[2025-08-26 00:00:05][350655882469742][1 ms][INFO] === Request start === [2025-08-26 00:00:05][350655882469742][2 ms][DEBUG] START check_scloud [2025-08-26 00:00:05][350655882469742][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 00:00:05][350655882469742][266 ms][DEBUG] SU: done in 264 ms; outu0_a118 1506 4974 24062080 139940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 00:00:05][350655882469742][266 ms][DEBUG] targetPkg: running [2025-08-26 00:00:05][350655882469742][266 ms][DEBUG] END check_scloud in 264 ms [2025-08-26 00:00:05][350655882469742][266 ms][DEBUG] START check_boot_completed [2025-08-26 00:00:05][350655882469742][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 00:00:05][350655882469742][297 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 00:00:05][350655882469742][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 00:00:05][350655882469742][344 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 00:00:05][350655882469742][344 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 00:00:05][350655882469742][344 ms][DEBUG] START check_internet [2025-08-26 00:00:05][350655882469742][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 00:00:05][350655882469742][828 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.694/201.694/201.694/0.000 ms\n [2025-08-26 00:00:05][350655882469742][828 ms][DEBUG] check_internet: online [2025-08-26 00:00:05][350655882469742][828 ms][DEBUG] END check_internet in 484 ms [2025-08-26 00:00:05][350655882469742][828 ms][DEBUG] rawBody.length=1149 [2025-08-26 00:00:05][350655882469742][828 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350655882469742\",\"model\":\"SM-A156W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5780\"}'\'' -e'"" [2025-08-26 00:00:05][350655882469742][828 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 00:00:05][350655882469742][828 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350655882469742\",\"model\":\"SM-A156W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5780\"}'\'' -e'"" [2025-08-26 00:00:10][350655882469742][5795 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_86356c26-34a2-42ed-951d-9f50b8a1611b","id":"QR_86356c26-34a2-42ed-951d-9f50b8a1611b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 00:00:11][350655882469742][5952 ms][DEBUG] proc_open done in 5123 ms; code=255; res.len=3343 [2025-08-26 00:00:11][350655882469742][5952 ms][DEBUG] END runCmdUntilRes#1 in 5123 ms [2025-08-26 00:00:11][350655882469742][5952 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 00:01:04][353548751888406][1 ms][INFO] === Request start === [2025-08-26 00:01:04][353548751888406][1 ms][DEBUG] START check_scloud [2025-08-26 00:01:04][353548751888406][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 00:01:05][353548751888406][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 1506 4974 24221028 143056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 00:01:05][353548751888406][308 ms][DEBUG] targetPkg: running [2025-08-26 00:01:05][353548751888406][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-26 00:01:05][353548751888406][308 ms][DEBUG] START check_boot_completed [2025-08-26 00:01:05][353548751888406][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 00:01:05][353548751888406][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 00:01:05][353548751888406][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 00:01:05][353548751888406][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 00:01:05][353548751888406][401 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 00:01:05][353548751888406][401 ms][DEBUG] rawBody.length=1149 [2025-08-26 00:01:05][353548751888406][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548751888406\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8905\"}'\'' -e'"" [2025-08-26 00:01:05][353548751888406][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 00:01:05][353548751888406][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548751888406\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8905\"}'\'' -e'"" [2025-08-26 00:01:10][353548751888406][5400 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_776cadf4-adb9-4205-8663-4825e5294f39","id":"QR_776cadf4-adb9-4205-8663-4825e5294f39","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 00:01:10][353548751888406][5556 ms][DEBUG] proc_open done in 5154 ms; code=255; res.len=3343 [2025-08-26 00:01:10][353548751888406][5556 ms][DEBUG] END runCmdUntilRes#1 in 5155 ms [2025-08-26 00:01:10][353548751888406][5556 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 00:01:16][354106708591430][0 ms][INFO] === Request start === [2025-08-26 00:01:16][354106708591430][1 ms][DEBUG] START check_scloud [2025-08-26 00:01:16][354106708591430][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 00:01:16][354106708591430][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 1506 4974 24390124 155212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 00:01:16][354106708591430][310 ms][DEBUG] targetPkg: running [2025-08-26 00:01:16][354106708591430][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 00:01:16][354106708591430][310 ms][DEBUG] START check_boot_completed [2025-08-26 00:01:16][354106708591430][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 00:01:16][354106708591430][355 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 00:01:16][354106708591430][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 00:01:16][354106708591430][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 00:01:16][354106708591430][418 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-26 00:01:16][354106708591430][418 ms][DEBUG] rawBody.length=1149 [2025-08-26 00:01:16][354106708591430][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106708591430\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7035\"}'\'' -e'"" [2025-08-26 00:01:16][354106708591430][418 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 00:01:16][354106708591430][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106708591430\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7035\"}'\'' -e'"" [2025-08-26 00:01:21][354106708591430][5213 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4b631a4f-0f00-40b6-afbb-44c08a9250a2","id":"QR_4b631a4f-0f00-40b6-afbb-44c08a9250a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 00:01:21][354106708591430][5370 ms][DEBUG] proc_open done in 4952 ms; code=255; res.len=3343 [2025-08-26 00:01:21][354106708591430][5370 ms][DEBUG] END runCmdUntilRes#1 in 4952 ms [2025-08-26 00:01:21][354106708591430][5370 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 00:09:05][355030760414399][1 ms][INFO] === Request start === [2025-08-26 00:09:05][355030760414399][1 ms][DEBUG] START check_scloud [2025-08-26 00:09:05][355030760414399][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 00:09:05][355030760414399][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 1506 4974 24512992 167012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 00:09:05][355030760414399][283 ms][DEBUG] targetPkg: running [2025-08-26 00:09:05][355030760414399][283 ms][DEBUG] END check_scloud in 282 ms [2025-08-26 00:09:05][355030760414399][283 ms][DEBUG] START check_boot_completed [2025-08-26 00:09:05][355030760414399][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 00:09:05][355030760414399][315 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 00:09:05][355030760414399][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 00:09:05][355030760414399][377 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 00:09:05][355030760414399][377 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 00:09:05][355030760414399][377 ms][DEBUG] rawBody.length=1149 [2025-08-26 00:09:05][355030760414399][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355030760414399\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7962\"}'\'' -e'"" [2025-08-26 00:09:05][355030760414399][378 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 00:09:05][355030760414399][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355030760414399\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7962\"}'\'' -e'"" [2025-08-26 00:09:10][355030760414399][5485 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_62f3219a-b313-4d32-b3b9-b4cf47e0c6dd","id":"QR_62f3219a-b313-4d32-b3b9-b4cf47e0c6dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 00:09:10][355030760414399][5642 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-08-26 00:09:10][355030760414399][5642 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-08-26 00:09:10][355030760414399][5642 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 00:10:03][353684144422759][0 ms][INFO] === Request start === [2025-08-26 00:10:03][353684144422759][1 ms][DEBUG] START check_scloud [2025-08-26 00:10:03][353684144422759][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 00:10:04][353684144422759][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 1506 4974 24636176 178284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 00:10:04][353684144422759][254 ms][DEBUG] targetPkg: running [2025-08-26 00:10:04][353684144422759][255 ms][DEBUG] END check_scloud in 254 ms [2025-08-26 00:10:04][353684144422759][255 ms][DEBUG] START check_boot_completed [2025-08-26 00:10:04][353684144422759][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 00:10:04][353684144422759][300 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 00:10:04][353684144422759][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 00:10:04][353684144422759][362 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 00:10:04][353684144422759][362 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-26 00:10:04][353684144422759][362 ms][DEBUG] START check_internet [2025-08-26 00:10:04][353684144422759][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 00:10:04][353684144422759][831 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.225/199.225/199.225/0.000 ms\n [2025-08-26 00:10:04][353684144422759][831 ms][DEBUG] check_internet: online [2025-08-26 00:10:04][353684144422759][831 ms][DEBUG] END check_internet in 469 ms [2025-08-26 00:10:04][353684144422759][831 ms][DEBUG] rawBody.length=1148 [2025-08-26 00:10:04][353684144422759][831 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684144422759\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7568\"}'\'' -e'"" [2025-08-26 00:10:04][353684144422759][831 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 00:10:04][353684144422759][831 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684144422759\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7568\"}'\'' -e'"" [2025-08-26 00:10:08][353684144422759][4642 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b53e0448-1669-40de-80f4-03659a627f65","id":"QR_b53e0448-1669-40de-80f4-03659a627f65","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 00:10:08][353684144422759][4798 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-26 00:10:08][353684144422759][4798 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-26 00:10:08][353684144422759][4798 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 00:18:04][352610711366229][1 ms][INFO] === Request start === [2025-08-26 00:18:04][352610711366229][1 ms][DEBUG] START check_scloud [2025-08-26 00:18:04][352610711366229][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 00:18:05][352610711366229][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 1506 4974 24764332 190376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 00:18:05][352610711366229][303 ms][DEBUG] targetPkg: running [2025-08-26 00:18:05][352610711366229][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 00:18:05][352610711366229][303 ms][DEBUG] START check_boot_completed [2025-08-26 00:18:05][352610711366229][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 00:18:05][352610711366229][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 00:18:05][352610711366229][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 00:18:05][352610711366229][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 00:18:05][352610711366229][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 00:18:05][352610711366229][381 ms][DEBUG] START check_internet [2025-08-26 00:18:05][352610711366229][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 00:18:05][352610711366229][850 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.984/202.984/202.984/0.000 ms\n [2025-08-26 00:18:05][352610711366229][850 ms][DEBUG] check_internet: online [2025-08-26 00:18:05][352610711366229][850 ms][DEBUG] END check_internet in 469 ms [2025-08-26 00:18:05][352610711366229][850 ms][DEBUG] rawBody.length=1149 [2025-08-26 00:18:05][352610711366229][850 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352610711366229\",\"model\":\"SM-A356U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6043\"}'\'' -e'"" [2025-08-26 00:18:05][352610711366229][850 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 00:18:05][352610711366229][850 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352610711366229\",\"model\":\"SM-A356U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6043\"}'\'' -e'"" [2025-08-26 00:18:10][352610711366229][5973 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f46e56b5-b704-43e8-ac8b-617eca669f4c","id":"QR_f46e56b5-b704-43e8-ac8b-617eca669f4c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 00:18:10][352610711366229][6129 ms][DEBUG] proc_open done in 5279 ms; code=255; res.len=3343 [2025-08-26 00:18:10][352610711366229][6129 ms][DEBUG] END runCmdUntilRes#1 in 5279 ms [2025-08-26 00:18:10][352610711366229][6129 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 00:18:16][355472982898852][0 ms][INFO] === Request start === [2025-08-26 00:18:16][355472982898852][1 ms][DEBUG] START check_scloud [2025-08-26 00:18:16][355472982898852][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 00:18:16][355472982898852][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 1506 4974 24946944 200980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 00:18:16][355472982898852][272 ms][DEBUG] targetPkg: running [2025-08-26 00:18:16][355472982898852][272 ms][DEBUG] END check_scloud in 272 ms [2025-08-26 00:18:16][355472982898852][272 ms][DEBUG] START check_boot_completed [2025-08-26 00:18:16][355472982898852][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 00:18:16][355472982898852][319 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 00:18:16][355472982898852][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 00:18:16][355472982898852][381 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 00:18:16][355472982898852][381 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 00:18:16][355472982898852][381 ms][DEBUG] START check_internet [2025-08-26 00:18:16][355472982898852][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 00:18:16][355472982898852][663 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.926/163.926/163.926/0.000 ms\n [2025-08-26 00:18:16][355472982898852][663 ms][DEBUG] check_internet: online [2025-08-26 00:18:16][355472982898852][663 ms][DEBUG] END check_internet in 282 ms [2025-08-26 00:18:16][355472982898852][663 ms][DEBUG] rawBody.length=1148 [2025-08-26 00:18:16][355472982898852][663 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355472982898852\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2553\"}'\'' -e'"" [2025-08-26 00:18:16][355472982898852][663 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 00:18:16][355472982898852][663 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355472982898852\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2553\"}'\'' -e'"" [2025-08-26 00:18:24][355472982898852][8661 ms][DEBUG] proc_open done in 7998 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-26 00:18:24][355472982898852][8661 ms][DEBUG] END runCmdUntilRes#1 in 7998 ms [2025-08-26 00:18:24][355472982898852][8661 ms][WARN] Detected error: Process with pid 1506 either refused to load frida-agent, or terminated during injection [2025-08-26 00:18:24][355472982898852][8661 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 00:18:24][355472982898852][8864 ms][DEBUG] SU: done in 203 ms; out [2025-08-26 00:18:24][355472982898852][8864 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 00:18:24][355472982898852][8864 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 00:18:25][355472982898852][9129 ms][DEBUG] SU: done in 266 ms; out [2025-08-26 00:18:25][355472982898852][9129 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 00:18:25][355472982898852][9473 ms][DEBUG] SU: done in 343 ms; out [2025-08-26 00:18:27][355472982898852][11488 ms][DEBUG] START check_boot_completed [2025-08-26 00:18:27][355472982898852][11488 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 00:18:27][355472982898852][11535 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 00:18:27][355472982898852][11535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 00:18:27][355472982898852][11613 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 00:18:27][355472982898852][11613 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 00:18:30][355472982898852][14628 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 00:18:30][355472982898852][14628 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355472982898852\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2553\"}'\'' -e'"" [2025-08-26 00:18:32][355472982898852][16112 ms][DEBUG] proc_open done in 1484 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-26 00:18:32][355472982898852][16112 ms][DEBUG] END runCmdUntilRes#2 in 1485 ms [2025-08-26 00:18:32][355472982898852][16112 ms][WARN] Detected error 2; Reboot the device [2025-08-26 00:18:32][355472982898852][16112 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-26 00:18:32][355472982898852][16737 ms][DEBUG] SU: done in 624 ms; out [2025-08-26 00:19:03][355472982898852][0 ms][INFO] === Request start === [2025-08-26 00:19:03][355472982898852][1 ms][DEBUG] START check_scloud [2025-08-26 00:19:03][355472982898852][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 00:19:04][355472982898852][29 ms][DEBUG] SU: done in 28 ms; out [2025-08-26 00:19:04][355472982898852][29 ms][WARN] targetPkg: not running, restarting [2025-08-26 00:19:04][355472982898852][29 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 00:19:04][355472982898852][60 ms][DEBUG] SU: done in 31 ms; out [2025-08-26 00:19:04][355472982898852][60 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 00:19:04][355472982898852][91 ms][DEBUG] SU: done in 31 ms; out [2025-08-26 00:19:06][355472982898852][2106 ms][DEBUG] END check_scloud in 2106 ms [2025-08-26 00:19:06][355472982898852][2106 ms][DEBUG] START check_boot_completed [2025-08-26 00:19:06][355472982898852][2107 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 00:19:33][355472982898852][29556 ms][DEBUG] ADB: done in 27450 ms; out [2025-08-26 00:19:33][355472982898852][29556 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 00:19:33][355472982898852][29697 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 00:19:33][355472982898852][29697 ms][DEBUG] END check_boot_completed in 27591 ms [2025-08-26 00:19:33][355472982898852][29697 ms][DEBUG] rawBody.length=1148 [2025-08-26 00:19:33][355472982898852][29697 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355472982898852\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1179\"}'\'' -e'"" [2025-08-26 00:19:33][355472982898852][29697 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 00:19:33][355472982898852][29698 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355472982898852\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1179\"}'\'' -e'"" [2025-08-26 00:19:36][355472982898852][32821 ms][DEBUG] proc_open done in 3124 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-26 00:19:36][355472982898852][32822 ms][DEBUG] END runCmdUntilRes#1 in 3124 ms [2025-08-26 00:19:36][355472982898852][32822 ms][WARN] Detected error: Process not found [2025-08-26 00:19:36][355472982898852][32822 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 00:19:36][355472982898852][32962 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 00:19:36][355472982898852][32962 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 00:19:36][355472982898852][32962 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 00:19:37][355472982898852][33134 ms][DEBUG] SU: done in 172 ms; out [2025-08-26 00:19:37][355472982898852][33134 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 00:19:37][355472982898852][33352 ms][DEBUG] SU: done in 218 ms; out [2025-08-26 00:19:39][355472982898852][35364 ms][DEBUG] START check_boot_completed [2025-08-26 00:19:39][355472982898852][35364 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 00:19:39][355472982898852][35410 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 00:19:39][355472982898852][35410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 00:19:39][355472982898852][35457 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 00:19:39][355472982898852][35457 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 00:19:42][355472982898852][38472 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 00:19:42][355472982898852][38472 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355472982898852\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1179\"}'\'' -e'"" [2025-08-26 00:20:03][355472982898852][0 ms][INFO] === Request start === [2025-08-26 00:20:03][355472982898852][1 ms][DEBUG] START check_scloud [2025-08-26 00:20:03][355472982898852][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 00:20:04][355472982898852][382 ms][DEBUG] SU: done in 382 ms; out [2025-08-26 00:20:04][355472982898852][382 ms][WARN] targetPkg: not running, restarting [2025-08-26 00:20:04][355472982898852][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 00:20:04][355472982898852][521 ms][DEBUG] SU: done in 138 ms; out [2025-08-26 00:20:04][355472982898852][521 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 00:20:04][355472982898852][724 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 00:20:06][355472982898852][2739 ms][DEBUG] END check_scloud in 2738 ms [2025-08-26 00:20:06][355472982898852][2739 ms][DEBUG] START check_boot_completed [2025-08-26 00:20:06][355472982898852][2739 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 00:20:06][355472982898852][2786 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 00:20:06][355472982898852][2786 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 00:20:06][355472982898852][2834 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 00:20:06][355472982898852][2834 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 00:20:06][355472982898852][2834 ms][DEBUG] START check_internet [2025-08-26 00:20:06][355472982898852][2834 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 00:20:07][355472982898852][3177 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=191 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 191.184/191.184/191.184/0.000 ms\n [2025-08-26 00:20:07][355472982898852][3177 ms][DEBUG] check_internet: online [2025-08-26 00:20:07][355472982898852][3177 ms][DEBUG] END check_internet in 343 ms [2025-08-26 00:20:07][355472982898852][3177 ms][DEBUG] rawBody.length=1148 [2025-08-26 00:20:07][355472982898852][3177 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355472982898852\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5283\"}'\'' -e'"" [2025-08-26 00:20:07][355472982898852][3177 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 00:20:07][355472982898852][3177 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355472982898852\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5283\"}'\'' -e'"" [2025-08-26 00:20:12][355472982898852][8738 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_628e1674-c0fc-4fcf-b0cf-059de07903a2","id":"QR_628e1674-c0fc-4fcf-b0cf-059de07903a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 00:20:12][355472982898852][8894 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-08-26 00:20:12][355472982898852][8894 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-08-26 00:20:12][355472982898852][8894 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 00:21:05][353684123403705][1 ms][INFO] === Request start === [2025-08-26 00:21:05][353684123403705][1 ms][DEBUG] START check_scloud [2025-08-26 00:21:05][353684123403705][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 00:21:05][353684123403705][307 ms][DEBUG] SU: done in 305 ms; outu0_a118 11210 5018 23632052 61720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 00:21:05][353684123403705][307 ms][DEBUG] targetPkg: running [2025-08-26 00:21:05][353684123403705][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 00:21:05][353684123403705][307 ms][DEBUG] START check_boot_completed [2025-08-26 00:21:05][353684123403705][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 00:21:05][353684123403705][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 00:21:05][353684123403705][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 00:21:05][353684123403705][416 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 00:21:05][353684123403705][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 00:21:05][353684123403705][416 ms][DEBUG] rawBody.length=1149 [2025-08-26 00:21:05][353684123403705][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684123403705\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4170\"}'\'' -e'"" [2025-08-26 00:21:05][353684123403705][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 00:21:05][353684123403705][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684123403705\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4170\"}'\'' -e'"" [2025-08-26 00:21:11][353684123403705][5914 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ff8b028e-84fa-4c04-8aaa-20d4ed2f762c","id":"QR_ff8b028e-84fa-4c04-8aaa-20d4ed2f762c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 00:21:11][353684123403705][6071 ms][DEBUG] proc_open done in 5654 ms; code=255; res.len=3343 [2025-08-26 00:21:11][353684123403705][6071 ms][DEBUG] END runCmdUntilRes#1 in 5655 ms [2025-08-26 00:21:11][353684123403705][6071 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 00:25:04][353335863104066][1 ms][INFO] === Request start === [2025-08-26 00:25:04][353335863104066][1 ms][DEBUG] START check_scloud [2025-08-26 00:25:04][353335863104066][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 00:25:04][353335863104066][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 11210 5018 23719108 88504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 00:25:04][353335863104066][302 ms][DEBUG] targetPkg: running [2025-08-26 00:25:04][353335863104066][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-26 00:25:04][353335863104066][302 ms][DEBUG] START check_boot_completed [2025-08-26 00:25:04][353335863104066][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 00:25:04][353335863104066][333 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 00:25:04][353335863104066][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 00:25:04][353335863104066][380 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 00:25:04][353335863104066][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 00:25:04][353335863104066][380 ms][DEBUG] rawBody.length=1149 [2025-08-26 00:25:04][353335863104066][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353335863104066\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8193\"}'\'' -e'"" [2025-08-26 00:25:04][353335863104066][380 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 00:25:04][353335863104066][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353335863104066\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8193\"}'\'' -e'"" [2025-08-26 00:25:09][353335863104066][5410 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1b2e3300-b5df-4d74-99f4-003aeb76e461","id":"QR_1b2e3300-b5df-4d74-99f4-003aeb76e461","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 