-24 21:28:05][354261835973314][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 21:28:05][354261835973314][969 ms][DEBUG] SU: done in 546 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.256/198.256/198.256/0.000 ms\n [2025-08-24 21:28:05][354261835973314][969 ms][DEBUG] check_internet: online [2025-08-24 21:28:05][354261835973314][969 ms][DEBUG] END check_internet in 546 ms [2025-08-24 21:28:05][354261835973314][969 ms][DEBUG] rawBody.length=1150 [2025-08-24 21:28:05][354261835973314][969 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354261835973314\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3316\"}'\'' -e'"" [2025-08-24 21:28:05][354261835973314][969 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 21:28:05][354261835973314][969 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354261835973314\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3316\"}'\'' -e'"" [2025-08-24 21:28:10][354261835973314][6327 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7476e10d-b6f5-4667-8836-2a00abc752e5","id":"QR_7476e10d-b6f5-4667-8836-2a00abc752e5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 21:28:11][354261835973314][6483 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-08-24 21:28:11][354261835973314][6483 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-24 21:28:11][354261835973314][6483 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 21:31:04][351676561202963][1 ms][INFO] === Request start === [2025-08-24 21:31:04][351676561202963][1 ms][DEBUG] START check_scloud [2025-08-24 21:31:04][351676561202963][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 21:31:05][351676561202963][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 30136 12465 23775116 136128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 21:31:05][351676561202963][293 ms][DEBUG] targetPkg: running [2025-08-24 21:31:05][351676561202963][293 ms][DEBUG] END check_scloud in 292 ms [2025-08-24 21:31:05][351676561202963][293 ms][DEBUG] START check_boot_completed [2025-08-24 21:31:05][351676561202963][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 21:31:05][351676561202963][324 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 21:31:05][351676561202963][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 21:31:05][351676561202963][371 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 21:31:05][351676561202963][371 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 21:31:05][351676561202963][371 ms][DEBUG] rawBody.length=1149 [2025-08-24 21:31:05][351676561202963][371 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676561202963\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2963\"}'\'' -e'"" [2025-08-24 21:31:05][351676561202963][371 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 21:31:05][351676561202963][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676561202963\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2963\"}'\'' -e'"" [2025-08-24 21:31:10][351676561202963][6073 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8e2ef704-3793-47e5-b71d-71a6513f36ed","id":"QR_8e2ef704-3793-47e5-b71d-71a6513f36ed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 21:31:10][351676561202963][6229 ms][DEBUG] proc_open done in 5858 ms; code=255; res.len=3343 [2025-08-24 21:31:10][351676561202963][6229 ms][DEBUG] END runCmdUntilRes#1 in 5858 ms [2025-08-24 21:31:10][351676561202963][6229 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 21:38:03][356192190543863][1 ms][INFO] === Request start === [2025-08-24 21:38:03][356192190543863][1 ms][DEBUG] START check_scloud [2025-08-24 21:38:03][356192190543863][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 21:38:04][356192190543863][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 30136 12465 23875748 148356 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 21:38:04][356192190543863][291 ms][DEBUG] targetPkg: running [2025-08-24 21:38:04][356192190543863][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-24 21:38:04][356192190543863][291 ms][DEBUG] START check_boot_completed [2025-08-24 21:38:04][356192190543863][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 21:38:04][356192190543863][337 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 21:38:04][356192190543863][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 21:38:04][356192190543863][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 21:38:04][356192190543863][384 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 21:38:04][356192190543863][384 ms][DEBUG] START check_internet [2025-08-24 21:38:04][356192190543863][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 21:38:04][356192190543863][993 ms][DEBUG] SU: done in 609 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.464/202.464/202.464/0.000 ms\n [2025-08-24 21:38:04][356192190543863][994 ms][DEBUG] check_internet: online [2025-08-24 21:38:04][356192190543863][994 ms][DEBUG] END check_internet in 609 ms [2025-08-24 21:38:04][356192190543863][994 ms][DEBUG] rawBody.length=1148 [2025-08-24 21:38:04][356192190543863][994 