00:25:09][353335863104066][5566 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-08-26 00:25:09][353335863104066][5566 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-08-26 00:25:09][353335863104066][5566 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 00:31:05][354314901561297][1 ms][INFO] === Request start === [2025-08-26 00:31:05][354314901561297][1 ms][DEBUG] START check_scloud [2025-08-26 00:31:05][354314901561297][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 00:31:05][354314901561297][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 11210 5018 23865640 100116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 00:31:05][354314901561297][326 ms][DEBUG] targetPkg: running [2025-08-26 00:31:05][354314901561297][326 ms][DEBUG] END check_scloud in 324 ms [2025-08-26 00:31:05][354314901561297][326 ms][DEBUG] START check_boot_completed [2025-08-26 00:31:05][354314901561297][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 00:31:05][354314901561297][357 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 00:31:05][354314901561297][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 00:31:05][354314901561297][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 00:31:05][354314901561297][404 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 00:31:05][354314901561297][404 ms][DEBUG] rawBody.length=1149 [2025-08-26 00:31:05][354314901561297][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354314901561297\",\"model\":\"SM-A245M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1682\"}'\'' -e'"" [2025-08-26 00:31:05][354314901561297][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 00:31:05][354314901561297][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354314901561297\",\"model\":\"SM-A245M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1682\"}'\'' -e'"" [2025-08-26 00:31:10][354314901561297][5434 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2ed28302-9584-4f42-907e-a6a6d8e48ea7","id":"QR_2ed28302-9584-4f42-907e-a6a6d8e48ea7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 00:31:10][354314901561297][5590 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-08-26 00:31:10][354314901561297][5590 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-08-26 00:31:10][354314901561297][5590 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 00:35:04][355141589052995][1 ms][INFO] === Request start === [2025-08-26 00:35:04][355141589052995][1 ms][DEBUG] START check_scloud [2025-08-26 00:35:04][355141589052995][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 00:35:04][355141589052995][299 ms][DEBUG] SU: done in 297 ms; outu0_a118 11210 5018 23971276 110764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 00:35:04][355141589052995][299 ms][DEBUG] targetPkg: running [2025-08-26 00:35:04][355141589052995][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-26 00:35:04][355141589052995][299 ms][DEBUG] START check_boot_completed [2025-08-26 00:35:04][355141589052995][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 00:35:05][355141589052995][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 00:35:05][355141589052995][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 00:35:05][355141589052995][393 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 00:35:05][355141589052995][393 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 00:35:05][355141589052995][393 ms][DEBUG] rawBody.length=1149 [2025-08-26 00:35:05][355141589052995][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355141589052995\",\"model\":\"SM-M236B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9699\"}'\'' -e'"" [2025-08-26 00:35:05][355141589052995][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 00:35:05][355141589052995][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355141589052995\",\"model\":\"SM-M236B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9699\"}'\'' -e'"" [2025-08-26 00:35:10][355141589052995][5485 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3bd4c689-ee7e-47ea-a58e-a3890983bff6","id":"QR_3bd4c689-ee7e-47ea-a58e-a3890983bff6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 00:35:10][355141589052995][5641 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-08-26 00:35:10][355141589052995][5641 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-08-26 00:35:10][355141589052995][5641 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 00:37:04][351676567100369][0 ms][INFO] === Request start === [2025-08-26 00:37:04][351676567100369][1 ms][DEBUG] START check_scloud [2025-08-26 00:37:04][351676567100369][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 00:37:05][351676567100369][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 11210 5018 24111664 118248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 00:37:05][351676567100369][259 ms][DEBUG] targetPkg: running [2025-08-26 00:37:05][351676567100369][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-26 00:37:05][351676567100369][259 ms][DEBUG] START check_boot_completed [2025-08-26 00:37:05][351676567100369][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 00:37:05][351676567100369][290 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 00:37:05][351676567100369][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 00:37:05][351676567100369][337 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 00:37:05][351676567100369][337 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 00:37:05][351676567100369][337 ms][DEBUG] rawBody.length=1149 [2025-08-26 00:37:05][351676567100369][337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676567100369\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7662\"}'\'' -e'"" [2025-08-26 00:37:05][351676567100369][337 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 00:37:05][351676567100369][337 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676567100369\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7662\"}'\'' -e'"" [2025-08-26 00:37:10][351676567100369][5648 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_03707ac4-6ce2-435a-adf7-153e498f3ddd","id":"QR_03707ac4-6ce2-435a-adf7-153e498f3ddd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 00:37:10][351676567100369][5804 ms][DEBUG] proc_open done in 5467 ms; code=255; res.len=3343 [2025-08-26 00:37:10][351676567100369][5804 ms][DEBUG] END runCmdUntilRes#1 in 5467 ms [2025-08-26 00:37:10][351676567100369][5804 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 00:43:04][355646368667961][1 ms][INFO] === Request start === [2025-08-26 00:43:04][355646368667961][1 ms][DEBUG] START check_scloud [2025-08-26 00:43:04][355646368667961][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 00:43:04][355646368667961][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 11210 5018 24240332 130312 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 00:43:04][355646368667961][265 ms][DEBUG] targetPkg: running [2025-08-26 00:43:04][355646368667961][265 ms][DEBUG] END check_scloud in 264 ms [2025-08-26 00:43:04][355646368667961][265 ms][DEBUG] START check_boot_completed [2025-08-26 00:43:04][355646368667961][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 00:43:04][355646368667961][312 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 00:43:04][355646368667961][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 00:43:04][355646368667961][374 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 00:43:04][355646368667961][375 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 00:43:04][355646368667961][375 ms][DEBUG] rawBody.length=1149 [2025-08-26 00:43:04][355646368667961][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355646368667961\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9776\"}'\'' -e'"" [2025-08-26 00:43:04][355646368667961][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 00:43:04][355646368667961][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355646368667961\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9776\"}'\'' -e'"" [2025-08-26 00:43:09][355646368667961][5576 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a3356f9d-4e44-4a80-9d42-2d3ef2c84671","id":"QR_a3356f9d-4e44-4a80-9d42-2d3ef2c84671","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 00:43:09][355646368667961][5732 ms][DEBUG] proc_open done in 5357 ms; code=255; res.len=3343 [2025-08-26 00:43:09][355646368667961][5732 ms][DEBUG] END runCmdUntilRes#1 in 5358 ms [2025-08-26 00:43:09][355646368667961][5733 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 00:54:04][350962630893458][1 ms][INFO] === Request start === [2025-08-26 00:54:04][350962630893458][1 ms][DEBUG] START check_scloud [2025-08-26 00:54:04][350962630893458][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 00:54:05][350962630893458][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 11210 5018 24358244 133784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 00:54:05][350962630893458][318 ms][DEBUG] targetPkg: running [2025-08-26 00:54:05][350962630893458][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-26 00:54:05][350962630893458][318 ms][DEBUG] START check_boot_completed [2025-08-26 00:54:05][350962630893458][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 00:54:05][350962630893458][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 00:54:05][350962630893458][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 00:54:05][350962630893458][412 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 00:54:05][350962630893458][412 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 00:54:05][350962630893458][412 ms][DEBUG] START check_internet [2025-08-26 00:54:05][350962630893458][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 00:54:05][350962630893458][834 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.177/202.177/202.177/0.000 ms\n [2025-08-26 00:54:05][350962630893458][834 ms][DEBUG] check_internet: online [2025-08-26 00:54:05][350962630893458][834 ms][DEBUG] END check_internet in 422 ms [2025-08-26 00:54:05][350962630893458][834 ms][DEBUG] rawBody.length=1149 [2025-08-26 00:54:05][350962630893458][835 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962630893458\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1943\"}'\'' -e'"" [2025-08-26 00:54:05][350962630893458][835 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 00:54:05][350962630893458][835 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962630893458\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1943\"}'\'' -e'"" [2025-08-26 00:54:10][350962630893458][5676 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e065413-c399-4df5-acb6-433edf62eccd","id":"QR_9e065413-c399-4df5-acb6-433edf62eccd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 00:54:10][350962630893458][5832 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-08-26 00:54:10][350962630893458][5832 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-08-26 00:54:10][350962630893458][5832 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 00:58:03][357143640363393][1 ms][INFO] === Request start === [2025-08-26 00:58:03][357143640363393][1 ms][DEBUG] START check_scloud [2025-08-26 00:58:03][357143640363393][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 00:58:03][357143640363393][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 11210 5018 24522388 113916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 00:58:03][357143640363393][317 ms][DEBUG] targetPkg: running [2025-08-26 00:58:03][357143640363393][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-26 00:58:03][357143640363393][317 ms][DEBUG] START check_boot_completed [2025-08-26 00:58:03][357143640363393][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 00:58:03][357143640363393][349 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 00:58:03][357143640363393][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 00:58:03][357143640363393][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 00:58:03][357143640363393][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 00:58:03][357143640363393][396 ms][DEBUG] START check_internet [2025-08-26 00:58:03][357143640363393][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 00:58:04][357143640363393][849 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.741/200.741/200.741/0.000 ms\n [2025-08-26 00:58:04][357143640363393][849 ms][DEBUG] check_internet: online [2025-08-26 00:58:04][357143640363393][849 ms][DEBUG] END check_internet in 453 ms [2025-08-26 00:58:04][357143640363393][849 ms][DEBUG] rawBody.length=1148 [2025-08-26 00:58:04][357143640363393][849 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357143640363393\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7688\"}'\'' -e'"" [2025-08-26 00:58:04][357143640363393][849 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 00:58:04][357143640363393][849 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357143640363393\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7688\"}'\'' -e'"" [2025-08-26 00:58:08][357143640363393][4723 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_106e2e02-77e2-489e-b8e7-3036c3c0b7cf","id":"QR_106e2e02-77e2-489e-b8e7-3036c3c0b7cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 00:58:08][357143640363393][4879 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-26 00:58:08][357143640363393][4879 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-26 00:58:08][357143640363393][4879 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 01:09:05][350896384346497][1 ms][INFO] === Request start === [2025-08-26 01:09:05][350896384346497][1 ms][DEBUG] START check_scloud [2025-08-26 01:09:05][350896384346497][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 01:09:05][350896384346497][284 ms][DEBUG] SU: done in 282 ms; outu0_a118 11210 5018 24610604 113556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 01:09:05][350896384346497][284 ms][DEBUG] targetPkg: running [2025-08-26 01:09:05][350896384346497][284 ms][DEBUG] END check_scloud in 283 ms [2025-08-26 01:09:05][350896384346497][284 ms][DEBUG] START check_boot_completed [2025-08-26 01:09:05][350896384346497][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 01:09:05][350896384346497][315 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 01:09:05][350896384346497][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 01:09:05][350896384346497][362 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 01:09:05][350896384346497][362 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 01:09:05][350896384346497][362 ms][DEBUG] rawBody.length=1149 [2025-08-26 01:09:05][350896384346497][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350896384346497\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9489\"}'\'' -e'"" [2025-08-26 01:09:05][350896384346497][363 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 01:09:05][350896384346497][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350896384346497\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9489\"}'\'' -e'"" [2025-08-26 01:09:11][350896384346497][5907 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c2ed9dcb-7b35-4ddc-961b-a2e9b211afbf","id":"QR_c2ed9dcb-7b35-4ddc-961b-a2e9b211afbf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 01:09:11][350896384346497][6063 ms][DEBUG] proc_open done in 5701 ms; code=255; res.len=3343 [2025-08-26 01:09:11][350896384346497][6063 ms][DEBUG] END runCmdUntilRes#1 in 5701 ms [2025-08-26 01:09:11][350896384346497][6064 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 01:13:04][350545460158322][1 ms][INFO] === Request start === [2025-08-26 01:13:04][350545460158322][1 ms][DEBUG] START check_scloud [2025-08-26 01:13:04][350545460158322][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 01:13:04][350545460158322][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 11210 5018 24764508 109784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 01:13:04][350545460158322][316 ms][DEBUG] targetPkg: running [2025-08-26 01:13:04][350545460158322][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-26 01:13:04][350545460158322][316 ms][DEBUG] START check_boot_completed [2025-08-26 01:13:04][350545460158322][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 01:13:04][350545460158322][347 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 01:13:04][350545460158322][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 01:13:04][350545460158322][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 01:13:04][350545460158322][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 01:13:04][350545460158322][394 ms][DEBUG] rawBody.length=1158 [2025-08-26 01:13:04][350545460158322][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545460158322\",\"model\":\"SM-T503\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9WT60JSDFX\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8289\"}'\'' -e'"" [2025-08-26 01:13:04][350545460158322][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 01:13:04][350545460158322][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545460158322\",\"model\":\"SM-T503\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9WT60JSDFX\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8289\"}'\'' -e'"" [2025-08-26 01:13:12][350545460158322][8236 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7623d5aa-aca4-4d87-b8bb-f5fe706926b7","id":"QR_7623d5aa-aca4-4d87-b8bb-f5fe706926b7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 01:13:12][350545460158322][8392 ms][DEBUG] proc_open done in 7998 ms; code=255; res.len=3343 [2025-08-26 01:13:12][350545460158322][8392 ms][DEBUG] END runCmdUntilRes#1 in 7998 ms [2025-08-26 01:13:12][350545460158322][8392 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 01:16:03][352600227501179][1 ms][INFO] === Request start === [2025-08-26 01:16:03][352600227501179][1 ms][DEBUG] START check_scloud [2025-08-26 01:16:03][352600227501179][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 01:16:04][352600227501179][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 11210 5018 24909124 116988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 01:16:04][352600227501179][297 ms][DEBUG] targetPkg: running [2025-08-26 01:16:04][352600227501179][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-26 01:16:04][352600227501179][298 ms][DEBUG] START check_boot_completed [2025-08-26 01:16:04][352600227501179][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 01:16:04][352600227501179][343 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 01:16:04][352600227501179][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 01:16:04][352600227501179][406 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 01:16:04][352600227501179][406 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-26 01:16:04][352600227501179][406 ms][DEBUG] START check_internet [2025-08-26 01:16:04][352600227501179][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 01:16:04][352600227501179][875 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.384/202.384/202.384/0.000 ms\n [2025-08-26 01:16:04][352600227501179][875 ms][DEBUG] check_internet: online [2025-08-26 01:16:04][352600227501179][875 ms][DEBUG] END check_internet in 469 ms [2025-08-26 01:16:04][352600227501179][875 ms][DEBUG] rawBody.length=1148 [2025-08-26 01:16:04][352600227501179][875 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227501179\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8296\"}'\'' -e'"" [2025-08-26 01:16:04][352600227501179][875 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 01:16:04][352600227501179][875 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227501179\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8296\"}'\'' -e'"" [2025-08-26 01:16:09][352600227501179][5249 ms][DEBUG] proc_open done in 4374 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 01:16:09][352600227501179][5249 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-26 01:16:09][352600227501179][5249 ms][WARN] Detected error: Process with pid 11210 either refused to load frida-agent, or terminated during injection [2025-08-26 01:16:09][352600227501179][5249 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 01:16:09][352600227501179][5405 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 01:16:09][352600227501179][5405 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 01:16:09][352600227501179][5405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 01:16:09][352600227501179][5530 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 01:16:09][352600227501179][5530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 01:16:09][352600227501179][5748 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 01:16:11][352600227501179][7763 ms][DEBUG] START check_boot_completed [2025-08-26 01:16:11][352600227501179][7763 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 01:16:11][352600227501179][7810 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 01:16:11][352600227501179][7810 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 01:16:11][352600227501179][7858 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 01:16:11][352600227501179][7858 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 01:16:14][352600227501179][10872 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 01:16:14][352600227501179][10872 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227501179\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8296\"}'\'' -e'"" [2025-08-26 01:16:18][352600227501179][14590 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_002e732d-3ba0-4e86-885b-2e03a648d12f","id":"QR_002e732d-3ba0-4e86-885b-2e03a648d12f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 01:16:18][352600227501179][14746 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-08-26 01:16:18][352600227501179][14746 ms][DEBUG] END runCmdUntilRes#2 in 3874 ms [2025-08-26 01:16:18][352600227501179][14746 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 01:18:05][353357971142507][1 ms][INFO] === Request start === [2025-08-26 01:18:05][353357971142507][1 ms][DEBUG] START check_scloud [2025-08-26 01:18:05][353357971142507][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 01:18:05][353357971142507][267 ms][DEBUG] SU: done in 265 ms; outu0_a118 21262 5018 23664304 126384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 01:18:05][353357971142507][267 ms][DEBUG] targetPkg: running [2025-08-26 01:18:05][353357971142507][267 ms][DEBUG] END check_scloud in 266 ms [2025-08-26 01:18:05][353357971142507][267 ms][DEBUG] START check_boot_completed [2025-08-26 01:18:05][353357971142507][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 01:18:05][353357971142507][313 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 01:18:05][353357971142507][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 01:18:05][353357971142507][361 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 01:18:05][353357971142507][361 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 01:18:05][353357971142507][361 ms][DEBUG] START check_internet [2025-08-26 01:18:05][353357971142507][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 01:18:06][353357971142507][798 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.067/202.067/202.067/0.000 ms\n [2025-08-26 01:18:06][353357971142507][798 ms][DEBUG] check_internet: online [2025-08-26 01:18:06][353357971142507][798 ms][DEBUG] END check_internet in 437 ms [2025-08-26 01:18:06][353357971142507][798 ms][DEBUG] rawBody.length=1149 [2025-08-26 01:18:06][353357971142507][798 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353357971142507\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9871\"}'\'' -e'"" [2025-08-26 01:18:06][353357971142507][798 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 01:18:06][353357971142507][798 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353357971142507\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9871\"}'\'' -e'"" [2025-08-26 01:18:10][353357971142507][5718 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b9017b87-a479-4f43-be92-ce7ed0c718ee","id":"QR_b9017b87-a479-4f43-be92-ce7ed0c718ee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 01:18:11][353357971142507][5875 ms][DEBUG] proc_open done in 5077 ms; code=255; res.len=3343 [2025-08-26 01:18:11][353357971142507][5875 ms][DEBUG] END runCmdUntilRes#1 in 5077 ms [2025-08-26 01:18:11][353357971142507][5875 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 01:20:09][350962630893458][1 ms][INFO] === Request start === [2025-08-26 01:20:09][350962630893458][1 ms][DEBUG] START check_scloud [2025-08-26 01:20:09][350962630893458][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 01:20:10][350962630893458][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 21262 5018 23827236 137656 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 01:20:10][350962630893458][305 ms][DEBUG] targetPkg: running [2025-08-26 01:20:10][350962630893458][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 01:20:10][350962630893458][305 ms][DEBUG] START check_boot_completed [2025-08-26 01:20:10][350962630893458][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 01:20:10][350962630893458][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 01:20:10][350962630893458][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 01:20:10][350962630893458][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 01:20:10][350962630893458][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 01:20:10][350962630893458][398 ms][DEBUG] START check_internet [2025-08-26 01:20:10][350962630893458][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 01:20:10][350962630893458][695 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=188 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 188.653/188.653/188.653/0.000 ms\n [2025-08-26 01:20:10][350962630893458][695 ms][DEBUG] check_internet: online [2025-08-26 01:20:10][350962630893458][695 ms][DEBUG] END check_internet in 297 ms [2025-08-26 01:20:10][350962630893458][695 ms][DEBUG] rawBody.length=1148 [2025-08-26 01:20:10][350962630893458][695 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962630893458\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5751\"}'\'' -e'"" [2025-08-26 01:20:10][350962630893458][696 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 01:20:10][350962630893458][696 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962630893458\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5751\"}'\'' -e'"" [2025-08-26 01:20:14][350962630893458][4429 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3415c274-958b-4991-bead-e073ce0c898b","id":"QR_3415c274-958b-4991-bead-e073ce0c898b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 01:20:14][350962630893458][4585 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-08-26 01:20:14][350962630893458][4585 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-26 01:20:14][350962630893458][4585 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 01:21:03][354462119090375][0 ms][INFO] === Request start === [2025-08-26 01:21:03][354462119090375][0 ms][DEBUG] START check_scloud [2025-08-26 01:21:03][354462119090375][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 01:21:03][354462119090375][309 ms][DEBUG] SU: done in 309 ms; outu0_a118 21262 5018 23986184 149920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 01:21:03][354462119090375][309 ms][DEBUG] targetPkg: running [2025-08-26 01:21:03][354462119090375][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 01:21:03][354462119090375][309 ms][DEBUG] START check_boot_completed [2025-08-26 01:21:03][354462119090375][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 01:21:03][354462119090375][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 01:21:03][354462119090375][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 01:21:03][354462119090375][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 01:21:03][354462119090375][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 01:21:03][354462119090375][387 ms][DEBUG] rawBody.length=1148 [2025-08-26 01:21:03][354462119090375][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354462119090375\",\"model\":\"SM-A202F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"O2U\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8724\"}'\'' -e'"" [2025-08-26 01:21:03][354462119090375][388 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 01:21:03][354462119090375][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354462119090375\",\"model\":\"SM-A202F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"O2U\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8724\"}'\'' -e'"" [2025-08-26 01:21:07][354462119090375][4042 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c0a8a9b-54d1-4888-800a-3394ee55a25a","id":"QR_9c0a8a9b-54d1-4888-800a-3394ee55a25a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 01:21:07][354462119090375][4199 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-26 01:21:07][354462119090375][4199 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-26 01:21:07][354462119090375][4199 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 01:22:04][353948920640813][0 ms][INFO] === Request start === [2025-08-26 01:22:04][353948920640813][1 ms][DEBUG] START check_scloud [2025-08-26 01:22:04][353948920640813][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 01:22:04][353948920640813][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 21262 5018 24114348 160908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 01:22:04][353948920640813][311 ms][DEBUG] targetPkg: running [2025-08-26 01:22:04][353948920640813][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 01:22:04][353948920640813][311 ms][DEBUG] START check_boot_completed [2025-08-26 01:22:04][353948920640813][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 01:22:04][353948920640813][357 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 01:22:04][353948920640813][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 01:22:05][353948920640813][451 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 01:22:05][353948920640813][451 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 01:22:05][353948920640813][451 ms][DEBUG] START check_internet [2025-08-26 01:22:05][353948920640813][451 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 01:22:05][353948920640813][904 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.278/202.278/202.278/0.000 ms\n [2025-08-26 01:22:05][353948920640813][904 ms][DEBUG] check_internet: online [2025-08-26 01:22:05][353948920640813][904 ms][DEBUG] END check_internet in 453 ms [2025-08-26 01:22:05][353948920640813][904 ms][DEBUG] rawBody.length=1149 [2025-08-26 01:22:05][353948920640813][905 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353948920640813\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6265\"}'\'' -e'"" [2025-08-26 01:22:05][353948920640813][905 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 01:22:05][353948920640813][905 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353948920640813\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6265\"}'\'' -e'"" [2025-08-26 01:22:10][353948920640813][5934 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_42810ca0-4ba1-48b8-91e8-8a9dfa1f5f82","id":"QR_42810ca0-4ba1-48b8-91e8-8a9dfa1f5f82","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 01:22:10][353948920640813][6090 ms][DEBUG] proc_open done in 5185 ms; code=255; res.len=3343 [2025-08-26 01:22:10][353948920640813][6090 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-08-26 01:22:10][353948920640813][6090 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 01:23:03][351005190581607][1 ms][INFO] === Request start === [2025-08-26 01:23:03][351005190581607][1 ms][DEBUG] START check_scloud [2025-08-26 01:23:03][351005190581607][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 01:23:04][351005190581607][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 21262 5018 24227856 171524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 01:23:04][351005190581607][303 ms][DEBUG] targetPkg: running [2025-08-26 01:23:04][351005190581607][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 01:23:04][351005190581607][303 ms][DEBUG] START check_boot_completed [2025-08-26 01:23:04][351005190581607][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 01:23:04][351005190581607][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 01:23:04][351005190581607][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 01:23:04][351005190581607][427 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 01:23:04][351005190581607][427 ms][DEBUG] END check_boot_completed in 123 ms [2025-08-26 01:23:04][351005190581607][427 ms][DEBUG] rawBody.length=1148 [2025-08-26 01:23:04][351005190581607][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351005190581607\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6748\"}'\'' -e'"" [2025-08-26 01:23:04][351005190581607][427 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 01:23:04][351005190581607][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351005190581607\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6748\"}'\'' -e'"" [2025-08-26 01:23:08][351005190581607][4426 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9098d769-d02d-4705-bfbd-eed95a463116","id":"QR_9098d769-d02d-4705-bfbd-eed95a463116","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 01:23:08][351005190581607][4582 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-26 01:23:08][351005190581607][4582 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-26 01:23:08][351005190581607][4582 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 01:31:04][352923542980658][1 ms][INFO] === Request start === [2025-08-26 01:31:04][352923542980658][1 ms][DEBUG] START check_scloud [2025-08-26 01:31:04][352923542980658][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 01:31:05][352923542980658][330 ms][DEBUG] SU: done in 328 ms; outu0_a118 21262 5018 24370344 183604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 01:31:05][352923542980658][330 ms][DEBUG] targetPkg: running [2025-08-26 01:31:05][352923542980658][330 ms][DEBUG] END check_scloud in 328 ms [2025-08-26 01:31:05][352923542980658][330 ms][DEBUG] START check_boot_completed [2025-08-26 01:31:05][352923542980658][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 01:31:05][352923542980658][361 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 01:31:05][352923542980658][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 01:31:05][352923542980658][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 01:31:05][352923542980658][408 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 01:31:05][352923542980658][408 ms][DEBUG] rawBody.length=1149 [2025-08-26 01:31:05][352923542980658][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923542980658\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7080\"}'\'' -e'"" [2025-08-26 01:31:05][352923542980658][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 01:31:05][352923542980658][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923542980658\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7080\"}'\'' -e'"" [2025-08-26 01:31:10][352923542980658][5375 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_965a8c33-6d2b-4b2a-b759-2807863d955d","id":"QR_965a8c33-6d2b-4b2a-b759-2807863d955d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 01:31:10][352923542980658][5531 ms][DEBUG] proc_open done in 5123 ms; code=255; res.len=3343 [2025-08-26 01:31:10][352923542980658][5531 ms][DEBUG] END runCmdUntilRes#1 in 5123 ms [2025-08-26 01:31:10][352923542980658][5531 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 01:40:05][355970533673716][0 ms][INFO] === Request start === [2025-08-26 01:40:05][355970533673716][0 ms][DEBUG] START check_scloud [2025-08-26 01:40:05][355970533673716][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 01:40:05][355970533673716][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 21262 5018 24531276 190916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 01:40:05][355970533673716][303 ms][DEBUG] targetPkg: running [2025-08-26 01:40:05][355970533673716][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-26 01:40:05][355970533673716][304 ms][DEBUG] START check_boot_completed [2025-08-26 01:40:05][355970533673716][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 01:40:05][355970533673716][335 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 01:40:05][355970533673716][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 01:40:05][355970533673716][382 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 01:40:05][355970533673716][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 01:40:05][355970533673716][382 ms][DEBUG] START check_internet [2025-08-26 01:40:05][355970533673716][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 01:40:06][355970533673716][850 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.090/203.090/203.090/0.000 ms\n [2025-08-26 01:40:06][355970533673716][850 ms][DEBUG] check_internet: online [2025-08-26 01:40:06][355970533673716][851 ms][DEBUG] END check_internet in 469 ms [2025-08-26 01:40:06][355970533673716][851 ms][DEBUG] rawBody.length=1149 [2025-08-26 01:40:06][355970533673716][851 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355970533673716\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3437\"}'\'' -e'"" [2025-08-26 01:40:06][355970533673716][851 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 01:40:06][355970533673716][851 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355970533673716\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3437\"}'\'' -e'"" [2025-08-26 01:40:11][355970533673716][6302 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_50cd26a0-7171-44f8-9444-50d97d456ba6","id":"QR_50cd26a0-7171-44f8-9444-50d97d456ba6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 01:40:12][355970533673716][6458 ms][DEBUG] proc_open done in 5607 ms; code=255; res.len=3343 [2025-08-26 01:40:12][355970533673716][6458 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-08-26 01:40:12][355970533673716][6458 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 01:43:04][353910111218288][1 ms][INFO] === Request start === [2025-08-26 01:43:04][353910111218288][1 ms][DEBUG] START check_scloud [2025-08-26 01:43:04][353910111218288][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 01:43:05][353910111218288][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 21262 5018 24672060 178456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 01:43:05][353910111218288][302 ms][DEBUG] targetPkg: running [2025-08-26 01:43:05][353910111218288][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-26 01:43:05][353910111218288][302 ms][DEBUG] START check_boot_completed [2025-08-26 01:43:05][353910111218288][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 01:43:05][353910111218288][347 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 01:43:05][353910111218288][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 01:43:05][353910111218288][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 01:43:05][353910111218288][394 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-26 01:43:05][353910111218288][394 ms][DEBUG] rawBody.length=1149 [2025-08-26 01:43:05][353910111218288][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353910111218288\",\"model\":\"SM-G985F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TCE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4676\"}'\'' -e'"" [2025-08-26 01:43:05][353910111218288][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 01:43:05][353910111218288][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353910111218288\",\"model\":\"SM-G985F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TCE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4676\"}'\'' -e'"" [2025-08-26 01:43:10][353910111218288][5986 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5182f89a-7d6f-4805-ad90-a2b2f4efd8ad","id":"QR_5182f89a-7d6f-4805-ad90-a2b2f4efd8ad","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 01:43:10][353910111218288][6142 ms][DEBUG] proc_open done in 5748 ms; code=255; res.len=3343 [2025-08-26 01:43:10][353910111218288][6142 ms][DEBUG] END runCmdUntilRes#1 in 5748 ms [2025-08-26 01:43:10][353910111218288][6142 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 01:50:04][355579424412603][1 ms][INFO] === Request start === [2025-08-26 01:50:04][355579424412603][1 ms][DEBUG] START check_scloud [2025-08-26 01:50:04][355579424412603][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 01:50:04][355579424412603][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 21262 5018 24760148 159232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 01:50:04][355579424412603][322 ms][DEBUG] targetPkg: running [2025-08-26 01:50:04][355579424412603][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-26 01:50:04][355579424412603][322 ms][DEBUG] START check_boot_completed [2025-08-26 01:50:04][355579424412603][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 01:50:04][355579424412603][354 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 01:50:04][355579424412603][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 01:50:04][355579424412603][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 01:50:04][355579424412603][400 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 01:50:04][355579424412603][400 ms][DEBUG] START check_internet [2025-08-26 01:50:04][355579424412603][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 01:50:05][355579424412603][869 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.701/201.701/201.701/0.000 ms\n [2025-08-26 01:50:05][355579424412603][869 ms][DEBUG] check_internet: online [2025-08-26 01:50:05][355579424412603][870 ms][DEBUG] END check_internet in 469 ms [2025-08-26 01:50:05][355579424412603][870 ms][DEBUG] rawBody.length=1147 [2025-08-26 01:50:05][355579424412603][870 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355579424412603\",\"model\":\"SM-P615\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8463\"}'\'' -e'"" [2025-08-26 01:50:05][355579424412603][870 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 01:50:05][355579424412603][870 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355579424412603\",\"model\":\"SM-P615\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8463\"}'\'' -e'"" [2025-08-26 01:50:08][355579424412603][4712 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9ed99d53-c30f-40ce-bf66-263955882140","id":"QR_9ed99d53-c30f-40ce-bf66-263955882140","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 01:50:09][355579424412603][4868 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-08-26 01:50:09][355579424412603][4868 ms][DEBUG] END runCmdUntilRes#1 in 3998 ms [2025-08-26 01:50:09][355579424412603][4868 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 02:12:06][355857113513844][1 ms][INFO] === Request start === [2025-08-26 02:12:06][355857113513844][1 ms][DEBUG] START check_scloud [2025-08-26 02:12:06][355857113513844][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 02:12:06][355857113513844][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 21262 5018 24923196 169020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 02:12:06][355857113513844][253 ms][DEBUG] targetPkg: running [2025-08-26 02:12:06][355857113513844][253 ms][DEBUG] END check_scloud in 252 ms [2025-08-26 02:12:06][355857113513844][253 ms][DEBUG] START check_boot_completed [2025-08-26 02:12:06][355857113513844][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 02:12:06][355857113513844][300 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 02:12:06][355857113513844][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 02:12:06][355857113513844][347 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 02:12:06][355857113513844][347 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 02:12:06][355857113513844][347 ms][DEBUG] START check_internet [2025-08-26 02:12:06][355857113513844][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 02:12:07][355857113513844][815 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.893/198.893/198.893/0.000 ms\n [2025-08-26 02:12:07][355857113513844][815 ms][DEBUG] check_internet: online [2025-08-26 02:12:07][355857113513844][815 ms][DEBUG] END check_internet in 469 ms [2025-08-26 02:12:07][355857113513844][815 ms][DEBUG] rawBody.length=1159 [2025-08-26 02:12:07][355857113513844][816 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857113513844\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YW50YW9DJ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6407\"}'\'' -e'"" [2025-08-26 02:12:07][355857113513844][816 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 02:12:07][355857113513844][816 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857113513844\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YW50YW9DJ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6407\"}'\'' -e'"" [2025-08-26 02:12:11][355857113513844][5783 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b1d8130b-44af-4f13-b7f0-a81a4b6ff32b","id":"QR_b1d8130b-44af-4f13-b7f0-a81a4b6ff32b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 02:12:12][355857113513844][5939 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-08-26 02:12:12][355857113513844][5939 ms][DEBUG] END runCmdUntilRes#1 in 5124 ms [2025-08-26 02:12:12][355857113513844][5939 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 02:22:06][356928108893787][1 ms][INFO] === Request start === [2025-08-26 02:22:06][356928108893787][1 ms][DEBUG] START check_scloud [2025-08-26 02:22:06][356928108893787][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 02:22:06][356928108893787][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 21262 5018 25067808 179868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 02:22:06][356928108893787][294 ms][DEBUG] targetPkg: running [2025-08-26 02:22:06][356928108893787][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-26 02:22:06][356928108893787][294 ms][DEBUG] START check_boot_completed [2025-08-26 02:22:06][356928108893787][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 02:22:06][356928108893787][325 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 02:22:06][356928108893787][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 02:22:06][356928108893787][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 02:22:06][356928108893787][372 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 02:22:06][356928108893787][372 ms][DEBUG] START check_internet [2025-08-26 02:22:06][356928108893787][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 02:22:07][356928108893787][778 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.086/202.086/202.086/0.000 ms\n [2025-08-26 02:22:07][356928108893787][778 ms][DEBUG] check_internet: online [2025-08-26 02:22:07][356928108893787][778 ms][DEBUG] END check_internet in 406 ms [2025-08-26 02:22:07][356928108893787][779 ms][DEBUG] rawBody.length=1159 [2025-08-26 02:22:07][356928108893787][779 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356928108893787\",\"model\":\"SM-T870\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52R905CKHZ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4216\"}'\'' -e'"" [2025-08-26 02:22:07][356928108893787][779 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 02:22:07][356928108893787][779 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356928108893787\",\"model\":\"SM-T870\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52R905CKHZ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4216\"}'\'' -e'"" [2025-08-26 02:22:15][356928108893787][9339 ms][DEBUG] proc_open done in 8560 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 02:22:15][356928108893787][9339 ms][DEBUG] END runCmdUntilRes#1 in 8560 ms [2025-08-26 02:22:15][356928108893787][9339 ms][WARN] Detected error: Process with pid 21262 either refused to load frida-agent, or terminated during injection [2025-08-26 02:22:15][356928108893787][9339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 02:22:15][356928108893787][9526 ms][DEBUG] SU: done in 187 ms; out [2025-08-26 02:22:15][356928108893787][9526 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 02:22:15][356928108893787][9527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 02:22:16][356928108893787][9854 ms][DEBUG] SU: done in 328 ms; out [2025-08-26 02:22:16][356928108893787][9854 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 02:22:16][356928108893787][10229 ms][DEBUG] SU: done in 375 ms; out [2025-08-26 02:22:18][356928108893787][12244 ms][DEBUG] START check_boot_completed [2025-08-26 02:22:18][356928108893787][12244 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 02:22:18][356928108893787][12291 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 02:22:18][356928108893787][12291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 02:22:18][356928108893787][12354 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 02:22:18][356928108893787][12354 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 02:22:21][356928108893787][15368 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 02:22:21][356928108893787][15368 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356928108893787\",\"model\":\"SM-T870\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52R905CKHZ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4216\"}'\'' -e'"" [2025-08-26 02:22:23][356928108893787][16775 ms][DEBUG] proc_open done in 1406 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-26 02:22:23][356928108893787][16775 ms][DEBUG] END runCmdUntilRes#2 in 1406 ms [2025-08-26 02:22:23][356928108893787][16775 ms][WARN] Detected error 2; Reboot the device [2025-08-26 02:22:23][356928108893787][16775 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-26 02:22:23][356928108893787][17383 ms][DEBUG] SU: done in 609 ms; out [2025-08-26 02:23:06][][0 ms][INFO] === Request start === [2025-08-26 02:23:06][][1 ms][DEBUG] START check_scloud [2025-08-26 02:23:06][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 02:23:06][][41 ms][DEBUG] SU: done in 41 ms; out [2025-08-26 02:23:06][][41 ms][WARN] targetPkg: not running, restarting [2025-08-26 02:23:06][][41 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 02:23:06][][73 ms][DEBUG] SU: done in 31 ms; out [2025-08-26 02:23:06][][73 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 02:23:06][][104 ms][DEBUG] SU: done in 31 ms; out [2025-08-26 02:23:08][][2119 ms][DEBUG] END check_scloud in 2118 ms [2025-08-26 02:23:08][][2119 ms][DEBUG] START check_boot_completed [2025-08-26 02:23:08][][2119 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 02:23:24][][18403 ms][DEBUG] ADB: done in 16284 ms; out [2025-08-26 02:23:24][][18403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 02:23:24][][18497 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 02:23:24][][18497 ms][DEBUG] END check_boot_completed in 16378 ms [2025-08-26 02:23:24][][18497 ms][DEBUG] rawBody.length=1129 [2025-08-26 02:23:24][][18497 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-T870\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52R905CKHZ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6325\"}'\'' -e'"" [2025-08-26 02:23:24][][18497 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 02:23:24][][18497 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-T870\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52R905CKHZ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6325\"}'\'' -e'"" [2025-08-26 02:23:27][][21513 ms][DEBUG] proc_open done in 3016 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-26 02:23:27][][21513 ms][DEBUG] END runCmdUntilRes#1 in 3016 ms [2025-08-26 02:23:27][][21513 ms][WARN] Detected error: Process not found [2025-08-26 02:23:27][][21513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 02:23:27][][21653 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 02:23:27][][21653 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 02:23:27][][21653 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 02:23:28][][21793 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 02:23:28][][21793 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 02:23:28][][22012 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 02:23:30][][24017 ms][DEBUG] START check_boot_completed [2025-08-26 02:23:30][][24018 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 02:23:31][][25080 ms][DEBUG] ADB: done in 1062 ms; out [2025-08-26 02:23:31][][25080 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 02:23:31][][25142 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 02:23:31][][25142 ms][DEBUG] END check_boot_completed in 1125 ms [2025-08-26 02:23:34][][28157 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 02:23:34][][28157 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-T870\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52R905CKHZ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6325\"}'\'' -e'"" [2025-08-26 02:23:38][][1 ms][INFO] === Request start === [2025-08-26 02:23:38][][1 ms][DEBUG] START check_scloud [2025-08-26 02:23:38][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 02:23:38][][606 ms][DEBUG] SU: done in 604 ms; out [2025-08-26 02:23:38][][606 ms][WARN] targetPkg: not running, restarting [2025-08-26 02:23:38][][606 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 02:23:39][][762 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 02:23:39][][762 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 02:23:39][][1230 ms][DEBUG] SU: done in 468 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 02:23:40][][34078 ms][DEBUG] proc_open done in 5920 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-26 02:23:40][][34078 ms][DEBUG] END runCmdUntilRes#2 in 5921 ms [2025-08-26 02:23:40][][34078 ms][WARN] Detected error 2; Reboot the device [2025-08-26 02:23:40][][34078 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-26 02:23:41][][3245 ms][DEBUG] END check_scloud in 3244 ms [2025-08-26 02:23:41][][3245 ms][DEBUG] START check_boot_completed [2025-08-26 02:23:41][][3246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 02:23:41][][3292 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 02:23:41][][3293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 02:23:41][][3355 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 02:23:41][][3355 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 02:23:41][][3355 ms][DEBUG] rawBody.length=1118 [2025-08-26 02:23:41][][3355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-T870\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1934\"}'\'' -e'"" [2025-08-26 02:23:41][][3355 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 02:23:41][][3355 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-T870\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1934\"}'\'' -e'"" [2025-08-26 02:23:42][][35874 ms][DEBUG] SU: done in 1796 ms; out [2025-08-26 02:23:53][][15359 ms][DEBUG] proc_open done in 12005 ms (timeout); code=0; out.len=0 err.len=11 [2025-08-26 02:23:53][][15359 ms][DEBUG] END runCmdUntilRes#1 in 12005 ms [2025-08-26 02:23:53][][15360 ms][ERROR] NO RESULT; code=124 out errtimeout 12s [2025-08-26 02:24:06][352233118369462][0 ms][INFO] === Request start === [2025-08-26 02:24:06][352233118369462][1 ms][DEBUG] START check_scloud [2025-08-26 02:24:06][352233118369462][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 02:24:06][352233118369462][41 ms][DEBUG] SU: done in 41 ms; out [2025-08-26 02:24:06][352233118369462][41 ms][WARN] targetPkg: not running, restarting [2025-08-26 02:24:06][352233118369462][41 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 02:24:06][352233118369462][73 ms][DEBUG] SU: done in 31 ms; out [2025-08-26 02:24:06][352233118369462][73 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 02:24:06][352233118369462][104 ms][DEBUG] SU: done in 31 ms; out [2025-08-26 02:24:08][352233118369462][2119 ms][DEBUG] END check_scloud in 2118 ms [2025-08-26 02:24:08][352233118369462][2119 ms][DEBUG] START check_boot_completed [2025-08-26 02:24:08][352233118369462][2119 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 02:24:38][352233118369462][1 ms][INFO] === Request start === [2025-08-26 02:24:38][352233118369462][1 ms][DEBUG] START check_scloud [2025-08-26 02:24:38][352233118369462][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 02:24:38][352233118369462][29 ms][DEBUG] SU: done in 28 ms; out [2025-08-26 02:24:38][352233118369462][29 ms][WARN] targetPkg: not running, restarting [2025-08-26 02:24:38][352233118369462][29 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 02:24:38][352233118369462][60 ms][DEBUG] SU: done in 31 ms; out [2025-08-26 02:24:38][352233118369462][60 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 02:24:38][352233118369462][91 ms][DEBUG] SU: done in 31 ms; out [2025-08-26 02:24:40][352233118369462][2106 ms][DEBUG] END check_scloud in 2105 ms [2025-08-26 02:24:40][352233118369462][2106 ms][DEBUG] START check_boot_completed [2025-08-26 02:24:40][352233118369462][2106 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 02:24:40][352233118369462][2137 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 02:24:40][352233118369462][2137 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 02:24:40][352233118369462][2200 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 02:24:40][352233118369462][2200 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 02:24:40][352233118369462][2200 ms][DEBUG] START check_internet [2025-08-26 02:24:40][352233118369462][2200 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 02:24:40][352233118369462][2387 ms][DEBUG] SU: done in 188 ms; out [2025-08-26 02:24:40][352233118369462][2387 ms][WARN] check_internet: offline [2025-08-26 02:24:40][352233118369462][2388 ms][DEBUG] END check_internet in 188 ms [2025-08-26 02:24:40][352233118369462][34681 ms][DEBUG] ADB: done in 32562 ms; out [2025-08-26 02:24:40][352233118369462][34681 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 02:24:40][352233118369462][34744 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 02:24:40][352233118369462][34744 ms][DEBUG] END check_boot_completed in 32625 ms [2025-08-26 02:24:40][352233118369462][34744 ms][DEBUG] START check_internet [2025-08-26 02:24:40][352233118369462][34744 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 02:24:41][352233118369462][34931 ms][DEBUG] SU: done in 188 ms; out [2025-08-26 02:24:41][352233118369462][34932 ms][WARN] check_internet: offline [2025-08-26 02:24:41][352233118369462][34932 ms][DEBUG] END check_internet in 188 ms [2025-08-26 02:25:06][351910100804561][0 ms][INFO] === Request start === [2025-08-26 02:25:06][351910100804561][1 ms][DEBUG] START check_scloud [2025-08-26 02:25:06][351910100804561][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 02:25:06][351910100804561][702 ms][DEBUG] SU: done in 701 ms; out [2025-08-26 02:25:06][351910100804561][702 ms][WARN] targetPkg: not running, restarting [2025-08-26 02:25:06][351910100804561][702 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 02:25:06][351910100804561][843 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 02:25:06][351910100804561][843 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 02:25:07][351910100804561][1077 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 02:25:09][351910100804561][3092 ms][DEBUG] END check_scloud in 3091 ms [2025-08-26 02:25:09][351910100804561][3092 ms][DEBUG] START check_boot_completed [2025-08-26 02:25:09][351910100804561][3092 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 02:25:09][351910100804561][3139 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 02:25:09][351910100804561][3139 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 02:25:09][351910100804561][3233 ms][DEBUG] SU: done in 93 ms; out [2025-08-26 02:25:09][351910100804561][3233 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-26 02:25:09][351910100804561][3233 ms][DEBUG] rawBody.length=1159 [2025-08-26 02:25:09][351910100804561][3233 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351910100804561\",\"model\":\"SM-T870\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52R905CKHZ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2317\"}'\'' -e'"" [2025-08-26 02:25:09][351910100804561][3233 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 02:25:09][351910100804561][3233 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351910100804561\",\"model\":\"SM-T870\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52R905CKHZ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2317\"}'\'' -e'"" [2025-08-26 02:25:16][351910100804561][10887 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_57a17d91-610c-4fa0-81ab-d1cceda1dc3c","id":"QR_57a17d91-610c-4fa0-81ab-d1cceda1dc3c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 02:25:17][351910100804561][11043 ms][DEBUG] proc_open done in 7810 ms; code=255; res.len=3343 [2025-08-26 02:25:17][351910100804561][11043 ms][DEBUG] END runCmdUntilRes#1 in 7811 ms [2025-08-26 02:25:17][351910100804561][11043 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 02:25:23][355970533041054][0 ms][INFO] === Request start === [2025-08-26 02:25:23][355970533041054][1 ms][DEBUG] START check_scloud [2025-08-26 02:25:23][355970533041054][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 02:25:23][355970533041054][367 ms][DEBUG] SU: done in 366 ms; outu0_a118 10304 4972 23745084 106268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 02:25:23][355970533041054][367 ms][DEBUG] targetPkg: running [2025-08-26 02:25:23][355970533041054][367 ms][DEBUG] END check_scloud in 366 ms [2025-08-26 02:25:23][355970533041054][367 ms][DEBUG] START check_boot_completed [2025-08-26 02:25:23][355970533041054][367 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 02:25:23][355970533041054][414 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 02:25:23][355970533041054][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 02:25:23][355970533041054][476 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 02:25:23][355970533041054][476 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 02:25:23][355970533041054][476 ms][DEBUG] rawBody.length=1149 [2025-08-26 02:25:23][355970533041054][476 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355970533041054\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8155\"}'\'' -e'"" [2025-08-26 02:25:23][355970533041054][476 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 02:25:23][355970533041054][476 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355970533041054\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8155\"}'\'' -e'"" [2025-08-26 02:25:29][355970533041054][6068 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e4719ea5-f90c-4562-a39c-668dd0282c1f","id":"QR_e4719ea5-f90c-4562-a39c-668dd0282c1f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 02:25:29][355970533041054][6224 ms][DEBUG] proc_open done in 5748 ms; code=255; res.len=3343 [2025-08-26 02:25:29][355970533041054][6224 ms][DEBUG] END runCmdUntilRes#1 in 5749 ms [2025-08-26 02:25:29][355970533041054][6225 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 02:28:03][350247875669452][1 ms][INFO] === Request start === [2025-08-26 02:28:03][350247875669452][1 ms][DEBUG] START check_scloud [2025-08-26 02:28:03][350247875669452][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 02:28:03][350247875669452][338 ms][DEBUG] SU: done in 337 ms; outu0_a118 10304 4972 23781956 68324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 02:28:03][350247875669452][338 ms][DEBUG] targetPkg: running [2025-08-26 02:28:03][350247875669452][338 ms][DEBUG] END check_scloud in 337 ms [2025-08-26 02:28:03][350247875669452][338 ms][DEBUG] START check_boot_completed [2025-08-26 02:28:03][350247875669452][338 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 02:28:03][350247875669452][369 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 02:28:03][350247875669452][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 02:28:03][350247875669452][416 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 02:28:03][350247875669452][416 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 02:28:03][350247875669452][416 ms][DEBUG] START check_internet [2025-08-26 02:28:03][350247875669452][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 02:28:04][350247875669452][822 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.422/201.422/201.422/0.000 ms\n [2025-08-26 02:28:04][350247875669452][823 ms][DEBUG] check_internet: online [2025-08-26 02:28:04][350247875669452][823 ms][DEBUG] END check_internet in 406 ms [2025-08-26 02:28:04][350247875669452][823 ms][DEBUG] rawBody.length=1148 [2025-08-26 02:28:04][350247875669452][823 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247875669452\",\"model\":\"SM-N980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6827\"}'\'' -e'"" [2025-08-26 02:28:04][350247875669452][823 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 02:28:04][350247875669452][823 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247875669452\",\"model\":\"SM-N980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6827\"}'\'' -e'"" [2025-08-26 02:28:08][350247875669452][5290 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b784bf95-d3db-4db3-b2c0-bef5af313d77","id":"QR_b784bf95-d3db-4db3-b2c0-bef5af313d77","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 02:28:08][350247875669452][5446 ms][DEBUG] proc_open done in 4623 ms; code=255; res.len=3343 [2025-08-26 02:28:08][350247875669452][5446 ms][DEBUG] END runCmdUntilRes#1 in 4623 ms [2025-08-26 02:28:08][350247875669452][5446 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 02:36:05][356263319094607][1 ms][INFO] === Request start === [2025-08-26 02:36:05][356263319094607][1 ms][DEBUG] START check_scloud [2025-08-26 02:36:05][356263319094607][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 02:36:05][356263319094607][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 10304 4972 23878172 89572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 02:36:05][356263319094607][308 ms][DEBUG] targetPkg: running [2025-08-26 02:36:05][356263319094607][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-26 02:36:05][356263319094607][308 ms][DEBUG] START check_boot_completed [2025-08-26 02:36:05][356263319094607][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 02:36:05][356263319094607][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 02:36:05][356263319094607][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 02:36:05][356263319094607][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 02:36:05][356263319094607][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 02:36:05][356263319094607][386 ms][DEBUG] START check_internet [2025-08-26 02:36:05][356263319094607][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 02:36:06][356263319094607][839 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.525/202.525/202.525/0.000 ms\n [2025-08-26 02:36:06][356263319094607][839 ms][DEBUG] check_internet: online [2025-08-26 02:36:06][356263319094607][839 ms][DEBUG] END check_internet in 453 ms [2025-08-26 02:36:06][356263319094607][839 ms][DEBUG] rawBody.length=1149 [2025-08-26 02:36:06][356263319094607][839 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356263319094607\",\"model\":\"SM-A325M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7267\"}'\'' -e'"" [2025-08-26 02:36:06][356263319094607][839 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 02:36:06][356263319094607][839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356263319094607\",\"model\":\"SM-A325M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7267\"}'\'' -e'"" [2025-08-26 02:36:11][356263319094607][6041 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_73e92cb1-a31a-476c-aa84-b00921a7d8c7","id":"QR_73e92cb1-a31a-476c-aa84-b00921a7d8c7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 02:36:11][356263319094607][6197 ms][DEBUG] proc_open done in 5358 ms; code=255; res.len=3343 [2025-08-26 02:36:11][356263319094607][6197 ms][DEBUG] END runCmdUntilRes#1 in 5358 ms [2025-08-26 02:36:11][356263319094607][6197 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 02:44:03][352600227703676][1 ms][INFO] === Request start === [2025-08-26 02:44:03][352600227703676][1 ms][DEBUG] START check_scloud [2025-08-26 02:44:03][352600227703676][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 02:44:04][352600227703676][327 ms][DEBUG] SU: done in 326 ms; outu0_a118 10304 4972 23990016 102252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 02:44:04][352600227703676][327 ms][DEBUG] targetPkg: running [2025-08-26 02:44:04][352600227703676][327 ms][DEBUG] END check_scloud in 326 ms [2025-08-26 02:44:04][352600227703676][327 ms][DEBUG] START check_boot_completed [2025-08-26 02:44:04][352600227703676][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 02:44:04][352600227703676][374 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 02:44:04][352600227703676][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 02:44:04][352600227703676][436 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 02:44:04][352600227703676][436 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 02:44:04][352600227703676][436 ms][DEBUG] START check_internet [2025-08-26 02:44:04][352600227703676][436 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 02:44:04][352600227703676][920 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.727/202.727/202.727/0.000 ms\n [2025-08-26 02:44:04][352600227703676][920 ms][DEBUG] check_internet: online [2025-08-26 02:44:04][352600227703676][920 ms][DEBUG] END check_internet in 484 ms [2025-08-26 02:44:04][352600227703676][920 ms][DEBUG] rawBody.length=1148 [2025-08-26 02:44:04][352600227703676][920 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227703676\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1978\"}'\'' -e'"" [2025-08-26 02:44:04][352600227703676][920 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 02:44:04][352600227703676][920 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600227703676\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1978\"}'\'' -e'"" [2025-08-26 02:44:08][352600227703676][4779 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_63d66676-eade-4866-90fb-b6997dce3546","id":"QR_63d66676-eade-4866-90fb-b6997dce3546","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 02:44:08][352600227703676][4935 ms][DEBUG] proc_open done in 4015 ms; code=255; res.len=3343 [2025-08-26 02:44:08][352600227703676][4935 ms][DEBUG] END runCmdUntilRes#1 in 4015 ms [2025-08-26 02:44:08][352600227703676][4935 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 02:44:11][358866810594079][0 ms][INFO] === Request start === [2025-08-26 02:44:11][358866810594079][1 ms][DEBUG] START check_scloud [2025-08-26 02:44:11][358866810594079][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 02:44:11][358866810594079][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 10304 4972 24145876 112560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 02:44:11][358866810594079][315 ms][DEBUG] targetPkg: running [2025-08-26 02:44:11][358866810594079][315 ms][DEBUG] END check_scloud in 315 ms [2025-08-26 02:44:11][358866810594079][315 ms][DEBUG] START check_boot_completed [2025-08-26 02:44:11][358866810594079][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 02:44:11][358866810594079][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 02:44:11][358866810594079][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 02:44:11][358866810594079][424 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 02:44:11][358866810594079][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 02:44:11][358866810594079][424 ms][DEBUG] START check_internet [2025-08-26 02:44:11][358866810594079][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 02:44:12][358866810594079][752 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=217 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 217.926/217.926/217.926/0.000 ms\n [2025-08-26 02:44:12][358866810594079][753 ms][DEBUG] check_internet: online [2025-08-26 02:44:12][358866810594079][753 ms][DEBUG] END check_internet in 328 ms [2025-08-26 02:44:12][358866810594079][753 ms][DEBUG] rawBody.length=1148 [2025-08-26 02:44:12][358866810594079][753 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358866810594079\",\"model\":\"SM-A546J\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KDI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8868\"}'\'' -e'"" [2025-08-26 02:44:12][358866810594079][753 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 02:44:12][358866810594079][753 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358866810594079\",\"model\":\"SM-A546J\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KDI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8868\"}'\'' -e'"" [2025-08-26 02:44:15][358866810594079][4564 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2baf4a2c-7c6d-457e-870f-9386d99e5636","id":"QR_2baf4a2c-7c6d-457e-870f-9386d99e5636","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 02:44:16][358866810594079][4720 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-26 02:44:16][358866810594079][4720 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-26 02:44:16][358866810594079][4720 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 02:50:04][359156946631592][0 ms][INFO] === Request start === [2025-08-26 02:50:04][359156946631592][0 ms][DEBUG] START check_scloud [2025-08-26 02:50:04][359156946631592][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 02:50:04][359156946631592][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 10304 4972 24253460 122324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 02:50:04][359156946631592][306 ms][DEBUG] targetPkg: running [2025-08-26 02:50:04][359156946631592][306 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 02:50:04][359156946631592][306 ms][DEBUG] START check_boot_completed [2025-08-26 02:50:04][359156946631592][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 02:50:05][359156946631592][351 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 02:50:05][359156946631592][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 02:50:05][359156946631592][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 02:50:05][359156946631592][399 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-26 02:50:05][359156946631592][399 ms][DEBUG] START check_internet [2025-08-26 02:50:05][359156946631592][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 02:50:05][359156946631592][867 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.294/202.294/202.294/0.000 ms\n [2025-08-26 02:50:05][359156946631592][867 ms][DEBUG] check_internet: online [2025-08-26 02:50:05][359156946631592][867 ms][DEBUG] END check_internet in 468 ms [2025-08-26 02:50:05][359156946631592][867 ms][DEBUG] rawBody.length=1149 [2025-08-26 02:50:05][359156946631592][867 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156946631592\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7544\"}'\'' -e'"" [2025-08-26 02:50:05][359156946631592][867 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 02:50:05][359156946631592][867 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156946631592\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7544\"}'\'' -e'"" [2025-08-26 02:50:10][359156946631592][5959 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a463656c-9436-4e9f-aa1d-4ad4e399cfa0","id":"QR_a463656c-9436-4e9f-aa1d-4ad4e399cfa0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 02:50:10][359156946631592][6115 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-08-26 02:50:10][359156946631592][6115 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-08-26 02:50:10][359156946631592][6116 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 03:12:03][350471128706602][1 ms][INFO] === Request start === [2025-08-26 03:12:03][350471128706602][1 ms][DEBUG] START check_scloud [2025-08-26 03:12:03][350471128706602][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 03:12:03][350471128706602][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 10304 4972 24339628 121940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 03:12:03][350471128706602][310 ms][DEBUG] targetPkg: running [2025-08-26 03:12:03][350471128706602][310 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 03:12:03][350471128706602][310 ms][DEBUG] START check_boot_completed [2025-08-26 03:12:03][350471128706602][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 03:12:03][350471128706602][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 03:12:03][350471128706602][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 03:12:03][350471128706602][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 03:12:03][350471128706602][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 03:12:03][350471128706602][388 ms][DEBUG] START check_internet [2025-08-26 03:12:03][350471128706602][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 03:12:04][350471128706602][809 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.504/200.504/200.504/0.000 ms\n [2025-08-26 03:12:04][350471128706602][810 ms][DEBUG] check_internet: online [2025-08-26 03:12:04][350471128706602][810 ms][DEBUG] END check_internet in 422 ms [2025-08-26 03:12:04][350471128706602][810 ms][DEBUG] rawBody.length=1148 [2025-08-26 03:12:04][350471128706602][810 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471128706602\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7111\"}'\'' -e'"" [2025-08-26 03:12:04][350471128706602][810 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 03:12:04][350471128706602][810 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471128706602\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7111\"}'\'' -e'"" [2025-08-26 03:12:08][350471128706602][4652 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_06379a70-de85-409a-9a4c-040ff88c0025","id":"QR_06379a70-de85-409a-9a4c-040ff88c0025","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 03:12:08][350471128706602][4808 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-08-26 03:12:08][350471128706602][4808 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-26 03:12:08][350471128706602][4809 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 03:28:06][355255110203784][1 ms][INFO] === Request start === [2025-08-26 03:28:06][355255110203784][1 ms][DEBUG] START check_scloud [2025-08-26 03:28:06][355255110203784][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 03:28:06][355255110203784][339 ms][DEBUG] SU: done in 338 ms; outu0_a118 10304 4972 24482192 99180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 03:28:06][355255110203784][339 ms][DEBUG] targetPkg: running [2025-08-26 03:28:06][355255110203784][339 ms][DEBUG] END check_scloud in 338 ms [2025-08-26 03:28:06][355255110203784][339 ms][DEBUG] START check_boot_completed [2025-08-26 03:28:06][355255110203784][339 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 03:28:06][355255110203784][370 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 03:28:06][355255110203784][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 03:28:06][355255110203784][417 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 03:28:06][355255110203784][417 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 03:28:06][355255110203784][417 ms][DEBUG] START check_internet [2025-08-26 03:28:06][355255110203784][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 03:28:07][355255110203784][870 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.465/198.465/198.465/0.000 ms\n [2025-08-26 03:28:07][355255110203784][870 ms][DEBUG] check_internet: online [2025-08-26 03:28:07][355255110203784][870 ms][DEBUG] END check_internet in 453 ms [2025-08-26 03:28:07][355255110203784][871 ms][DEBUG] rawBody.length=1159 [2025-08-26 03:28:07][355255110203784][871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355255110203784\",\"model\":\"SM-X210\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R92X904MZNB\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9320\"}'\'' -e'"" [2025-08-26 03:28:07][355255110203784][871 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 03:28:07][355255110203784][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355255110203784\",\"model\":\"SM-X210\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R92X904MZNB\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9320\"}'\'' -e'"" [2025-08-26 03:28:12][355255110203784][6228 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1f0ee33c-f22f-4a72-a5bc-9ee5641c9b98","id":"QR_1f0ee33c-f22f-4a72-a5bc-9ee5641c9b98","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 03:28:12][355255110203784][6384 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-08-26 03:28:12][355255110203784][6384 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-26 03:28:12][355255110203784][6384 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 03:32:03][357518811547249][0 ms][INFO] === Request start === [2025-08-26 03:32:03][357518811547249][0 ms][DEBUG] START check_scloud [2025-08-26 03:32:03][357518811547249][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 03:32:03][357518811547249][254 ms][DEBUG] SU: done in 254 ms; outu0_a118 10304 4972 24652480 108764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 03:32:03][357518811547249][254 ms][DEBUG] targetPkg: running [2025-08-26 03:32:03][357518811547249][254 ms][DEBUG] END check_scloud in 254 ms [2025-08-26 03:32:03][357518811547249][254 ms][DEBUG] START check_boot_completed [2025-08-26 03:32:03][357518811547249][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 03:32:03][357518811547249][301 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 03:32:03][357518811547249][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 03:32:03][357518811547249][348 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 03:32:03][357518811547249][348 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 03:32:03][357518811547249][348 ms][DEBUG] START check_internet [2025-08-26 03:32:03][357518811547249][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 03:32:03][357518811547249][598 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=145 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 145.360/145.360/145.360/0.000 ms\n [2025-08-26 03:32:03][357518811547249][598 ms][DEBUG] check_internet: online [2025-08-26 03:32:03][357518811547249][598 ms][DEBUG] END check_internet in 250 ms [2025-08-26 03:32:03][357518811547249][598 ms][DEBUG] rawBody.length=1148 [2025-08-26 03:32:03][357518811547249][598 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357518811547249\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8343\"}'\'' -e'"" [2025-08-26 03:32:03][357518811547249][598 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 03:32:03][357518811547249][598 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357518811547249\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8343\"}'\'' -e'"" [2025-08-26 03:32:07][357518811547249][4519 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-26 03:32:07][357518811547249][4675 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=115 [2025-08-26 03:32:07][357518811547249][4675 ms][DEBUG] END runCmdUntilRes#1 in 4076 ms [2025-08-26 03:32:07][357518811547249][4675 ms][INFO] SUCCESS response from frida (len=115) [2025-08-26 03:32:08][][0 ms][INFO] === Request start === [2025-08-26 03:32:08][][1 ms][DEBUG] START check_scloud [2025-08-26 03:32:08][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 03:32:08][][293 ms][DEBUG] SU: done in 293 ms; outu0_a118 10304 4972 24793036 121512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 03:32:08][][294 ms][DEBUG] targetPkg: running [2025-08-26 03:32:08][][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-26 03:32:08][][294 ms][DEBUG] START check_boot_completed [2025-08-26 03:32:08][][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 03:32:08][][340 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 03:32:08][][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 03:32:08][][418 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 03:32:08][][419 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 03:32:08][][419 ms][DEBUG] START check_internet [2025-08-26 03:32:08][][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 03:32:08][][700 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=150 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 150.725/150.725/150.725/0.000 ms\n [2025-08-26 03:32:08][][700 ms][DEBUG] check_internet: online [2025-08-26 03:32:08][][700 ms][DEBUG] END check_internet in 281 ms [2025-08-26 03:32:08][][700 ms][DEBUG] rawBody.length=1129 [2025-08-26 03:32:08][][700 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCT70EV26X\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9313\"}'\'' -e'"" [2025-08-26 03:32:08][][700 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 03:32:08][][700 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCT70EV26X\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9313\"}'\'' -e'"" [2025-08-26 03:32:12][][4074 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-26 03:32:12][][4230 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=115 [2025-08-26 03:32:12][][4230 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-08-26 03:32:12][][4230 ms][INFO] SUCCESS response from frida (len=115) [2025-08-26 03:32:14][357518811547249][0 ms][INFO] === Request start === [2025-08-26 03:32:14][357518811547249][1 ms][DEBUG] START check_scloud [2025-08-26 03:32:14][357518811547249][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 03:32:14][357518811547249][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 10304 4972 24948556 122212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 03:32:14][357518811547249][305 ms][DEBUG] targetPkg: running [2025-08-26 03:32:14][357518811547249][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 03:32:14][357518811547249][305 ms][DEBUG] START check_boot_completed [2025-08-26 03:32:14][357518811547249][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 03:32:15][357518811547249][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 03:32:15][357518811547249][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 03:32:15][357518811547249][398 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 03:32:15][357518811547249][399 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 03:32:15][357518811547249][399 ms][DEBUG] START check_internet [2025-08-26 03:32:15][357518811547249][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 03:32:15][357518811547249][882 ms][DEBUG] SU: done in 483 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.107/202.107/202.107/0.000 ms\n [2025-08-26 03:32:15][357518811547249][882 ms][DEBUG] check_internet: online [2025-08-26 03:32:15][357518811547249][882 ms][DEBUG] END check_internet in 483 ms [2025-08-26 03:32:15][357518811547249][882 ms][DEBUG] rawBody.length=1149 [2025-08-26 03:32:15][357518811547249][882 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357518811547249\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3771\"}'\'' -e'"" [2025-08-26 03:32:15][357518811547249][882 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 03:32:15][357518811547249][882 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357518811547249\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3771\"}'\'' -e'"" [2025-08-26 03:32:17][357518811547249][2710 ms][DEBUG] proc_open done in 1827 ms (timeout); code=4; out.len=0 err.len=26 [2025-08-26 03:32:17][357518811547249][2710 ms][DEBUG] END runCmdUntilRes#1 in 1828 ms [2025-08-26 03:32:17][357518811547249][2710 ms][WARN] Detected error: The connection is closed [2025-08-26 03:32:17][357518811547249][2710 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 03:32:17][357518811547249][2991 ms][DEBUG] SU: done in 281 ms; out [2025-08-26 03:32:17][357518811547249][2991 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 03:32:17][357518811547249][2991 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 03:32:17][357518811547249][3147 ms][DEBUG] SU: done in 157 ms; out [2025-08-26 03:32:17][357518811547249][3147 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 03:32:18][357518811547249][3569 ms][DEBUG] SU: done in 421 ms; out [2025-08-26 03:32:20][357518811547249][5584 ms][DEBUG] START check_boot_completed [2025-08-26 03:32:20][357518811547249][5584 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 03:32:20][357518811547249][5631 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 03:32:20][357518811547249][5631 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 03:32:20][357518811547249][5709 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 03:32:20][357518811547249][5709 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 03:32:23][357518811547249][8723 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 03:32:23][357518811547249][8724 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357518811547249\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3771\"}'\'' -e'"" [2025-08-26 03:32:24][357518811547249][10208 ms][DEBUG] proc_open done in 1484 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-26 03:32:24][357518811547249][10208 ms][DEBUG] END runCmdUntilRes#2 in 1484 ms [2025-08-26 03:32:24][357518811547249][10208 ms][WARN] Detected error 2; Reboot the device [2025-08-26 03:32:24][357518811547249][10208 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-26 03:32:25][357518811547249][10785 ms][DEBUG] SU: done in 577 ms; out [2025-08-26 03:33:03][357518811547249][0 ms][INFO] === Request start === [2025-08-26 03:33:03][357518811547249][1 ms][DEBUG] START check_scloud [2025-08-26 03:33:03][357518811547249][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 03:33:03][357518811547249][44 ms][DEBUG] SU: done in 43 ms; out [2025-08-26 03:33:03][357518811547249][44 ms][WARN] targetPkg: not running, restarting [2025-08-26 03:33:03][357518811547249][44 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 03:33:03][357518811547249][75 ms][DEBUG] SU: done in 31 ms; out [2025-08-26 03:33:03][357518811547249][75 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 03:33:03][357518811547249][107 ms][DEBUG] SU: done in 31 ms; out [2025-08-26 03:33:05][357518811547249][2122 ms][DEBUG] END check_scloud in 2121 ms [2025-08-26 03:33:05][357518811547249][2122 ms][DEBUG] START check_boot_completed [2025-08-26 03:33:05][357518811547249][2122 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 03:33:24][357518811547249][21458 ms][DEBUG] ADB: done in 19336 ms; out [2025-08-26 03:33:24][357518811547249][21458 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 03:33:25][357518811547249][21552 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 03:33:25][357518811547249][21552 ms][DEBUG] END check_boot_completed in 19430 ms [2025-08-26 03:33:25][357518811547249][21552 ms][DEBUG] rawBody.length=1148 [2025-08-26 03:33:25][357518811547249][21552 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357518811547249\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6832\"}'\'' -e'"" [2025-08-26 03:33:25][357518811547249][21552 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 03:33:25][357518811547249][21552 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357518811547249\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6832\"}'\'' -e'"" [2025-08-26 03:33:28][357518811547249][25442 ms][DEBUG] proc_open done in 3889 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-26 03:33:28][357518811547249][25442 ms][DEBUG] END runCmdUntilRes#1 in 3890 ms [2025-08-26 03:33:28][357518811547249][25442 ms][WARN] Detected error: Process not found [2025-08-26 03:33:28][357518811547249][25442 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 03:33:29][357518811547249][25582 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 03:33:29][357518811547249][25582 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 03:33:29][357518811547249][25582 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 03:33:29][357518811547249][25707 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 03:33:29][357518811547249][25707 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 03:33:29][357518811547249][25910 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 03:33:31][357518811547249][27919 ms][DEBUG] START check_boot_completed [2025-08-26 03:33:31][357518811547249][27919 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 03:33:32][357518811547249][28982 ms][DEBUG] ADB: done in 1062 ms; out [2025-08-26 03:33:32][357518811547249][28982 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 03:33:32][357518811547249][29044 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 03:33:32][357518811547249][29045 ms][DEBUG] END check_boot_completed in 1125 ms [2025-08-26 03:33:35][357518811547249][32059 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 03:33:35][357518811547249][32059 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357518811547249\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6832\"}'\'' -e'"" [2025-08-26 03:33:40][357518811547249][37370 ms][DEBUG] proc_open done in 5311 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-26 03:33:40][357518811547249][37370 ms][DEBUG] END runCmdUntilRes#2 in 5311 ms [2025-08-26 03:33:40][357518811547249][37370 ms][WARN] Detected error 2; Reboot the device [2025-08-26 03:33:40][357518811547249][37370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-26 03:34:03][357518811547249][0 ms][INFO] === Request start === [2025-08-26 03:34:03][357518811547249][1 ms][DEBUG] START check_scloud [2025-08-26 03:34:03][357518811547249][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 03:34:03][357518811547249][47 ms][DEBUG] SU: done in 46 ms; out [2025-08-26 03:34:03][357518811547249][47 ms][WARN] targetPkg: not running, restarting [2025-08-26 03:34:03][357518811547249][47 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 03:34:03][357518811547249][78 ms][DEBUG] SU: done in 31 ms; out [2025-08-26 03:34:03][357518811547249][78 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 03:34:03][357518811547249][125 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 03:34:05][357518811547249][2140 ms][DEBUG] END check_scloud in 2139 ms [2025-08-26 03:34:05][357518811547249][2140 ms][DEBUG] START check_boot_completed [2025-08-26 03:34:05][357518811547249][2140 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 03:34:41][357518811547249][38716 ms][DEBUG] ADB: done in 36576 ms; out [2025-08-26 03:34:41][357518811547249][38716 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 03:34:41][357518811547249][38826 ms][DEBUG] SU: done in 109 ms; out [2025-08-26 03:34:41][357518811547249][38826 ms][DEBUG] END check_boot_completed in 36685 ms [2025-08-26 03:34:41][357518811547249][38826 ms][DEBUG] START check_internet [2025-08-26 03:34:41][357518811547249][38826 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 03:34:42][357518811547249][38966 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 03:34:42][357518811547249][38967 ms][WARN] check_internet: offline [2025-08-26 03:34:42][357518811547249][38967 ms][DEBUG] END check_internet in 141 ms [2025-08-26 03:35:03][357518811547249][1 ms][INFO] === Request start === [2025-08-26 03:35:03][357518811547249][1 ms][DEBUG] START check_scloud [2025-08-26 03:35:03][357518811547249][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 03:35:04][357518811547249][490 ms][DEBUG] SU: done in 489 ms; out [2025-08-26 03:35:04][357518811547249][490 ms][WARN] targetPkg: not running, restarting [2025-08-26 03:35:04][357518811547249][490 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 03:35:04][357518811547249][631 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 03:35:04][357518811547249][631 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 03:35:04][357518811547249][881 ms][DEBUG] SU: done in 250 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 03:35:06][357518811547249][2896 ms][DEBUG] END check_scloud in 2894 ms [2025-08-26 03:35:06][357518811547249][2896 ms][DEBUG] START check_boot_completed [2025-08-26 03:35:06][357518811547249][2896 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 03:35:06][357518811547249][2943 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 03:35:06][357518811547249][2943 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 03:35:06][357518811547249][3036 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 03:35:06][357518811547249][3036 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-26 03:35:06][357518811547249][3037 ms][DEBUG] rawBody.length=1148 [2025-08-26 03:35:06][357518811547249][3037 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357518811547249\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2628\"}'\'' -e'"" [2025-08-26 03:35:06][357518811547249][3037 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 03:35:06][357518811547249][3037 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357518811547249\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2628\"}'\'' -e'"" [2025-08-26 03:35:12][357518811547249][8910 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-26 03:35:12][357518811547249][9066 ms][DEBUG] proc_open done in 6029 ms; code=255; res.len=115 [2025-08-26 03:35:12][357518811547249][9066 ms][DEBUG] END runCmdUntilRes#1 in 6030 ms [2025-08-26 03:35:12][357518811547249][9066 ms][INFO] SUCCESS response from frida (len=115) [2025-08-26 03:35:13][][0 ms][INFO] === Request start === [2025-08-26 03:35:13][][1 ms][DEBUG] START check_scloud [2025-08-26 03:35:13][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 03:35:13][][345 ms][DEBUG] SU: done in 345 ms; outu0_a118 9992 5017 23550432 119544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 03:35:13][][345 ms][DEBUG] targetPkg: running [2025-08-26 03:35:13][][346 ms][DEBUG] END check_scloud in 345 ms [2025-08-26 03:35:13][][346 ms][DEBUG] START check_boot_completed [2025-08-26 03:35:13][][346 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 03:35:13][][392 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 03:35:13][][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 03:35:13][][439 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 03:35:13][][439 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 03:35:13][][439 ms][DEBUG] rawBody.length=1129 [2025-08-26 03:35:13][][439 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCT70EV26X\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1047\"}'\'' -e'"" [2025-08-26 03:35:13][][439 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 03:35:13][][439 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCT70EV26X\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1047\"}'\'' -e'"" [2025-08-26 03:35:17][][4219 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-26 03:35:17][][4375 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=115 [2025-08-26 03:35:17][][4375 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-26 03:35:17][][4376 ms][INFO] SUCCESS response from frida (len=115) [2025-08-26 03:35:19][357518811547249][0 ms][INFO] === Request start === [2025-08-26 03:35:19][357518811547249][1 ms][DEBUG] START check_scloud [2025-08-26 03:35:19][357518811547249][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 03:35:19][357518811547249][439 ms][DEBUG] SU: done in 438 ms; outu0_a118 9992 5017 23746820 120608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 03:35:19][357518811547249][439 ms][DEBUG] targetPkg: running [2025-08-26 03:35:19][357518811547249][439 ms][DEBUG] END check_scloud in 438 ms [2025-08-26 03:35:19][357518811547249][439 ms][DEBUG] START check_boot_completed [2025-08-26 03:35:19][357518811547249][439 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 03:35:19][357518811547249][486 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 03:35:19][357518811547249][486 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 03:35:20][357518811547249][579 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 03:35:20][357518811547249][580 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 03:35:20][357518811547249][580 ms][DEBUG] rawBody.length=1149 [2025-08-26 03:35:20][357518811547249][580 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357518811547249\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8395\"}'\'' -e'"" [2025-08-26 03:35:20][357518811547249][580 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 03:35:20][357518811547249][580 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357518811547249\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8395\"}'\'' -e'"" [2025-08-26 03:35:29][357518811547249][9999 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6db7cca4-b7bc-4fc9-a0fa-58b6372d3789","id":"QR_6db7cca4-b7bc-4fc9-a0fa-58b6372d3789","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 03:35:29][357518811547249][10155 ms][DEBUG] proc_open done in 9575 ms; code=255; res.len=3343 [2025-08-26 03:35:29][357518811547249][10155 ms][DEBUG] END runCmdUntilRes#1 in 9575 ms [2025-08-26 03:35:29][357518811547249][10155 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 03:49:03][353271410390488][1 ms][INFO] === Request start === [2025-08-26 03:49:03][353271410390488][1 ms][DEBUG] START check_scloud [2025-08-26 03:49:03][353271410390488][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 03:49:03][353271410390488][349 ms][DEBUG] SU: done in 348 ms; outu0_a118 9992 5017 23784448 77020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 03:49:03][353271410390488][349 ms][DEBUG] targetPkg: running [2025-08-26 03:49:03][353271410390488][349 ms][DEBUG] END check_scloud in 348 ms [2025-08-26 03:49:03][353271410390488][349 ms][DEBUG] START check_boot_completed [2025-08-26 03:49:03][353271410390488][349 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 03:49:03][353271410390488][379 ms][DEBUG] ADB: done in 30 ms; out [2025-08-26 03:49:03][353271410390488][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 03:49:03][353271410390488][427 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 03:49:03][353271410390488][427 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-26 03:49:03][353271410390488][427 ms][DEBUG] rawBody.length=1148 [2025-08-26 03:49:03][353271410390488][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353271410390488\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3663\"}'\'' -e'"" [2025-08-26 03:49:03][353271410390488][427 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 03:49:03][353271410390488][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353271410390488\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3663\"}'\'' -e'"" [2025-08-26 03:49:08][353271410390488][4831 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4e64f4c2-2ed2-4d69-974c-101b2697aca4","id":"QR_4e64f4c2-2ed2-4d69-974c-101b2697aca4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 03:49:08][353271410390488][4988 ms][DEBUG] proc_open done in 4561 ms; code=255; res.len=3343 [2025-08-26 03:49:08][353271410390488][4988 ms][DEBUG] END runCmdUntilRes#1 in 4561 ms [2025-08-26 03:49:08][353271410390488][4988 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 03:53:03][355733203798985][1 ms][INFO] === Request start === [2025-08-26 03:53:03][355733203798985][1 ms][DEBUG] START check_scloud [2025-08-26 03:53:03][355733203798985][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 03:53:03][355733203798985][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 9992 5017 23934128 90144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 03:53:03][355733203798985][321 ms][DEBUG] targetPkg: running [2025-08-26 03:53:03][355733203798985][321 ms][DEBUG] END check_scloud in 320 ms [2025-08-26 03:53:03][355733203798985][321 ms][DEBUG] START check_boot_completed [2025-08-26 03:53:03][355733203798985][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 03:53:03][355733203798985][353 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 03:53:03][355733203798985][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 03:53:03][355733203798985][401 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 03:53:03][355733203798985][401 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 03:53:03][355733203798985][401 ms][DEBUG] rawBody.length=1148 [2025-08-26 03:53:03][355733203798985][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355733203798985\",\"model\":\"SM-A156L\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8355\"}'\'' -e'"" [2025-08-26 03:53:03][355733203798985][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 03:53:03][355733203798985][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355733203798985\",\"model\":\"SM-A156L\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8355\"}'\'' -e'"" [2025-08-26 03:53:07][355733203798985][4430 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_239c6e95-75a0-4bf2-8d79-1a50eff43ee1","id":"QR_239c6e95-75a0-4bf2-8d79-1a50eff43ee1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 03:53:07][355733203798985][4586 ms][DEBUG] proc_open done in 4185 ms; code=255; res.len=3343 [2025-08-26 03:53:07][355733203798985][4586 ms][DEBUG] END runCmdUntilRes#1 in 4185 ms [2025-08-26 03:53:07][355733203798985][4586 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 03:58:05][358076931435661][1 ms][INFO] === Request start === [2025-08-26 03:58:05][358076931435661][1 ms][DEBUG] START check_scloud [2025-08-26 03:58:05][358076931435661][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 03:58:05][358076931435661][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 9992 5017 24082644 101812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 03:58:05][358076931435661][319 ms][DEBUG] targetPkg: running [2025-08-26 03:58:05][358076931435661][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-26 03:58:05][358076931435661][319 ms][DEBUG] START check_boot_completed [2025-08-26 03:58:05][358076931435661][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 03:58:05][358076931435661][350 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 03:58:05][358076931435661][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 03:58:05][358076931435661][398 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 03:58:05][358076931435661][398 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 03:58:05][358076931435661][398 ms][DEBUG] START check_internet [2025-08-26 03:58:05][358076931435661][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 03:58:06][358076931435661][992 ms][DEBUG] SU: done in 594 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.486/201.486/201.486/0.000 ms\n [2025-08-26 03:58:06][358076931435661][993 ms][DEBUG] check_internet: online [2025-08-26 03:58:06][358076931435661][993 ms][DEBUG] END check_internet in 594 ms [2025-08-26 03:58:06][358076931435661][993 ms][DEBUG] rawBody.length=1149 [2025-08-26 03:58:06][358076931435661][993 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358076931435661\",\"model\":\"SM-A336M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2604\"}'\'' -e'"" [2025-08-26 03:58:06][358076931435661][993 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 03:58:06][358076931435661][993 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358076931435661\",\"model\":\"SM-A336M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2604\"}'\'' -e'"" [2025-08-26 03:58:11][358076931435661][6255 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6bec0858-48bf-4899-81ae-d56577ecaf96","id":"QR_6bec0858-48bf-4899-81ae-d56577ecaf96","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 03:58:11][358076931435661][6411 ms][DEBUG] proc_open done in 5418 ms; code=255; res.len=3343 [2025-08-26 03:58:11][358076931435661][6411 ms][DEBUG] END runCmdUntilRes#1 in 5418 ms [2025-08-26 03:58:11][358076931435661][6411 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 04:04:04][351123905744277][1 ms][INFO] === Request start === [2025-08-26 04:04:04][351123905744277][1 ms][DEBUG] START check_scloud [2025-08-26 04:04:04][351123905744277][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 04:04:05][351123905744277][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 9992 5017 24188344 113272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 04:04:05][351123905744277][286 ms][DEBUG] targetPkg: running [2025-08-26 04:04:05][351123905744277][286 ms][DEBUG] END check_scloud in 285 ms [2025-08-26 04:04:05][351123905744277][286 ms][DEBUG] START check_boot_completed [2025-08-26 04:04:05][351123905744277][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 04:04:05][351123905744277][332 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 04:04:05][351123905744277][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 04:04:05][351123905744277][395 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 04:04:05][351123905744277][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 04:04:05][351123905744277][395 ms][DEBUG] START check_internet [2025-08-26 04:04:05][351123905744277][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 04:04:05][351123905744277][879 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.172/203.172/203.172/0.000 ms\n [2025-08-26 04:04:05][351123905744277][879 ms][DEBUG] check_internet: online [2025-08-26 04:04:05][351123905744277][879 ms][DEBUG] END check_internet in 485 ms [2025-08-26 04:04:05][351123905744277][879 ms][DEBUG] rawBody.length=1149 [2025-08-26 04:04:05][351123905744277][879 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123905744277\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6472\"}'\'' -e'"" [2025-08-26 04:04:05][351123905744277][879 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 04:04:05][351123905744277][880 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123905744277\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6472\"}'\'' -e'"" [2025-08-26 04:04:10][351123905744277][5956 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a1104398-2af5-4f9f-91e6-e79d8f8cc31e","id":"QR_a1104398-2af5-4f9f-91e6-e79d8f8cc31e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 04:04:11][351123905744277][6112 ms][DEBUG] proc_open done in 5232 ms; code=255; res.len=3343 [2025-08-26 04:04:11][351123905744277][6112 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-08-26 04:04:11][351123905744277][6112 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 04:05:05][352042192981161][0 ms][INFO] === Request start === [2025-08-26 04:05:05][352042192981161][1 ms][DEBUG] START check_scloud [2025-08-26 04:05:05][352042192981161][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 04:05:05][352042192981161][330 ms][DEBUG] SU: done in 329 ms; outu0_a118 9992 5017 24322588 124032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 04:05:05][352042192981161][330 ms][DEBUG] targetPkg: running [2025-08-26 04:05:05][352042192981161][330 ms][DEBUG] END check_scloud in 329 ms [2025-08-26 04:05:05][352042192981161][330 ms][DEBUG] START check_boot_completed [2025-08-26 04:05:05][352042192981161][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 04:05:05][352042192981161][361 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 04:05:05][352042192981161][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 04:05:05][352042192981161][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 04:05:05][352042192981161][408 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 04:05:05][352042192981161][408 ms][DEBUG] rawBody.length=1149 [2025-08-26 04:05:05][352042192981161][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042192981161\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6624\"}'\'' -e'"" [2025-08-26 04:05:05][352042192981161][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 04:05:05][352042192981161][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042192981161\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6624\"}'\'' -e'"" [2025-08-26 04:05:10][352042192981161][5500 