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356192190543863\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6343\"}'\'' -e'"" [2025-08-24 21:38:04][356192190543863][994 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 21:38:04][356192190543863][994 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356192190543863\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6343\"}'\'' -e'"" [2025-08-24 21:38:08][356192190543863][5148 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_44bcd14d-95b6-4d17-9715-9fb71cf4b78e","id":"QR_44bcd14d-95b6-4d17-9715-9fb71cf4b78e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 21:38:09][356192190543863][5304 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-24 21:38:09][356192190543863][5305 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-24 21:38:09][356192190543863][5305 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 21:47:04][355606370160793][1 ms][INFO] === Request start === [2025-08-24 21:47:04][355606370160793][1 ms][DEBUG] START check_scloud [2025-08-24 21:47:04][355606370160793][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 21:47:04][355606370160793][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 30136 12465 24008996 151776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 21:47:04][355606370160793][310 ms][DEBUG] targetPkg: running [2025-08-24 21:47:04][355606370160793][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-24 21:47:04][355606370160793][310 ms][DEBUG] START check_boot_completed [2025-08-24 21:47:04][355606370160793][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 21:47:04][355606370160793][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 21:47:04][355606370160793][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 21:47:05][355606370160793][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 21:47:05][355606370160793][404 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 21:47:05][355606370160793][404 ms][DEBUG] rawBody.length=1149 [2025-08-24 21:47:05][355606370160793][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355606370160793\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2054\"}'\'' -e'"" [2025-08-24 21:47:05][355606370160793][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 21:47:05][355606370160793][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355606370160793\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2054\"}'\'' -e'"" [2025-08-24 21:47:10][355606370160793][5793 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_743419ab-f3c1-4a43-b32e-a9af664de92b","id":"QR_743419ab-f3c1-4a43-b32e-a9af664de92b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 21:47:10][355606370160793][5949 ms][DEBUG] proc_open done in 5545 ms; code=255; res.len=3343 [2025-08-24 21:47:10][355606370160793][5949 ms][DEBUG] END runCmdUntilRes#1 in 5545 ms [2025-08-24 21:47:10][355606370160793][5949 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 22:00:02][352208772309491][1 ms][INFO] === Request start === [2025-08-24 22:00:02][352208772309491][1 ms][DEBUG] START check_scloud [2025-08-24 22:00:02][352208772309491][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 22:00:02][352208772309491][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 30136 12465 24151368 146660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 22:00:02][352208772309491][279 ms][DEBUG] targetPkg: running [2025-08-24 22:00:02][352208772309491][279 ms][DEBUG] END check_scloud in 278 ms [2025-08-24 22:00:02][352208772309491][279 ms][DEBUG] START check_boot_completed [2025-08-24 22:00:02][352208772309491][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 22:00:02][352208772309491][326 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 22:00:02][352208772309491][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 22:00:02][352208772309491][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 22:00:02][352208772309491][372 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 22:00:02][352208772309491][372 ms][DEBUG] START check_internet [2025-08-24 22:00:02][352208772309491][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 22:00:03][352208772309491][935 ms][DEBUG] SU: done in 563 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.772/201.772/201.772/0.000 ms\n [2025-08-24 22:00:03][352208772309491][935 ms][DEBUG] check_internet: online [2025-08-24 22:00:03][352208772309491][935 ms][DEBUG] END check_internet in 563 ms [2025-08-24 22:00:03][352208772309491][935 ms][DEBUG] rawBody.length=1148 [2025-08-24 22:00:03][352208772309491][935 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208772309491\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1983\"}'\'' -e'"" [2025-08-24 22:00:03][352208772309491][935 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 22:00:03][352208772309491][935 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352208772309491\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1983\"}'\'' -e'"" [2025-08-24 22:00:07][352208772309491][4856 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 22:00:07][352208772309491][5012 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=107 [2025-08-24 22:00:07][352208772309491][5012 