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_333ccf81-ba67-476d-a9d7-f42787c32719","id":"QR_333ccf81-ba67-476d-a9d7-f42787c32719","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 04:05:10][352042192981161][5656 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-08-26 04:05:10][352042192981161][5656 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-08-26 04:05:10][352042192981161][5657 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 04:09:03][350490941175753][1 ms][INFO] === Request start === [2025-08-26 04:09:03][350490941175753][1 ms][DEBUG] START check_scloud [2025-08-26 04:09:03][350490941175753][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 04:09:04][350490941175753][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 9992 5017 24471168 136076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 04:09:04][350490941175753][324 ms][DEBUG] targetPkg: running [2025-08-26 04:09:04][350490941175753][324 ms][DEBUG] END check_scloud in 323 ms [2025-08-26 04:09:04][350490941175753][324 ms][DEBUG] START check_boot_completed [2025-08-26 04:09:04][350490941175753][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 04:09:04][350490941175753][371 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 04:09:04][350490941175753][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 04:09:04][350490941175753][433 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 04:09:04][350490941175753][433 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 04:09:04][350490941175753][434 ms][DEBUG] rawBody.length=1148 [2025-08-26 04:09:04][350490941175753][434 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350490941175753\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3181\"}'\'' -e'"" [2025-08-26 04:09:04][350490941175753][434 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 04:09:04][350490941175753][434 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350490941175753\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3181\"}'\'' -e'"" [2025-08-26 04:09:08][350490941175753][4464 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8e4fa548-fcbf-4b0a-8170-c8e74fabce03","id":"QR_8e4fa548-fcbf-4b0a-8170-c8e74fabce03","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 04:09:08][350490941175753][4620 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-26 04:09:08][350490941175753][4620 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-26 04:09:08][350490941175753][4620 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 04:42:05][350318402607511][1 ms][INFO] === Request start === [2025-08-26 04:42:05][350318402607511][1 ms][DEBUG] START check_scloud [2025-08-26 04:42:05][350318402607511][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 04:42:05][350318402607511][322 ms][DEBUG] SU: done in 320 ms; outu0_a118 9992 5017 24614800 134128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 04:42:05][350318402607511][322 ms][DEBUG] targetPkg: running [2025-08-26 04:42:05][350318402607511][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-26 04:42:05][350318402607511][322 ms][DEBUG] START check_boot_completed [2025-08-26 04:42:05][350318402607511][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 04:42:05][350318402607511][368 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 04:42:05][350318402607511][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 04:42:05][350318402607511][431 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 04:42:05][350318402607511][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 04:42:05][350318402607511][431 ms][DEBUG] START check_internet [2025-08-26 04:42:05][350318402607511][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 04:42:06][350318402607511][962 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.359/203.359/203.359/0.000 ms\n [2025-08-26 04:42:06][350318402607511][962 ms][DEBUG] check_internet: online [2025-08-26 04:42:06][350318402607511][962 ms][DEBUG] END check_internet in 531 ms [2025-08-26 04:42:06][350318402607511][962 ms][DEBUG] rawBody.length=1150 [2025-08-26 04:42:06][350318402607511][962 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350318402607511\",\"model\":\"SM-S156VL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8725\"}'\'' -e'"" [2025-08-26 04:42:06][350318402607511][962 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 04:42:06][350318402607511][962 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350318402607511\",\"model\":\"SM-S156VL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8725\"}'\'' -e'"" [2025-08-26 04:42:11][350318402607511][6523 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_52ec8641-590b-4bff-a4af-0150f72893d5","id":"QR_52ec8641-590b-4bff-a4af-0150f72893d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 04:42:11][350318402607511][6679 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-08-26 04:42:11][350318402607511][6679 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-08-26 04:42:11][350318402607511][6680 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 04:46:03][354588701058113][1 ms][INFO] === Request start === [2025-08-26 04:46:03][354588701058113][1 ms][DEBUG] START check_scloud [2025-08-26 04:46:03][354588701058113][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 04:46:03][354588701058113][276 ms][DEBUG] SU: done in 274 ms; outu0_a118 9992 5017 24742016 131832 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 04:46:03][354588701058113][276 ms][DEBUG] targetPkg: running [2025-08-26 04:46:03][354588701058113][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-26 04:46:03][354588701058113][276 ms][DEBUG] START check_boot_completed [2025-08-26 04:46:03][354588701058113][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 04:46:03][354588701058113][322 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 04:46:03][354588701058113][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 04:46:03][354588701058113][385 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 04:46:03][354588701058113][385 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 04:46:03][354588701058113][385 ms][DEBUG] START check_internet [2025-08-26 04:46:03][354588701058113][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 04:46:04][354588701058113][854 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.937/202.937/202.937/0.000 ms\n [2025-08-26 04:46:04][354588701058113][854 ms][DEBUG] check_internet: online [2025-08-26 04:46:04][354588701058113][854 ms][DEBUG] END check_internet in 468 ms [2025-08-26 04:46:04][354588701058113][854 ms][DEBUG] rawBody.length=1148 [2025-08-26 04:46:04][354588701058113][854 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354588701058113\",\"model\":\"SM-S926N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1941\"}'\'' -e'"" [2025-08-26 04:46:04][354588701058113][854 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 04:46:04][354588701058113][854 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354588701058113\",\"model\":\"SM-S926N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1941\"}'\'' -e'"" [2025-08-26 04:46:08][354588701058113][4681 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bd6c3f2c-bcd2-4c23-9cb3-b162b4281802","id":"QR_bd6c3f2c-bcd2-4c23-9cb3-b162b4281802","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 04:46:08][354588701058113][4837 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-26 04:46:08][354588701058113][4837 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-26 04:46:08][354588701058113][4837 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 04:53:03][350635583019855][1 ms][INFO] === Request start === [2025-08-26 04:53:03][350635583019855][1 ms][DEBUG] START check_scloud [2025-08-26 04:53:03][350635583019855][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 04:53:03][350635583019855][268 ms][DEBUG] SU: done in 266 ms; outu0_a118 9992 5017 24852636 136388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 04:53:03][350635583019855][268 ms][DEBUG] targetPkg: running [2025-08-26 04:53:03][350635583019855][268 ms][DEBUG] END check_scloud in 266 ms [2025-08-26 04:53:03][350635583019855][268 ms][DEBUG] START check_boot_completed [2025-08-26 04:53:03][350635583019855][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 04:53:03][350635583019855][299 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 04:53:03][350635583019855][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 04:53:03][350635583019855][347 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 04:53:03][350635583019855][347 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 04:53:03][350635583019855][347 ms][DEBUG] rawBody.length=1148 [2025-08-26 04:53:03][350635583019855][347 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350635583019855\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8321\"}'\'' -e'"" [2025-08-26 04:53:03][350635583019855][347 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 04:53:03][350635583019855][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350635583019855\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8321\"}'\'' -e'"" [2025-08-26 04:53:08][350635583019855][4798 ms][DEBUG] proc_open done in 4451 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-26 04:53:08][350635583019855][4798 ms][DEBUG] END runCmdUntilRes#1 in 4451 ms [2025-08-26 04:53:08][350635583019855][4798 ms][WARN] Detected error: Process with pid 9992 either refused to load frida-agent, or terminated during injection [2025-08-26 04:53:08][350635583019855][4798 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 04:53:08][350635583019855][4938 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 04:53:08][350635583019855][4938 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 04:53:08][350635583019855][4938 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 04:53:08][350635583019855][5063 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 04:53:08][350635583019855][5064 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 04:53:08][350635583019855][5267 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 04:53:10][350635583019855][7281 ms][DEBUG] START check_boot_completed [2025-08-26 04:53:10][350635583019855][7282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 04:53:10][350635583019855][7329 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 04:53:10][350635583019855][7329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 04:53:11][350635583019855][7375 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 04:53:11][350635583019855][7375 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 04:53:14][350635583019855][10390 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 04:53:14][350635583019855][10390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350635583019855\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8321\"}'\'' -e'"" [2025-08-26 04:53:17][350635583019855][14155 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f2e30591-b292-4660-8120-5df751bafc7a","id":"QR_f2e30591-b292-4660-8120-5df751bafc7a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 04:53:17][350635583019855][14311 ms][DEBUG] proc_open done in 3921 ms; code=255; res.len=3343 [2025-08-26 04:53:17][350635583019855][14311 ms][DEBUG] END runCmdUntilRes#2 in 3921 ms [2025-08-26 04:53:17][350635583019855][14311 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 04:58:04][353948920640813][1 ms][INFO] === Request start === [2025-08-26 04:58:04][353948920640813][1 ms][DEBUG] START check_scloud [2025-08-26 04:58:04][353948920640813][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 04:58:04][353948920640813][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 19838 5017 23501536 128124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 04:58:04][353948920640813][311 ms][DEBUG] targetPkg: running [2025-08-26 04:58:04][353948920640813][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 04:58:04][353948920640813][311 ms][DEBUG] START check_boot_completed [2025-08-26 04:58:04][353948920640813][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 04:58:04][353948920640813][342 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 04:58:04][353948920640813][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 04:58:04][353948920640813][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 04:58:04][353948920640813][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 04:58:04][353948920640813][389 ms][DEBUG] START check_internet [2025-08-26 04:58:04][353948920640813][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 04:58:04][353948920640813][779 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.618/202.618/202.618/0.000 ms\n [2025-08-26 04:58:04][353948920640813][780 ms][DEBUG] check_internet: online [2025-08-26 04:58:04][353948920640813][780 ms][DEBUG] END check_internet in 391 ms [2025-08-26 04:58:04][353948920640813][780 ms][DEBUG] rawBody.length=1149 [2025-08-26 04:58:04][353948920640813][780 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353948920640813\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2493\"}'\'' -e'"" [2025-08-26 04:58:04][353948920640813][780 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 04:58:04][353948920640813][780 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353948920640813\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2493\"}'\'' -e'"" [2025-08-26 04:58:09][353948920640813][5716 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_79d6eb34-a600-4e61-a53c-6e1e6e8201b7","id":"QR_79d6eb34-a600-4e61-a53c-6e1e6e8201b7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 04:58:09][353948920640813][5872 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-08-26 04:58:09][353948920640813][5872 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-08-26 04:58:09][353948920640813][5872 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 04:58:15][357714710925103][0 ms][INFO] === Request start === [2025-08-26 04:58:15][357714710925103][1 ms][DEBUG] START check_scloud [2025-08-26 04:58:15][357714710925103][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 04:58:15][357714710925103][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 19838 5017 23644008 138808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 04:58:15][357714710925103][319 ms][DEBUG] targetPkg: running [2025-08-26 04:58:15][357714710925103][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-26 04:58:15][357714710925103][319 ms][DEBUG] START check_boot_completed [2025-08-26 04:58:15][357714710925103][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 04:58:15][357714710925103][366 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 04:58:15][357714710925103][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 04:58:15][357714710925103][428 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 04:58:15][357714710925103][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 04:58:15][357714710925103][428 ms][DEBUG] START check_internet [2025-08-26 04:58:15][357714710925103][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 04:58:16][357714710925103][740 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=184 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 184.836/184.836/184.836/0.000 ms\n [2025-08-26 04:58:16][357714710925103][741 ms][DEBUG] check_internet: online [2025-08-26 04:58:16][357714710925103][741 ms][DEBUG] END check_internet in 312 ms [2025-08-26 04:58:16][357714710925103][741 ms][DEBUG] rawBody.length=1149 [2025-08-26 04:58:16][357714710925103][741 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357714710925103\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3133\"}'\'' -e'"" [2025-08-26 04:58:16][357714710925103][741 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 04:58:16][357714710925103][741 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357714710925103\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3133\"}'\'' -e'"" [2025-08-26 04:58:20][357714710925103][5677 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_725504ef-b051-4bfd-9173-b11b5b2f84c4","id":"QR_725504ef-b051-4bfd-9173-b11b5b2f84c4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 04:58:21][357714710925103][5833 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-08-26 04:58:21][357714710925103][5833 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-08-26 04:58:21][357714710925103][5833 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 04:58:25][355322298946988][0 ms][INFO] === Request start === [2025-08-26 04:58:25][355322298946988][1 ms][DEBUG] START check_scloud [2025-08-26 04:58:25][355322298946988][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 04:58:25][355322298946988][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 19838 5017 23754692 150368 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 04:58:25][355322298946988][329 ms][DEBUG] targetPkg: running [2025-08-26 04:58:25][355322298946988][329 ms][DEBUG] END check_scloud in 329 ms [2025-08-26 04:58:25][355322298946988][329 ms][DEBUG] START check_boot_completed [2025-08-26 04:58:25][355322298946988][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 04:58:25][355322298946988][375 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 04:58:25][355322298946988][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 04:58:25][355322298946988][422 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 04:58:25][355322298946988][422 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-26 04:58:25][355322298946988][422 ms][DEBUG] START check_internet [2025-08-26 04:58:25][355322298946988][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 04:58:25][355322298946988][734 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=193 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 193.984/193.984/193.984/0.000 ms\n [2025-08-26 04:58:25][355322298946988][734 ms][DEBUG] check_internet: online [2025-08-26 04:58:25][355322298946988][734 ms][DEBUG] END check_internet in 313 ms [2025-08-26 04:58:25][355322298946988][734 ms][DEBUG] rawBody.length=1148 [2025-08-26 04:58:25][355322298946988][735 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355322298946988\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2023\"}'\'' -e'"" [2025-08-26 04:58:25][355322298946988][735 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 04:58:25][355322298946988][735 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355322298946988\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2023\"}'\'' -e'"" [2025-08-26 04:58:29][355322298946988][4593 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a1cc4bf2-01c1-48cc-9ac4-6195e5f2a68e","id":"QR_a1cc4bf2-01c1-48cc-9ac4-6195e5f2a68e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 04:58:29][355322298946988][4749 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-26 04:58:29][355322298946988][4749 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-26 04:58:29][355322298946988][4749 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 04:59:02][355358711786601][0 ms][INFO] === Request start === [2025-08-26 04:59:02][355358711786601][1 ms][DEBUG] START check_scloud [2025-08-26 04:59:02][355358711786601][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 04:59:02][355358711786601][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 19838 5017 23903236 161488 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 04:59:02][355358711786601][309 ms][DEBUG] targetPkg: running [2025-08-26 04:59:02][355358711786601][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 04:59:02][355358711786601][309 ms][DEBUG] START check_boot_completed [2025-08-26 04:59:02][355358711786601][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 04:59:02][355358711786601][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 04:59:02][355358711786601][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 04:59:02][355358711786601][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 04:59:02][355358711786601][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 04:59:02][355358711786601][418 ms][DEBUG] rawBody.length=1148 [2025-08-26 04:59:02][355358711786601][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355358711786601\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8125\"}'\'' -e'"" [2025-08-26 04:59:02][355358711786601][418 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 04:59:02][355358711786601][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355358711786601\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8125\"}'\'' -e'"" [2025-08-26 04:59:06][355358711786601][4261 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cba9c78c-e273-4da1-ab7d-d4e9189d9aba","id":"QR_cba9c78c-e273-4da1-ab7d-d4e9189d9aba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 04:59:06][355358711786601][4417 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=3343 [2025-08-26 04:59:06][355358711786601][4417 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-26 04:59:06][355358711786601][4417 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 04:59:09][356019743618100][0 ms][INFO] === Request start === [2025-08-26 04:59:09][356019743618100][1 ms][DEBUG] START check_scloud [2025-08-26 04:59:09][356019743618100][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 04:59:09][356019743618100][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 19838 5017 24037516 172408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 04:59:09][356019743618100][302 ms][DEBUG] targetPkg: running [2025-08-26 04:59:09][356019743618100][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-26 04:59:09][356019743618100][302 ms][DEBUG] START check_boot_completed [2025-08-26 04:59:09][356019743618100][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 04:59:09][356019743618100][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 04:59:09][356019743618100][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 04:59:09][356019743618100][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 04:59:09][356019743618100][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 04:59:09][356019743618100][395 ms][DEBUG] rawBody.length=1148 [2025-08-26 04:59:09][356019743618100][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019743618100\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ECT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2162\"}'\'' -e'"" [2025-08-26 04:59:09][356019743618100][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 04:59:09][356019743618100][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019743618100\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ECT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2162\"}'\'' -e'"" [2025-08-26 04:59:14][356019743618100][4956 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2e86012c-9500-4c52-8b75-7bc2d300a8d6","id":"QR_2e86012c-9500-4c52-8b75-7bc2d300a8d6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 04:59:14][356019743618100][5113 ms][DEBUG] proc_open done in 4717 ms; code=255; res.len=3343 [2025-08-26 04:59:14][356019743618100][5113 ms][DEBUG] END runCmdUntilRes#1 in 4718 ms [2025-08-26 04:59:14][356019743618100][5113 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 04:59:15][352350271919881][0 ms][INFO] === Request start === [2025-08-26 04:59:15][352350271919881][1 ms][DEBUG] START check_scloud [2025-08-26 04:59:15][352350271919881][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 04:59:16][352350271919881][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 19838 5017 24208788 181524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 04:59:16][352350271919881][303 ms][DEBUG] targetPkg: running [2025-08-26 04:59:16][352350271919881][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 04:59:16][352350271919881][303 ms][DEBUG] START check_boot_completed [2025-08-26 04:59:16][352350271919881][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 04:59:16][352350271919881][348 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 04:59:16][352350271919881][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 04:59:16][352350271919881][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 04:59:16][352350271919881][395 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-26 04:59:16][352350271919881][395 ms][DEBUG] rawBody.length=1148 [2025-08-26 04:59:16][352350271919881][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350271919881\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1467\"}'\'' -e'"" [2025-08-26 04:59:16][352350271919881][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 04:59:16][352350271919881][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350271919881\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1467\"}'\'' -e'"" [2025-08-26 04:59:19][352350271919881][3628 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 04:59:19][352350271919881][3785 ms][DEBUG] proc_open done in 3390 ms; code=255; res.len=107 [2025-08-26 04:59:19][352350271919881][3785 ms][DEBUG] END runCmdUntilRes#1 in 3390 ms [2025-08-26 04:59:19][352350271919881][3785 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 04:59:19][][0 ms][INFO] === Request start === [2025-08-26 04:59:19][][1 ms][DEBUG] START check_scloud [2025-08-26 04:59:19][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 04:59:20][][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 19838 5017 24361628 187112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 04:59:20][][328 ms][DEBUG] targetPkg: running [2025-08-26 04:59:20][][328 ms][DEBUG] END check_scloud in 327 ms [2025-08-26 04:59:20][][328 ms][DEBUG] START check_boot_completed [2025-08-26 04:59:20][][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 04:59:20][][375 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 04:59:20][][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 04:59:20][][437 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 04:59:20][][437 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 04:59:20][][437 ms][DEBUG] rawBody.length=1129 [2025-08-26 04:59:20][][437 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW6103V1A\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7801\"}'\'' -e'"" [2025-08-26 04:59:20][][437 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 04:59:20][][437 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW6103V1A\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7801\"}'\'' -e'"" [2025-08-26 04:59:23][][3733 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 04:59:23][][3889 ms][DEBUG] proc_open done in 3452 ms; code=255; res.len=107 [2025-08-26 04:59:23][][3889 ms][DEBUG] END runCmdUntilRes#1 in 3452 ms [2025-08-26 04:59:23][][3889 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 04:59:24][355928817344289][0 ms][INFO] === Request start === [2025-08-26 04:59:24][355928817344289][1 ms][DEBUG] START check_scloud [2025-08-26 04:59:24][355928817344289][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 04:59:24][355928817344289][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 19838 5017 24526720 194280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 04:59:24][355928817344289][312 ms][DEBUG] targetPkg: running [2025-08-26 04:59:24][355928817344289][312 ms][DEBUG] END check_scloud in 312 ms [2025-08-26 04:59:24][355928817344289][312 ms][DEBUG] START check_boot_completed [2025-08-26 04:59:24][355928817344289][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 04:59:24][355928817344289][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 04:59:24][355928817344289][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 04:59:24][355928817344289][422 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 04:59:24][355928817344289][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 04:59:24][355928817344289][422 ms][DEBUG] rawBody.length=1148 [2025-08-26 04:59:24][355928817344289][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355928817344289\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9990\"}'\'' -e'"" [2025-08-26 04:59:24][355928817344289][422 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 