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-24 22:00:07][352208772309491][5012 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 22:00:07][][0 ms][INFO] === Request start === [2025-08-24 22:00:07][][1 ms][DEBUG] START check_scloud [2025-08-24 22:00:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 22:00:08][][319 ms][DEBUG] SU: done in 319 ms; outu0_a118 30136 12465 24319516 150876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 22:00:08][][319 ms][DEBUG] targetPkg: running [2025-08-24 22:00:08][][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-24 22:00:08][][320 ms][DEBUG] START check_boot_completed [2025-08-24 22:00:08][][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 22:00:08][][366 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 22:00:08][][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 22:00:08][][413 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 22:00:08][][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 22:00:08][][413 ms][DEBUG] START check_internet [2025-08-24 22:00:08][][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 22:00:08][][663 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=138 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 138.354/138.354/138.354/0.000 ms\n [2025-08-24 22:00:08][][663 ms][DEBUG] check_internet: online [2025-08-24 22:00:08][][663 ms][DEBUG] END check_internet in 250 ms [2025-08-24 22:00:08][][663 ms][DEBUG] rawBody.length=1129 [2025-08-24 22:00:08][][663 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXB281PED\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7962\"}'\'' -e'"" [2025-08-24 22:00:08][][663 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 22:00:08][][664 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXB281PED\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7962\"}'\'' -e'"" [2025-08-24 22:00:12][][4225 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-24 22:00:12][][4381 ms][DEBUG] proc_open done in 3717 ms; code=255; res.len=107 [2025-08-24 22:00:12][][4381 ms][DEBUG] END runCmdUntilRes#1 in 3717 ms [2025-08-24 22:00:12][][4381 ms][INFO] SUCCESS response from frida (len=107) [2025-08-24 22:03:02][351976370390094][1 ms][INFO] === Request start === [2025-08-24 22:03:02][351976370390094][1 ms][DEBUG] START check_scloud [2025-08-24 22:03:02][351976370390094][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 22:03:03][351976370390094][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 30136 12465 24435420 162000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 22:03:03][351976370390094][302 ms][DEBUG] targetPkg: running [2025-08-24 22:03:03][351976370390094][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-24 22:03:03][351976370390094][302 ms][DEBUG] START check_boot_completed [2025-08-24 22:03:03][351976370390094][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 22:03:03][351976370390094][333 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 22:03:03][351976370390094][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 22:03:03][351976370390094][381 ms][DEBUG] SU: done in 48 ms; out [2025-08-24 22:03:03][351976370390094][382 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-24 22:03:03][351976370390094][382 ms][DEBUG] rawBody.length=1148 [2025-08-24 22:03:03][351976370390094][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351976370390094\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9080\"}'\'' -e'"" [2025-08-24 22:03:03][351976370390094][382 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 22:03:03][351976370390094][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351976370390094\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9080\"}'\'' -e'"" [2025-08-24 22:03:07][351976370390094][4598 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c16f16b2-9dd5-4e2d-b536-7feb4aab04c4","id":"QR_c16f16b2-9dd5-4e2d-b536-7feb4aab04c4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 22:03:07][351976370390094][4754 ms][DEBUG] proc_open done in 4372 ms; code=255; res.len=3343 [2025-08-24 22:03:07][351976370390094][4754 ms][DEBUG] END runCmdUntilRes#1 in 4372 ms [2025-08-24 22:03:07][351976370390094][4754 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 22:11:03][351642486329075][1 ms][INFO] === Request start === [2025-08-24 22:11:03][351642486329075][1 ms][DEBUG] START check_scloud [2025-08-24 22:11:03][351642486329075][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 22:11:03][351642486329075][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 30136 12465 24572788 165600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 22:11:03][351642486329075][306 ms][DEBUG] targetPkg: running [2025-08-24 22:11:03][351642486329075][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-24 22:11:03][351642486329075][306 ms][DEBUG] START check_boot_completed [2025-08-24 22:11:03][351642486329075][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 22:11:03][351642486329075][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 22:11:03][351642486329075][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 22:11:03][351642486329075][415 ms][DEBUG] SU: done in 63 ms; out [2025-08-24 22:11:03][351642486329075][415 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 22:11:03][351642486329075][415 ms][DEBUG] rawBody.length=1148 [2025-08-24 22:11:03][351642486329075][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642486329075\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6045\"}'\'' -e'"" [2025-08-24 22:11:03][351642486329075][415 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 22:11:03][351642486329075][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642486329075\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6045\"}'\'' -e'"" [2025-08-24 22:11:08][351642486329075][4914 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d4ca595d-8152-4c37-bebe-eeb174e17776","id":"QR_d4ca595d-8152-4c37-bebe-eeb174e17776","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 22:11:08][351642486329075][5070 ms][DEBUG] proc_open done in 4655 ms; code=255; res.len=3343 [2025-08-24 22:11:08][351642486329075][5070 ms][DEBUG] END runCmdUntilRes#1 in 4655 ms [2025-08-24 22:11:08][351642486329075][5070 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 22:31:04][355824555013626][1 ms][INFO] === Request start === [2025-08-24 22:31:04][355824555013626][1 ms][DEBUG] START check_scloud [2025-08-24 22:31:04][355824555013626][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 22:31:05][355824555013626][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 30136 12465 24695640 177248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 22:31:05][355824555013626][299 ms][DEBUG] targetPkg: running [2025-08-24 22:31:05][355824555013626][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-24 22:31:05][355824555013626][299 ms][DEBUG] START check_boot_completed [2025-08-24 22:31:05][355824555013626][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 22:31:05][355824555013626][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 22:31:05][355824555013626][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 22:31:05][355824555013626][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 22:31:05][355824555013626][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 22:31:05][355824555013626][377 ms][DEBUG] rawBody.length=1149 [2025-08-24 22:31:05][355824555013626][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824555013626\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8616\"}'\'' -e'"" [2025-08-24 22:31:05][355824555013626][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 22:31:05][355824555013626][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824555013626\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8616\"}'\'' -e'"" [2025-08-24 22:31:10][355824555013626][5548 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_43b10a67-1878-474a-b70c-942ae76a2015","id":"QR_43b10a67-1878-474a-b70c-942ae76a2015","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 22:31:10][355824555013626][5704 ms][DEBUG] proc_open done in 5327 ms; code=255; res.len=3343 [2025-08-24 22:31:10][355824555013626][5704 ms][DEBUG] END runCmdUntilRes#1 in 5327 ms [2025-08-24 22:31:10][355824555013626][5704 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 22:35:05][351024052394405][1 ms][INFO] === Request start === [2025-08-24 22:35:05][351024052394405][1 ms][DEBUG] START check_scloud [2025-08-24 22:35:05][351024052394405][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 22:35:05][351024052394405][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 30136 12465 24844484 184076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 22:35:05][351024052394405][314 ms][DEBUG] targetPkg: running [2025-08-24 22:35:05][351024052394405][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-24 22:35:05][351024052394405][314 ms][DEBUG] START check_boot_completed [2025-08-24 22:35:05][351024052394405][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 22:35:05][351024052394405][345 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 22:35:05][351024052394405][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 22:35:05][351024052394405][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 22:35:05][351024052394405][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 22:35:05][351024052394405][392 ms][DEBUG] rawBody.length=1149 [2025-08-24 22:35:05][351024052394405][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351024052394405\",\"model\":\"SM-A536U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6738\"}'\'' -e'"" [2025-08-24 22:35:05][351024052394405][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 22:35:05][351024052394405][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351024052394405\",\"model\":\"SM-A536U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6738\"}'\'' -e'"" [2025-08-24 22:35:11][351024052394405][6641 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_10a5e3cb-78a5-4033-8155-9102d809e6d4","id":"QR_10a5e3cb-78a5-4033-8155-9102d809e6d4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 22:35:11][351024052394405][6797 ms][DEBUG] proc_open done in 6404 ms; code=255; res.len=3343 [2025-08-24 22:35:11][351024052394405][6797 ms][DEBUG] END runCmdUntilRes#1 in 6404 ms [2025-08-24 22:35:11][351024052394405][6797 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 22:39:03][356408513493200][1 ms][INFO] === Request start === [2025-08-24 22:39:03][356408513493200][1 ms][DEBUG] START check_scloud [2025-08-24 22:39:03][356408513493200][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 22:39:04][356408513493200][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 30136 12465 24993192 192552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 22:39:04][356408513493200][297 ms][DEBUG] targetPkg: running [2025-08-24 22:39:04][356408513493200][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-24 22:39:04][356408513493200][297 ms][DEBUG] START check_boot_completed [2025-08-24 22:39:04][356408513493200][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 22:39:04][356408513493200][328 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 22:39:04][356408513493200][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 22:39:04][356408513493200][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 22:39:04][356408513493200][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 22:39:04][356408513493200][376 ms][DEBUG] rawBody.length=1149 [2025-08-24 22:39:04][356408513493200][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356408513493200\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4557\"}'\'' -e'"" [2025-08-24 22:39:04][356408513493200][376 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 22:39:04][356408513493200][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356408513493200\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4557\"}'\'' -e'"" [2025-08-24 22:39:08][356408513493200][4765 ms][DEBUG] proc_open done in 4389 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-24 22:39:08][356408513493200][4765 ms][DEBUG] END runCmdUntilRes#1 in 4390 ms [2025-08-24 22:39:08][356408513493200][4765 ms][WARN] Detected error: Process with pid 30136 either refused to load frida-agent, or terminated during injection [2025-08-24 22:39:08][356408513493200][4765 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-24 22:39:08][356408513493200][4921 ms][DEBUG] SU: done in 156 ms; out [2025-08-24 22:39:08][356408513493200][4921 ms][WARN] targetPkg: not running, restarting 2 [2025-08-24 22:39:08][356408513493200][4921 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-24 22:39:08][356408513493200][5062 ms][DEBUG] SU: done in 141 ms; out [2025-08-24 22:39:08][356408513493200][5062 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-24 22:39:08][356408513493200][5234 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-24 22:39:10][356408513493200][7249 ms][DEBUG] START check_boot_completed [2025-08-24 22:39:10][356408513493200][7249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 22:39:11][356408513493200][7295 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 22:39:11][356408513493200][7295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 22:39:11][356408513493200][7342 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 22:39:11][356408513493200][7342 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-24 22:39:14][356408513493200][10357 ms][DEBUG] START runCmdUntilRes#2 [2025-08-24 22:39:14][356408513493200][10357 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356408513493200\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4557\"}'\'' -e'"" [2025-08-24 22:39:19][356408513493200][15731 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5f07815a-3254-4cd5-9072-e9a74c94c680","id":"QR_5f07815a-3254-4cd5-9072-e9a74c94c680","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 22:39:19][356408513493200][15887 ms][DEBUG] proc_open done in 5530 ms; code=255; res.len=3343 [2025-08-24 22:39:19][356408513493200][15887 ms][DEBUG] END runCmdUntilRes#2 in 5530 ms [2025-08-24 22:39:19][356408513493200][15887 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 22:57:05][352415378450583][1 ms][INFO] === Request start === [2025-08-24 22:57:05][352415378450583][1 ms][DEBUG] START check_scloud [2025-08-24 22:57:05][352415378450583][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 22:57:05][352415378450583][247 ms][DEBUG] SU: done in 246 ms; outu0_a118 1942 12465 23651188 126572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 22:57:05][352415378450583][247 ms][DEBUG] targetPkg: running [2025-08-24 22:57:05][352415378450583][247 ms][DEBUG] END check_scloud in 246 ms [2025-08-24 22:57:05][352415378450583][247 ms][DEBUG] START check_boot_completed [2025-08-24 22:57:05][352415378450583][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 22:57:05][352415378450583][278 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 22:57:05][352415378450583][278 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 22:57:05][352415378450583][325 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 22:57:05][352415378450583][325 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 22:57:05][352415378450583][325 ms][DEBUG] rawBody.length=1149 [2025-08-24 22:57:05][352415378450583][326 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352415378450583\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2485\"}'\'' -e'"" [2025-08-24 22:57:05][352415378450583][326 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 22:57:05][352415378450583][326 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352415378450583\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2485\"}'\'' -e'"" [2025-08-24 22:57:11][352415378450583][5777 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1f917aed-e64a-408c-99e4-6d6f293e63c4","id":"QR_1f917aed-e64a-408c-99e4-6d6f293e63c4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 22:57:11][352415378450583][5933 ms][DEBUG] proc_open done in 5607 ms; code=255; res.len=3343 [2025-08-24 22:57:11][352415378450583][5933 ms][DEBUG] END runCmdUntilRes#1 in 5607 ms [2025-08-24 22:57:11][352415378450583][5933 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 22:58:03][352429620233341][0 ms][INFO] === Request start === [2025-08-24 22:58:03][352429620233341][1 ms][DEBUG] START check_scloud [2025-08-24 22:58:03][352429620233341][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 22:58:04][352429620233341][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 1942 12465 23810852 137640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 22:58:04][352429620233341][303 ms][DEBUG] targetPkg: running [2025-08-24 22:58:04][352429620233341][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-24 22:58:04][352429620233341][303 ms][DEBUG] START check_boot_completed [2025-08-24 22:58:04][352429620233341][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 22:58:04][352429620233341][350 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 22:58:04][352429620233341][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 22:58:04][352429620233341][412 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 22:58:04][352429620233341][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 22:58:04][352429620233341][413 ms][DEBUG] START check_internet [2025-08-24 22:58:04][352429620233341][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 22:58:04][352429620233341][975 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.416/202.416/202.416/0.000 ms\n [2025-08-24 22:58:04][352429620233341][975 ms][DEBUG] check_internet: online [2025-08-24 22:58:04][352429620233341][975 ms][DEBUG] END check_internet in 562 ms [2025-08-24 22:58:04][352429620233341][975 ms][DEBUG] rawBody.length=1148 [2025-08-24 22:58:04][352429620233341][975 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352429620233341\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9772\"}'\'' -e'"" [2025-08-24 22:58:04][352429620233341][975 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 22:58:04][352429620233341][975 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352429620233341\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9772\"}'\'' -e'"" [2025-08-24 22:58:08][352429620233341][5052 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb74c530-2b35-435f-9fd4-a84fd5c78f77","id":"QR_eb74c530-2b35-435f-9fd4-a84fd5c78f77","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 22:58:08][352429620233341][5208 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-24 22:58:08][352429620233341][5208 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-24 22:58:08][352429620233341][5208 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 22:58:11][354838353744720][0 ms][INFO] === Request start === [2025-08-24 22:58:11][354838353744720][1 ms][DEBUG] START check_scloud [2025-08-24 22:58:11][354838353744720][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 22:58:12][354838353744720][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 1942 12465 23975660 148216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 22:58:12][354838353744720][265 ms][DEBUG] targetPkg: running [2025-08-24 22:58:12][354838353744720][265 ms][DEBUG] END check_scloud in 264 ms [2025-08-24 22:58:12][354838353744720][265 ms][DEBUG] START check_boot_completed [2025-08-24 22:58:12][354838353744720][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 22:58:12][354838353744720][296 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 22:58:12][354838353744720][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 22:58:12][354838353744720][343 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 22:58:12][354838353744720][343 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 22:58:12][354838353744720][343 ms][DEBUG] START check_internet [2025-08-24 22:58:12][354838353744720][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 22:58:12][354838353744720][765 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=264 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 264.737/264.737/264.737/0.000 ms\n [2025-08-24 22:58:12][354838353744720][765 ms][DEBUG] check_internet: online [2025-08-24 22:58:12][354838353744720][765 ms][DEBUG] END check_internet in 422 ms [2025-08-24 22:58:12][354838353744720][765 ms][DEBUG] rawBody.length=1148 [2025-08-24 22:58:12][354838353744720][765 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838353744720\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3287\"}'\'' -e'"" [2025-08-24 22:58:12][354838353744720][765 