04:59:24][355928817344289][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355928817344289\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9990\"}'\'' -e'"" [2025-08-26 04:59:28][355928817344289][3952 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_873aff57-31a4-45e6-991c-f5030d8895dc","id":"QR_873aff57-31a4-45e6-991c-f5030d8895dc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 04:59:28][355928817344289][4108 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=3343 [2025-08-26 04:59:28][355928817344289][4108 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-08-26 04:59:28][355928817344289][4108 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 05:16:05][353358140280780][1 ms][INFO] === Request start === [2025-08-26 05:16:05][353358140280780][1 ms][DEBUG] START check_scloud [2025-08-26 05:16:05][353358140280780][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 05:16:05][353358140280780][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 19838 5017 24604588 202092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 05:16:05][353358140280780][302 ms][DEBUG] targetPkg: running [2025-08-26 05:16:05][353358140280780][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-26 05:16:05][353358140280780][302 ms][DEBUG] START check_boot_completed [2025-08-26 05:16:05][353358140280780][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 05:16:05][353358140280780][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 05:16:05][353358140280780][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 05:16:05][353358140280780][380 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 05:16:05][353358140280780][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 05:16:05][353358140280780][380 ms][DEBUG] START check_internet [2025-08-26 05:16:05][353358140280780][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 05:16:06][353358140280780][788 ms][DEBUG] SU: done in 407 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.430/202.430/202.430/0.000 ms\n [2025-08-26 05:16:06][353358140280780][788 ms][DEBUG] check_internet: online [2025-08-26 05:16:06][353358140280780][788 ms][DEBUG] END check_internet in 407 ms [2025-08-26 05:16:06][353358140280780][788 ms][DEBUG] rawBody.length=1149 [2025-08-26 05:16:06][353358140280780][788 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353358140280780\",\"model\":\"SM-G781B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6333\"}'\'' -e'"" [2025-08-26 05:16:06][353358140280780][788 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 05:16:06][353358140280780][788 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353358140280780\",\"model\":\"SM-G781B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6333\"}'\'' -e'"" [2025-08-26 05:16:11][353358140280780][5785 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_28b0f640-9fea-406e-81ca-53d2fb2bddfc","id":"QR_28b0f640-9fea-406e-81ca-53d2fb2bddfc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 05:16:11][353358140280780][5942 ms][DEBUG] proc_open done in 5153 ms; code=255; res.len=3343 [2025-08-26 05:16:11][353358140280780][5942 ms][DEBUG] END runCmdUntilRes#1 in 5153 ms [2025-08-26 05:16:11][353358140280780][5942 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 05:17:07][350226696279964][0 ms][INFO] === Request start === [2025-08-26 05:17:07][350226696279964][1 ms][DEBUG] START check_scloud [2025-08-26 05:17:07][350226696279964][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 05:17:08][350226696279964][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 19838 5017 24761504 208672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 05:17:08][350226696279964][307 ms][DEBUG] targetPkg: running [2025-08-26 05:17:08][350226696279964][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 05:17:08][350226696279964][307 ms][DEBUG] START check_boot_completed [2025-08-26 05:17:08][350226696279964][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 05:17:08][350226696279964][338 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 05:17:08][350226696279964][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 05:17:08][350226696279964][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 05:17:08][350226696279964][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 05:17:08][350226696279964][385 ms][DEBUG] rawBody.length=1149 [2025-08-26 05:17:08][350226696279964][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226696279964\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4673\"}'\'' -e'"" [2025-08-26 05:17:08][350226696279964][385 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 05:17:08][350226696279964][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350226696279964\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4673\"}'\'' -e'"" [2025-08-26 05:17:13][350226696279964][5711 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e5fd005-614f-448f-9415-de53c1825647","id":"QR_9e5fd005-614f-448f-9415-de53c1825647","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 05:17:13][350226696279964][5867 ms][DEBUG] proc_open done in 5482 ms; code=255; res.len=3343 [2025-08-26 05:17:13][350226696279964][5868 ms][DEBUG] END runCmdUntilRes#1 in 5483 ms [2025-08-26 05:17:13][350226696279964][5868 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 05:17:18][359122726416844][0 ms][INFO] === Request start === [2025-08-26 05:17:18][359122726416844][1 ms][DEBUG] START check_scloud [2025-08-26 05:17:18][359122726416844][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 05:17:18][359122726416844][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 19838 5017 24908008 219348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 05:17:18][359122726416844][303 ms][DEBUG] targetPkg: running [2025-08-26 05:17:18][359122726416844][303 ms][DEBUG] END check_scloud in 303 ms [2025-08-26 05:17:18][359122726416844][303 ms][DEBUG] START check_boot_completed [2025-08-26 05:17:18][359122726416844][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 05:17:19][359122726416844][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 05:17:19][359122726416844][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 05:17:19][359122726416844][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 05:17:19][359122726416844][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 05:17:19][359122726416844][381 ms][DEBUG] rawBody.length=1148 [2025-08-26 05:17:19][359122726416844][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359122726416844\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9239\"}'\'' -e'"" [2025-08-26 05:17:19][359122726416844][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 05:17:19][359122726416844][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359122726416844\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9239\"}'\'' -e'"" [2025-08-26 05:17:23][359122726416844][4318 ms][DEBUG] proc_open done in 3936 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 05:17:23][359122726416844][4318 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-26 05:17:23][359122726416844][4318 ms][WARN] Detected error: Process with pid 19838 either refused to load frida-agent, or terminated during injection [2025-08-26 05:17:23][359122726416844][4318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 05:17:23][359122726416844][4443 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 05:17:23][359122726416844][4443 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 05:17:23][359122726416844][4443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 05:17:23][359122726416844][4568 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 05:17:23][359122726416844][4568 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 05:17:23][359122726416844][4756 ms][DEBUG] SU: done in 188 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 05:17:25][359122726416844][6770 ms][DEBUG] START check_boot_completed [2025-08-26 05:17:25][359122726416844][6771 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 05:17:25][359122726416844][6817 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 05:17:25][359122726416844][6817 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 05:17:25][359122726416844][6864 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 05:17:25][359122726416844][6865 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 05:17:28][359122726416844][9879 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 05:17:28][359122726416844][9879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359122726416844\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9239\"}'\'' -e'"" [2025-08-26 05:17:32][359122726416844][13863 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_79583b8a-0f4a-4a44-9095-74617718f6d4","id":"QR_79583b8a-0f4a-4a44-9095-74617718f6d4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 05:17:32][359122726416844][14019 ms][DEBUG] proc_open done in 4140 ms; code=255; res.len=3343 [2025-08-26 05:17:32][359122726416844][14019 ms][DEBUG] END runCmdUntilRes#2 in 4140 ms [2025-08-26 05:17:32][359122726416844][14019 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 05:20:03][352682500454979][1 ms][INFO] === Request start === [2025-08-26 05:20:03][352682500454979][1 ms][DEBUG] START check_scloud [2025-08-26 05:20:03][352682500454979][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 05:20:03][352682500454979][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 22290 5017 23493412 127740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 05:20:03][352682500454979][318 ms][DEBUG] targetPkg: running [2025-08-26 05:20:03][352682500454979][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-26 05:20:03][352682500454979][318 ms][DEBUG] START check_boot_completed [2025-08-26 05:20:03][352682500454979][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 05:20:03][352682500454979][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 05:20:03][352682500454979][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 05:20:03][352682500454979][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 05:20:03][352682500454979][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 05:20:03][352682500454979][411 ms][DEBUG] START check_internet [2025-08-26 05:20:03][352682500454979][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 05:20:04][352682500454979][896 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.384/201.384/201.384/0.000 ms\n [2025-08-26 05:20:04][352682500454979][896 ms][DEBUG] check_internet: online [2025-08-26 05:20:04][352682500454979][896 ms][DEBUG] END check_internet in 485 ms [2025-08-26 05:20:04][352682500454979][896 ms][DEBUG] rawBody.length=1148 [2025-08-26 05:20:04][352682500454979][896 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682500454979\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9683\"}'\'' -e'"" [2025-08-26 05:20:04][352682500454979][896 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 05:20:04][352682500454979][896 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682500454979\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9683\"}'\'' -e'"" [2025-08-26 05:20:08][352682500454979][5020 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_71fc5f0d-3f1f-45b5-9e25-24636ad146f6","id":"QR_71fc5f0d-3f1f-45b5-9e25-24636ad146f6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 05:20:08][352682500454979][5176 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-26 05:20:08][352682500454979][5176 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-26 05:20:08][352682500454979][5176 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 05:24:03][357582387368786][1 ms][INFO] === Request start === [2025-08-26 05:24:03][357582387368786][1 ms][DEBUG] START check_scloud [2025-08-26 05:24:03][357582387368786][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 05:24:03][357582387368786][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 22290 5017 23613320 139204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 05:24:03][357582387368786][295 ms][DEBUG] targetPkg: running [2025-08-26 05:24:03][357582387368786][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-26 05:24:03][357582387368786][295 ms][DEBUG] START check_boot_completed [2025-08-26 05:24:03][357582387368786][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 05:24:03][357582387368786][326 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 05:24:03][357582387368786][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 05:24:04][357582387368786][389 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 05:24:04][357582387368786][389 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 05:24:04][357582387368786][389 ms][DEBUG] START check_internet [2025-08-26 05:24:04][357582387368786][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 05:24:04][357582387368786][873 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.108/199.108/199.108/0.000 ms\n [2025-08-26 05:24:04][357582387368786][873 ms][DEBUG] check_internet: online [2025-08-26 05:24:04][357582387368786][873 ms][DEBUG] END check_internet in 484 ms [2025-08-26 05:24:04][357582387368786][873 ms][DEBUG] rawBody.length=1148 [2025-08-26 05:24:04][357582387368786][873 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357582387368786\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1473\"}'\'' -e'"" [2025-08-26 05:24:04][357582387368786][873 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 05:24:04][357582387368786][873 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357582387368786\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1473\"}'\'' -e'"" [2025-08-26 05:24:08][357582387368786][5106 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a4bde69-1659-47c4-95f2-a4089f81cabc","id":"QR_1a4bde69-1659-47c4-95f2-a4089f81cabc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 05:24:08][357582387368786][5263 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-26 05:24:08][357582387368786][5263 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-26 05:24:08][357582387368786][5263 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 05:24:11][352053268194233][0 ms][INFO] === Request start === [2025-08-26 05:24:11][352053268194233][1 ms][DEBUG] START check_scloud [2025-08-26 05:24:11][352053268194233][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 05:24:11][352053268194233][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 22290 5017 23745360 150660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 05:24:11][352053268194233][303 ms][DEBUG] targetPkg: running [2025-08-26 05:24:11][352053268194233][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 05:24:11][352053268194233][303 ms][DEBUG] START check_boot_completed [2025-08-26 05:24:11][352053268194233][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 05:24:11][352053268194233][348 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 05:24:11][352053268194233][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 05:24:11][352053268194233][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 05:24:11][352053268194233][395 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-26 05:24:11][352053268194233][395 ms][DEBUG] START check_internet [2025-08-26 05:24:11][352053268194233][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 05:24:11][352053268194233][661 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=158 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 158.690/158.690/158.690/0.000 ms\n [2025-08-26 05:24:11][352053268194233][661 ms][DEBUG] check_internet: online [2025-08-26 05:24:11][352053268194233][661 ms][DEBUG] END check_internet in 265 ms [2025-08-26 05:24:11][352053268194233][661 ms][DEBUG] rawBody.length=1148 [2025-08-26 05:24:11][352053268194233][661 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053268194233\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5247\"}'\'' -e'"" [2025-08-26 05:24:11][352053268194233][661 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 05:24:11][352053268194233][661 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053268194233\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5247\"}'\'' -e'"" [2025-08-26 05:24:15][352053268194233][4300 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c4b50ff2-e70d-466b-8d3c-c80d946d7497","id":"QR_c4b50ff2-e70d-466b-8d3c-c80d946d7497","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 05:24:15][352053268194233][4457 ms][DEBUG] proc_open done in 3796 ms; code=255; res.len=3343 [2025-08-26 05:24:15][352053268194233][4457 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-26 05:24:15][352053268194233][4457 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 05:25:03][353684140671748][0 ms][INFO] === Request start === [2025-08-26 05:25:03][353684140671748][1 ms][DEBUG] START check_scloud [2025-08-26 05:25:03][353684140671748][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 05:25:03][353684140671748][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 22290 5017 23856264 161384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 05:25:03][353684140671748][315 ms][DEBUG] targetPkg: running [2025-08-26 05:25:03][353684140671748][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-26 05:25:03][353684140671748][316 ms][DEBUG] START check_boot_completed [2025-08-26 05:25:03][353684140671748][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 05:25:03][353684140671748][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 05:25:03][353684140671748][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 05:25:04][353684140671748][425 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 05:25:04][353684140671748][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 05:25:04][353684140671748][425 ms][DEBUG] rawBody.length=1148 [2025-08-26 05:25:04][353684140671748][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684140671748\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2321\"}'\'' -e'"" [2025-08-26 05:25:04][353684140671748][425 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 05:25:04][353684140671748][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684140671748\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2321\"}'\'' -e'"" [2025-08-26 05:25:07][353684140671748][4017 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_11503d53-da14-4825-a108-fbc7326418ce","id":"QR_11503d53-da14-4825-a108-fbc7326418ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 05:25:07][353684140671748][4174 ms][DEBUG] proc_open done in 3748 ms; code=255; res.len=3343 [2025-08-26 05:25:07][353684140671748][4174 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-08-26 05:25:07][353684140671748][4174 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 05:34:05][352349697862022][1 ms][INFO] === Request start === [2025-08-26 05:34:05][352349697862022][1 ms][DEBUG] START check_scloud [2025-08-26 05:34:05][352349697862022][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 05:34:05][352349697862022][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 22290 5017 23970080 172904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 05:34:05][352349697862022][298 ms][DEBUG] targetPkg: running [2025-08-26 05:34:05][352349697862022][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-26 05:34:05][352349697862022][298 ms][DEBUG] START check_boot_completed [2025-08-26 05:34:05][352349697862022][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 05:34:05][352349697862022][329 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 05:34:05][352349697862022][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 05:34:05][352349697862022][392 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 05:34:05][352349697862022][392 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 05:34:05][352349697862022][392 ms][DEBUG] START check_internet [2025-08-26 05:34:05][352349697862022][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 05:34:06][352349697862022][891 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.835/200.835/200.835/0.000 ms\n [2025-08-26 05:34:06][352349697862022][892 ms][DEBUG] check_internet: online [2025-08-26 05:34:06][352349697862022][892 ms][DEBUG] END check_internet in 500 ms [2025-08-26 05:34:06][352349697862022][892 ms][DEBUG] rawBody.length=1149 [2025-08-26 05:34:06][352349697862022][892 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349697862022\",\"model\":\"SM-G781W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1550\"}'\'' -e'"" [2025-08-26 05:34:06][352349697862022][892 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 05:34:06][352349697862022][892 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349697862022\",\"model\":\"SM-G781W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1550\"}'\'' -e'"" [2025-08-26 05:34:11][352349697862022][5796 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e7c93c0e-8895-46f9-bf1e-731df7ee5b62","id":"QR_e7c93c0e-8895-46f9-bf1e-731df7ee5b62","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 05:34:11][352349697862022][5953 ms][DEBUG] proc_open done in 5060 ms; code=255; res.len=3343 [2025-08-26 05:34:11][352349697862022][5953 ms][DEBUG] END runCmdUntilRes#1 in 5061 ms [2025-08-26 05:34:11][352349697862022][5953 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 05:52:04][350256487151015][1 ms][INFO] === Request start === [2025-08-26 05:52:04][350256487151015][1 ms][DEBUG] START check_scloud [2025-08-26 05:52:04][350256487151015][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 05:52:04][350256487151015][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 22290 5017 24108548 184064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 05:52:04][350256487151015][307 ms][DEBUG] targetPkg: running [2025-08-26 05:52:04][350256487151015][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 05:52:04][350256487151015][307 ms][DEBUG] START check_boot_completed [2025-08-26 05:52:04][350256487151015][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 05:52:04][350256487151015][337 ms][DEBUG] ADB: done in 30 ms; out [2025-08-26 05:52:04][350256487151015][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 05:52:04][350256487151015][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 05:52:04][350256487151015][384 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-26 05:52:04][350256487151015][384 ms][DEBUG] START check_internet [2025-08-26 05:52:04][350256487151015][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 05:52:05][350256487151015][884 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.608/202.608/202.608/0.000 ms\n [2025-08-26 05:52:05][350256487151015][884 ms][DEBUG] check_internet: online [2025-08-26 05:52:05][350256487151015][884 ms][DEBUG] END check_internet in 500 ms [2025-08-26 05:52:05][350256487151015][884 ms][DEBUG] rawBody.length=1149 [2025-08-26 05:52:05][350256487151015][884 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350256487151015\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5410\"}'\'' -e'"" [2025-08-26 05:52:05][350256487151015][884 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 05:52:05][350256487151015][884 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350256487151015\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5410\"}'\'' -e'"" [2025-08-26 05:52:10][350256487151015][5851 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e375c7e9-3738-4caa-b4f3-b550b98abf05","id":"QR_e375c7e9-3738-4caa-b4f3-b550b98abf05","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 05:52:10][350256487151015][6007 ms][DEBUG] proc_open done in 5123 ms; code=255; res.len=3343 [2025-08-26 05:52:10][350256487151015][6007 ms][DEBUG] END runCmdUntilRes#1 in 5123 ms [2025-08-26 05:52:10][350256487151015][6007 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 06:00:04][352277222443101][1 ms][INFO] === Request start === [2025-08-26 06:00:04][352277222443101][1 ms][DEBUG] START check_scloud [2025-08-26 06:00:04][352277222443101][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 06:00:04][352277222443101][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 22290 5017 24228072 196676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 06:00:04][352277222443101][297 ms][DEBUG] targetPkg: running [2025-08-26 06:00:04][352277222443101][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-26 06:00:04][352277222443101][297 ms][DEBUG] START check_boot_completed [2025-08-26 06:00:04][352277222443101][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 06:00:04][352277222443101][326 ms][DEBUG] ADB: done in 29 ms; out [2025-08-26 06:00:04][352277222443101][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 06:00:04][352277222443101][373 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 06:00:04][352277222443101][373 ms][DEBUG] END check_boot_completed in 76 ms [2025-08-26 06:00:04][352277222443101][373 ms][DEBUG] START check_internet [2025-08-26 06:00:04][352277222443101][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 06:00:05][352277222443101][780 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.357/201.357/201.357/0.000 ms\n [2025-08-26 06:00:05][352277222443101][780 ms][DEBUG] check_internet: online [2025-08-26 06:00:05][352277222443101][780 ms][DEBUG] END check_internet in 406 ms [2025-08-26 06:00:05][352277222443101][780 ms][DEBUG] rawBody.length=1148 [2025-08-26 06:00:05][352277222443101][780 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352277222443101\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5393\"}'\'' -e'"" [2025-08-26 06:00:05][352277222443101][780 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 06:00:05][352277222443101][780 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352277222443101\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5393\"}'\'' -e'"" [2025-08-26 06:00:08][352277222443101][4388 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-26 06:00:08][352277222443101][4544 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=115 [2025-08-26 06:00:08][352277222443101][4544 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-08-26 06:00:08][352277222443101][4544 ms][INFO] SUCCESS response from frida (len=115) [2025-08-26 06:00:09][][0 ms][INFO] === Request start === [2025-08-26 06:00:09][][1 ms][DEBUG] START check_scloud [2025-08-26 06:00:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 06:00:09][][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 22290 5017 24413748 207048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 06:00:09][][317 ms][DEBUG] targetPkg: running [2025-08-26 06:00:09][][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-26 06:00:09][][317 ms][DEBUG] START check_boot_completed [2025-08-26 06:00:09][][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 06:00:09][][363 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 06:00:09][][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 06:00:09][][410 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 06:00:09][][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 06:00:09][][410 ms][DEBUG] START check_internet [2025-08-26 06:00:09][][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 06:00:09][][629 ms][DEBUG] SU: done in 219 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=114 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 114.803/114.803/114.803/0.000 ms\n [2025-08-26 06:00:09][][629 ms][DEBUG] check_internet: online [2025-08-26 06:00:09][][629 ms][DEBUG] END check_internet in 219 ms [2025-08-26 06:00:09][][629 ms][DEBUG] rawBody.length=1129 [2025-08-26 06:00:09][][629 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T20MRLYW\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9492\"}'\'' -e'"" [2025-08-26 06:00:09][][629 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 06:00:09][][629 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T20MRLYW\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9492\"}'\'' -e'"" [2025-08-26 06:00:13][][4003 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 06:00:13][][4159 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=107 [2025-08-26 06:00:13][][4159 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-08-26 06:00:13][][4159 