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 22:58:12][354838353744720][765 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354838353744720\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3287\"}'\'' -e'"" [2025-08-24 22:58:16][354838353744720][4560 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c3770620-6df4-4bcc-9e44-90cafe965d6a","id":"QR_c3770620-6df4-4bcc-9e44-90cafe965d6a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 22:58:16][354838353744720][4717 ms][DEBUG] proc_open done in 3951 ms; code=255; res.len=3343 [2025-08-24 22:58:16][354838353744720][4717 ms][DEBUG] END runCmdUntilRes#1 in 3951 ms [2025-08-24 22:58:16][354838353744720][4717 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 23:05:05][353414750633527][1 ms][INFO] === Request start === [2025-08-24 23:05:05][353414750633527][1 ms][DEBUG] START check_scloud [2025-08-24 23:05:05][353414750633527][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 23:05:05][353414750633527][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 1942 12465 24057508 158872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 23:05:05][353414750633527][304 ms][DEBUG] targetPkg: running [2025-08-24 23:05:05][353414750633527][305 ms][DEBUG] END check_scloud in 303 ms [2025-08-24 23:05:05][353414750633527][305 ms][DEBUG] START check_boot_completed [2025-08-24 23:05:05][353414750633527][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 23:05:05][353414750633527][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-24 23:05:05][353414750633527][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 23:05:05][353414750633527][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 23:05:05][353414750633527][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-24 23:05:05][353414750633527][398 ms][DEBUG] rawBody.length=1149 [2025-08-24 23:05:05][353414750633527][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353414750633527\",\"model\":\"SM-S901E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8596\"}'\'' -e'"" [2025-08-24 23:05:05][353414750633527][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 23:05:05][353414750633527][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353414750633527\",\"model\":\"SM-S901E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8596\"}'\'' -e'"" [2025-08-24 23:05:12][353414750633527][7037 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d2d197f6-07cc-4ac7-8d5b-a2ad3e908f0a","id":"QR_d2d197f6-07cc-4ac7-8d5b-a2ad3e908f0a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 23:05:12][353414750633527][7193 ms][DEBUG] proc_open done in 6795 ms; code=255; res.len=3343 [2025-08-24 23:05:12][353414750633527][7193 ms][DEBUG] END runCmdUntilRes#1 in 6795 ms [2025-08-24 23:05:12][353414750633527][7193 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 23:08:03][350411874016715][1 ms][INFO] === Request start === [2025-08-24 23:08:03][350411874016715][1 ms][DEBUG] START check_scloud [2025-08-24 23:08:03][350411874016715][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 23:08:03][350411874016715][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 1942 12465 24223636 170732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 23:08:03][350411874016715][305 ms][DEBUG] targetPkg: running [2025-08-24 23:08:03][350411874016715][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-24 23:08:03][350411874016715][305 ms][DEBUG] START check_boot_completed [2025-08-24 23:08:03][350411874016715][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 23:08:03][350411874016715][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 23:08:03][350411874016715][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 23:08:03][350411874016715][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 23:08:03][350411874016715][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 23:08:03][350411874016715][384 ms][DEBUG] START check_internet [2025-08-24 23:08:03][350411874016715][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 23:08:03][350411874016715][883 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.784/202.784/202.784/0.000 ms\n [2025-08-24 23:08:03][350411874016715][883 ms][DEBUG] check_internet: online [2025-08-24 23:08:03][350411874016715][883 ms][DEBUG] END check_internet in 500 ms [2025-08-24 23:08:03][350411874016715][884 ms][DEBUG] rawBody.length=1148 [2025-08-24 23:08:03][350411874016715][884 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350411874016715\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8697\"}'\'' -e'"" [2025-08-24 23:08:03][350411874016715][884 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 23:08:03][350411874016715][884 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350411874016715\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8697\"}'\'' -e'"" [2025-08-24 23:08:08][350411874016715][5054 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_06054ccd-56a0-4eb5-9e35-8f809ae5c6cf","id":"QR_06054ccd-56a0-4eb5-9e35-8f809ae5c6cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 23:08:08][350411874016715][5210 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=3343 [2025-08-24 23:08:08][350411874016715][5210 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-24 23:08:08][350411874016715][5210 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 23:30:05][350448241270518][1 ms][INFO] === Request start === [2025-08-24 23:30:05][350448241270518][1 ms][DEBUG] START check_scloud [2025-08-24 23:30:05][350448241270518][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 23:30:06][350448241270518][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 1942 12465 24338476 171396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 23:30:06][350448241270518][298 ms][DEBUG] targetPkg: running [2025-08-24 23:30:06][350448241270518][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-24 23:30:06][350448241270518][298 ms][DEBUG] START check_boot_completed [2025-08-24 23:30:06][350448241270518][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 23:30:06][350448241270518][345 ms][DEBUG] ADB: done in 47 ms; out [2025-08-24 23:30:06][350448241270518][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 23:30:06][350448241270518][407 ms][DEBUG] SU: done in 62 ms; out [2025-08-24 23:30:06][350448241270518][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-24 23:30:06][350448241270518][407 ms][DEBUG] START check_internet [2025-08-24 23:30:06][350448241270518][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 23:30:06][350448241270518][923 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.518/202.518/202.518/0.000 ms\n [2025-08-24 23:30:06][350448241270518][923 ms][DEBUG] check_internet: online [2025-08-24 23:30:06][350448241270518][923 ms][DEBUG] END check_internet in 516 ms [2025-08-24 23:30:06][350448241270518][923 ms][DEBUG] rawBody.length=1149 [2025-08-24 23:30:06][350448241270518][923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350448241270518\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9119\"}'\'' -e'"" [2025-08-24 23:30:06][350448241270518][923 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 23:30:06][350448241270518][923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350448241270518\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9119\"}'\'' -e'"" [2025-08-24 23:30:12][350448241270518][6577 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e0574f87-b4a4-42d0-b735-982057280184","id":"QR_e0574f87-b4a4-42d0-b735-982057280184","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 23:30:12][350448241270518][6734 ms][DEBUG] proc_open done in 5810 ms; code=255; res.len=3343 [2025-08-24 23:30:12][350448241270518][6734 ms][DEBUG] END runCmdUntilRes#1 in 5811 ms [2025-08-24 23:30:12][350448241270518][6734 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-24 23:56:05][351676567752177][1 ms][INFO] === Request start === [2025-08-24 23:56:05][351676567752177][1 ms][DEBUG] START check_scloud [2025-08-24 23:56:05][351676567752177][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-24 23:56:05][351676567752177][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 1942 12465 24450320 168528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-24 23:56:05][351676567752177][324 ms][DEBUG] targetPkg: running [2025-08-24 23:56:05][351676567752177][324 ms][DEBUG] END check_scloud in 323 ms [2025-08-24 23:56:05][351676567752177][324 ms][DEBUG] START check_boot_completed [2025-08-24 23:56:05][351676567752177][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-24 23:56:05][351676567752177][354 ms][DEBUG] ADB: done in 31 ms; out [2025-08-24 23:56:05][351676567752177][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-24 23:56:05][351676567752177][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-24 23:56:05][351676567752177][402 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-24 23:56:05][351676567752177][402 ms][DEBUG] START check_internet [2025-08-24 23:56:05][351676567752177][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-24 23:56:06][351676567752177][870 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.009/203.009/203.009/0.000 ms\n [2025-08-24 23:56:06][351676567752177][870 ms][DEBUG] check_internet: online [2025-08-24 23:56:06][351676567752177][871 ms][DEBUG] END check_internet in 469 ms [2025-08-24 23:56:06][351676567752177][871 ms][DEBUG] rawBody.length=1149 [2025-08-24 23:56:06][351676567752177][871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676567752177\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2234\"}'\'' -e'"" [2025-08-24 23:56:06][351676567752177][871 ms][DEBUG] START runCmdUntilRes#1 [2025-08-24 23:56:06][351676567752177][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676567752177\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2234\"}'\'' -e'"" [2025-08-24 23:56:13][351676567752177][7665 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_213e7715-a898-4f49-99d2-786bf8062fab","id":"QR_213e7715-a898-4f49-99d2-786bf8062fab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-24 23:56:13][351676567752177][7822 ms][DEBUG] proc_open done in 6951 ms; code=255; res.len=3343 [2025-08-24 23:56:13][351676567752177][7822 ms][DEBUG] END runCmdUntilRes#1 in 6951 ms [2025-08-24 23:56:13][351676567752177][7822 ms][INFO] SUCCESS response from frida (len=3343)