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 06:00:15][352277222443101][0 ms][INFO] === Request start === [2025-08-26 06:00:15][352277222443101][1 ms][DEBUG] START check_scloud [2025-08-26 06:00:15][352277222443101][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 06:00:15][352277222443101][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 22290 5017 24576828 218860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 06:00:15][352277222443101][271 ms][DEBUG] targetPkg: running [2025-08-26 06:00:15][352277222443101][271 ms][DEBUG] END check_scloud in 270 ms [2025-08-26 06:00:15][352277222443101][271 ms][DEBUG] START check_boot_completed [2025-08-26 06:00:15][352277222443101][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 06:00:15][352277222443101][318 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 06:00:15][352277222443101][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 06:00:15][352277222443101][365 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 06:00:15][352277222443101][365 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 06:00:15][352277222443101][365 ms][DEBUG] START check_internet [2025-08-26 06:00:15][352277222443101][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 06:00:16][352277222443101][692 ms][DEBUG] SU: done in 327 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=210 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 210.982/210.982/210.982/0.000 ms\n [2025-08-26 06:00:16][352277222443101][693 ms][DEBUG] check_internet: online [2025-08-26 06:00:16][352277222443101][693 ms][DEBUG] END check_internet in 327 ms [2025-08-26 06:00:16][352277222443101][693 ms][DEBUG] rawBody.length=1149 [2025-08-26 06:00:16][352277222443101][693 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352277222443101\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9949\"}'\'' -e'"" [2025-08-26 06:00:16][352277222443101][693 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 06:00:16][352277222443101][693 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352277222443101\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9949\"}'\'' -e'"" [2025-08-26 06:00:21][352277222443101][6050 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8af20b8f-9e2f-4f29-b045-2968c6a10cfc","id":"QR_8af20b8f-9e2f-4f29-b045-2968c6a10cfc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 06:00:21][352277222443101][6207 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-08-26 06:00:21][352277222443101][6207 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-26 06:00:21][352277222443101][6207 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 06:01:03][351877470761129][0 ms][INFO] === Request start === [2025-08-26 06:01:03][351877470761129][1 ms][DEBUG] START check_scloud [2025-08-26 06:01:03][351877470761129][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 06:01:03][351877470761129][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 22290 5017 24700888 230184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 06:01:03][351877470761129][320 ms][DEBUG] targetPkg: running [2025-08-26 06:01:03][351877470761129][320 ms][DEBUG] END check_scloud in 320 ms [2025-08-26 06:01:03][351877470761129][320 ms][DEBUG] START check_boot_completed [2025-08-26 06:01:03][351877470761129][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 06:01:03][351877470761129][351 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 06:01:03][351877470761129][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 06:01:03][351877470761129][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 06:01:03][351877470761129][398 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 06:01:03][351877470761129][398 ms][DEBUG] rawBody.length=1148 [2025-08-26 06:01:03][351877470761129][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877470761129\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1434\"}'\'' -e'"" [2025-08-26 06:01:03][351877470761129][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 06:01:03][351877470761129][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877470761129\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1434\"}'\'' -e'"" [2025-08-26 06:01:07][351877470761129][4132 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c15dda00-c6ec-4aad-8a7e-505e3fd93633","id":"QR_c15dda00-c6ec-4aad-8a7e-505e3fd93633","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 06:01:07][351877470761129][4288 ms][DEBUG] proc_open done in 3890 ms; code=255; res.len=3343 [2025-08-26 06:01:07][351877470761129][4288 ms][DEBUG] END runCmdUntilRes#1 in 3890 ms [2025-08-26 06:01:07][351877470761129][4288 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 06:01:10][352469853500354][1 ms][INFO] === Request start === [2025-08-26 06:01:10][352469853500354][1 ms][DEBUG] START check_scloud [2025-08-26 06:01:10][352469853500354][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 06:01:10][352469853500354][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 22290 5017 24855588 240992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 06:01:10][352469853500354][317 ms][DEBUG] targetPkg: running [2025-08-26 06:01:10][352469853500354][317 ms][DEBUG] END check_scloud in 317 ms [2025-08-26 06:01:10][352469853500354][317 ms][DEBUG] START check_boot_completed [2025-08-26 06:01:10][352469853500354][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 06:01:10][352469853500354][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 06:01:10][352469853500354][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 06:01:10][352469853500354][427 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 06:01:10][352469853500354][427 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 06:01:10][352469853500354][427 ms][DEBUG] rawBody.length=1148 [2025-08-26 06:01:10][352469853500354][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469853500354\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5290\"}'\'' -e'"" [2025-08-26 06:01:10][352469853500354][427 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 06:01:10][352469853500354][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469853500354\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5290\"}'\'' -e'"" [2025-08-26 06:01:18][352469853500354][8284 ms][DEBUG] proc_open done in 7857 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 06:01:18][352469853500354][8284 ms][DEBUG] END runCmdUntilRes#1 in 7857 ms [2025-08-26 06:01:18][352469853500354][8284 ms][WARN] Detected error: Process with pid 22290 either refused to load frida-agent, or terminated during injection [2025-08-26 06:01:18][352469853500354][8285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 06:01:18][352469853500354][8456 ms][DEBUG] SU: done in 171 ms; out [2025-08-26 06:01:18][352469853500354][8456 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 06:01:18][352469853500354][8456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 06:01:19][352469853500354][9018 ms][DEBUG] SU: done in 562 ms; out [2025-08-26 06:01:19][352469853500354][9018 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 06:01:19][352469853500354][9315 ms][DEBUG] SU: done in 297 ms; out [2025-08-26 06:01:21][352469853500354][11330 ms][DEBUG] START check_boot_completed [2025-08-26 06:01:21][352469853500354][11330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 06:01:21][352469853500354][11377 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 06:01:21][352469853500354][11377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 06:01:21][352469853500354][11424 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 06:01:21][352469853500354][11424 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 06:01:24][352469853500354][14439 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 06:01:24][352469853500354][14439 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469853500354\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5290\"}'\'' -e'"" [2025-08-26 06:01:26][352469853500354][15814 ms][DEBUG] proc_open done in 1375 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-26 06:01:26][352469853500354][15814 ms][DEBUG] END runCmdUntilRes#2 in 1375 ms [2025-08-26 06:01:26][352469853500354][15814 ms][WARN] Detected error 2; Reboot the device [2025-08-26 06:01:26][352469853500354][15814 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-26 06:01:26][352469853500354][16438 ms][DEBUG] SU: done in 624 ms; out [2025-08-26 06:02:03][352469853500354][0 ms][INFO] === Request start === [2025-08-26 06:02:03][352469853500354][1 ms][DEBUG] START check_scloud [2025-08-26 06:02:03][352469853500354][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 06:02:03][352469853500354][39 ms][DEBUG] SU: done in 39 ms; out [2025-08-26 06:02:03][352469853500354][39 ms][WARN] targetPkg: not running, restarting [2025-08-26 06:02:03][352469853500354][39 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 06:02:03][352469853500354][71 ms][DEBUG] SU: done in 31 ms; out [2025-08-26 06:02:03][352469853500354][71 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 06:02:03][352469853500354][102 ms][DEBUG] SU: done in 31 ms; out [2025-08-26 06:02:05][352469853500354][2117 ms][DEBUG] END check_scloud in 2116 ms [2025-08-26 06:02:05][352469853500354][2117 ms][DEBUG] START check_boot_completed [2025-08-26 06:02:05][352469853500354][2117 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 06:02:27][352469853500354][23482 ms][DEBUG] ADB: done in 21365 ms; out [2025-08-26 06:02:27][352469853500354][23482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 06:02:27][352469853500354][23560 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 06:02:27][352469853500354][23561 ms][DEBUG] END check_boot_completed in 21443 ms [2025-08-26 06:02:27][352469853500354][23561 ms][DEBUG] START check_internet [2025-08-26 06:02:27][352469853500354][23561 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 06:02:27][352469853500354][23826 ms][DEBUG] SU: done in 266 ms; out [2025-08-26 06:02:27][352469853500354][23826 ms][WARN] check_internet: offline [2025-08-26 06:02:27][352469853500354][23827 ms][DEBUG] END check_internet in 266 ms [2025-08-26 06:03:03][352469853500354][1 ms][INFO] === Request start === [2025-08-26 06:03:03][352469853500354][1 ms][DEBUG] START check_scloud [2025-08-26 06:03:03][352469853500354][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 06:03:04][352469853500354][388 ms][DEBUG] SU: done in 387 ms; out [2025-08-26 06:03:04][352469853500354][388 ms][WARN] targetPkg: not running, restarting [2025-08-26 06:03:04][352469853500354][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 06:03:04][352469853500354][514 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 06:03:04][352469853500354][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 06:03:04][352469853500354][795 ms][DEBUG] SU: done in 281 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 06:03:06][352469853500354][2810 ms][DEBUG] END check_scloud in 2809 ms [2025-08-26 06:03:06][352469853500354][2810 ms][DEBUG] START check_boot_completed [2025-08-26 06:03:06][352469853500354][2810 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 06:03:06][352469853500354][2857 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 06:03:06][352469853500354][2857 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 06:03:06][352469853500354][2904 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 06:03:06][352469853500354][2904 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 06:03:06][352469853500354][2904 ms][DEBUG] rawBody.length=1148 [2025-08-26 06:03:06][352469853500354][2904 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469853500354\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8328\"}'\'' -e'"" [2025-08-26 06:03:06][352469853500354][2904 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 06:03:06][352469853500354][2904 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469853500354\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8328\"}'\'' -e'"" [2025-08-26 06:03:12][352469853500354][9230 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_47647b9d-2fcc-4fc3-ab52-50dc8e1cea5a","id":"QR_47647b9d-2fcc-4fc3-ab52-50dc8e1cea5a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 06:03:13][352469853500354][9386 ms][DEBUG] proc_open done in 6483 ms; code=255; res.len=3343 [2025-08-26 06:03:13][352469853500354][9386 ms][DEBUG] END runCmdUntilRes#1 in 6483 ms [2025-08-26 06:03:13][352469853500354][9386 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 06:12:03][350968170682045][1 ms][INFO] === Request start === [2025-08-26 06:12:03][350968170682045][1 ms][DEBUG] START check_scloud [2025-08-26 06:12:03][350968170682045][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 06:12:03][350968170682045][336 ms][DEBUG] SU: done in 335 ms; outu0_a118 11168 4970 23590748 78564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 06:12:03][350968170682045][336 ms][DEBUG] targetPkg: running [2025-08-26 06:12:03][350968170682045][336 ms][DEBUG] END check_scloud in 335 ms [2025-08-26 06:12:03][350968170682045][336 ms][DEBUG] START check_boot_completed [2025-08-26 06:12:03][350968170682045][336 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 06:12:03][350968170682045][367 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 06:12:03][350968170682045][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 06:12:03][350968170682045][415 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 06:12:03][350968170682045][415 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 06:12:03][350968170682045][415 ms][DEBUG] START check_internet [2025-08-26 06:12:03][350968170682045][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 06:12:04][350968170682045][868 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=107 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 107.688/107.688/107.688/0.000 ms\n [2025-08-26 06:12:04][350968170682045][868 ms][DEBUG] check_internet: online [2025-08-26 06:12:04][350968170682045][868 ms][DEBUG] END check_internet in 453 ms [2025-08-26 06:12:04][350968170682045][868 ms][DEBUG] rawBody.length=1148 [2025-08-26 06:12:04][350968170682045][868 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350968170682045\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6686\"}'\'' -e'"" [2025-08-26 06:12:04][350968170682045][868 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 06:12:04][350968170682045][868 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350968170682045\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6686\"}'\'' -e'"" [2025-08-26 06:12:08][350968170682045][5178 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2db9c201-eaf1-42a8-bada-18e0cb471675","id":"QR_2db9c201-eaf1-42a8-bada-18e0cb471675","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 06:12:08][350968170682045][5335 ms][DEBUG] proc_open done in 4466 ms; code=255; res.len=3343 [2025-08-26 06:12:08][350968170682045][5335 ms][DEBUG] END runCmdUntilRes#1 in 4466 ms [2025-08-26 06:12:08][350968170682045][5335 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 06:19:29][357436145403288][1 ms][INFO] === Request start === [2025-08-26 06:19:29][357436145403288][1 ms][DEBUG] START check_scloud [2025-08-26 06:19:29][357436145403288][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 06:19:29][357436145403288][313 ms][DEBUG] SU: done in 311 ms; outu0_a118 11168 4970 23739456 93888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 06:19:29][357436145403288][313 ms][DEBUG] targetPkg: running [2025-08-26 06:19:29][357436145403288][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-26 06:19:29][357436145403288][313 ms][DEBUG] START check_boot_completed [2025-08-26 06:19:29][357436145403288][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 06:19:29][357436145403288][344 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 06:19:29][357436145403288][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 06:19:29][357436145403288][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 06:19:29][357436145403288][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 06:19:29][357436145403288][391 ms][DEBUG] rawBody.length=1148 [2025-08-26 06:19:29][357436145403288][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357436145403288\",\"model\":\"SM-A826S\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7621\"}'\'' -e'"" [2025-08-26 06:19:29][357436145403288][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 06:19:29][357436145403288][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357436145403288\",\"model\":\"SM-A826S\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7621\"}'\'' -e'"" [2025-08-26 06:19:36][357436145403288][7295 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 06:19:36][357436145403288][7452 ms][DEBUG] proc_open done in 7060 ms; code=255; res.len=107 [2025-08-26 06:19:36][357436145403288][7452 ms][DEBUG] END runCmdUntilRes#1 in 7060 ms [2025-08-26 06:19:36][357436145403288][7452 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 06:19:36][][0 ms][INFO] === Request start === [2025-08-26 06:19:36][][1 ms][DEBUG] START check_scloud [2025-08-26 06:19:36][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 06:19:37][][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 11168 4970 23911440 107364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 06:19:37][][311 ms][DEBUG] targetPkg: running [2025-08-26 06:19:37][][311 ms][DEBUG] END check_scloud in 311 ms [2025-08-26 06:19:37][][311 ms][DEBUG] START check_boot_completed [2025-08-26 06:19:37][][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 06:19:37][][342 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 06:19:37][][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 06:19:37][][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 06:19:37][][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 06:19:37][][389 ms][DEBUG] rawBody.length=1129 [2025-08-26 06:19:37][][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A826S\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CR3193A9H\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8624\"}'\'' -e'"" [2025-08-26 06:19:37][][389 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 06:19:37][][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A826S\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CR3193A9H\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8624\"}'\'' -e'"" [2025-08-26 06:19:40][][3795 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 06:19:40][][3951 ms][DEBUG] proc_open done in 3562 ms; code=255; res.len=107 [2025-08-26 06:19:40][][3951 ms][DEBUG] END runCmdUntilRes#1 in 3562 ms [2025-08-26 06:19:40][][3951 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 06:19:43][357436145403288][0 ms][INFO] === Request start === [2025-08-26 06:19:43][357436145403288][1 ms][DEBUG] START check_scloud [2025-08-26 06:19:43][357436145403288][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 06:19:43][357436145403288][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 11168 4970 24043928 119160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 06:19:43][357436145403288][311 ms][DEBUG] targetPkg: running [2025-08-26 06:19:43][357436145403288][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 06:19:43][357436145403288][311 ms][DEBUG] START check_boot_completed [2025-08-26 06:19:43][357436145403288][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 06:19:43][357436145403288][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 06:19:43][357436145403288][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 06:19:43][357436145403288][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 06:19:43][357436145403288][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 06:19:43][357436145403288][405 ms][DEBUG] rawBody.length=1149 [2025-08-26 06:19:43][357436145403288][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357436145403288\",\"model\":\"SM-A826S\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8600\"}'\'' -e'"" [2025-08-26 06:19:43][357436145403288][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 06:19:43][357436145403288][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357436145403288\",\"model\":\"SM-A826S\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8600\"}'\'' -e'"" [2025-08-26 06:19:48][357436145403288][5419 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d56b5223-4e2f-43f0-b912-eb56b01ede82","id":"QR_d56b5223-4e2f-43f0-b912-eb56b01ede82","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 06:19:48][357436145403288][5575 ms][DEBUG] proc_open done in 5171 ms; code=255; res.len=3343 [2025-08-26 06:19:48][357436145403288][5575 ms][DEBUG] END runCmdUntilRes#1 in 5171 ms [2025-08-26 06:19:48][357436145403288][5575 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 06:24:03][353548757735148][1 ms][INFO] === Request start === [2025-08-26 06:24:03][353548757735148][1 ms][DEBUG] START check_scloud [2025-08-26 06:24:03][353548757735148][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 06:24:04][353548757735148][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 11168 4970 24145332 125272 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 06:24:04][353548757735148][320 ms][DEBUG] targetPkg: running [2025-08-26 06:24:04][353548757735148][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-26 06:24:04][353548757735148][320 ms][DEBUG] START check_boot_completed [2025-08-26 06:24:04][353548757735148][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 06:24:04][353548757735148][351 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 06:24:04][353548757735148][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 06:24:04][353548757735148][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 06:24:04][353548757735148][398 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 06:24:04][353548757735148][398 ms][DEBUG] START check_internet [2025-08-26 06:24:04][353548757735148][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 06:24:04][353548757735148][898 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.727/201.727/201.727/0.000 ms\n [2025-08-26 06:24:04][353548757735148][898 ms][DEBUG] check_internet: online [2025-08-26 06:24:04][353548757735148][898 ms][DEBUG] END check_internet in 500 ms [2025-08-26 06:24:04][353548757735148][898 ms][DEBUG] rawBody.length=1148 [2025-08-26 06:24:04][353548757735148][898 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548757735148\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8347\"}'\'' -e'"" [2025-08-26 06:24:04][353548757735148][898 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 06:24:04][353548757735148][898 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548757735148\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8347\"}'\'' -e'"" [2025-08-26 06:24:08][353548757735148][5162 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_37c246f6-bd6a-4fa0-9bcf-c9c0394719e8","id":"QR_37c246f6-bd6a-4fa0-9bcf-c9c0394719e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 06:24:09][353548757735148][5319 ms][DEBUG] proc_open done in 4420 ms; code=255; res.len=3343 [2025-08-26 06:24:09][353548757735148][5319 ms][DEBUG] END runCmdUntilRes#1 in 4420 ms [2025-08-26 06:24:09][353548757735148][5319 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 06:24:11][351547440316615][0 ms][INFO] === Request start === [2025-08-26 06:24:11][351547440316615][1 ms][DEBUG] START check_scloud [2025-08-26 06:24:11][351547440316615][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 06:24:11][351547440316615][320 ms][DEBUG] SU: done in 320 ms; outu0_a118 11168 4970 24279676 136776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 06:24:11][351547440316615][320 ms][DEBUG] targetPkg: running [2025-08-26 06:24:11][351547440316615][320 ms][DEBUG] END check_scloud in 320 ms [2025-08-26 06:24:11][351547440316615][321 ms][DEBUG] START check_boot_completed [2025-08-26 06:24:11][351547440316615][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 06:24:11][351547440316615][367 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 06:24:11][351547440316615][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 06:24:11][351547440316615][430 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 06:24:11][351547440316615][430 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 06:24:11][351547440316615][430 ms][DEBUG] START check_internet [2025-08-26 06:24:11][351547440316615][430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 06:24:12][351547440316615][695 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=152 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 152.257/152.257/152.257/0.000 ms\n [2025-08-26 06:24:12][351547440316615][695 ms][DEBUG] check_internet: online [2025-08-26 06:24:12][351547440316615][695 ms][DEBUG] END check_internet in 265 ms [2025-08-26 06:24:12][351547440316615][695 ms][DEBUG] rawBody.length=1148 [2025-08-26 06:24:12][351547440316615][695 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351547440316615\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8857\"}'\'' -e'"" [2025-08-26 06:24:12][351547440316615][695 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 06:24:12][351547440316615][695 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351547440316615\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8857\"}'\'' -e'"" [2025-08-26 06:24:15][351547440316615][4350 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4ea2efe3-60e4-4e2a-89c4-a465a1e98b6b","id":"QR_4ea2efe3-60e4-4e2a-89c4-a465a1e98b6b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 06:24:15][351547440316615][4507 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-26 06:24:15][351547440316615][4507 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-26 06:24:15][351547440316615][4507 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 06:25:03][354529383148202][0 ms][INFO] === Request start === [2025-08-26 06:25:03][354529383148202][1 ms][DEBUG] START check_scloud [2025-08-26 06:25:03][354529383148202][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 06:25:04][354529383148202][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 11168 4970 24395452 144008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 06:25:04][354529383148202][320 ms][DEBUG] targetPkg: running [2025-08-26 06:25:04][354529383148202][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-26 06:25:04][354529383148202][320 ms][DEBUG] START check_boot_completed [2025-08-26 06:25:04][354529383148202][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 06:25:04][354529383148202][366 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 06:25:04][354529383148202][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 06:25:04][354529383148202][429 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 06:25:04][354529383148202][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 06:25:04][354529383148202][429 ms][DEBUG] rawBody.length=1148 [2025-08-26 06:25:04][354529383148202][429 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529383148202\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6086\"}'\'' -e'"" [2025-08-26 06:25:04][354529383148202][429 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 06:25:04][354529383148202][429 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529383148202\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6086\"}'\'' -e'"" [2025-08-26 06:25:08][354529383148202][4240 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0926eea-7dbd-42f4-be61-24c0115370d9","id":"QR_b0926eea-7dbd-42f4-be61-24c0115370d9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 06:25:08][354529383148202][4397 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-26 06:25:08][354529383148202][4397 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-26 06:25:08][354529383148202][4397 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 06:39:05][356080122617469][0 ms][INFO] === Request start === [2025-08-26 06:39:05][356080122617469][0 ms][DEBUG] START check_scloud [2025-08-26 06:39:05][356080122617469][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 06:39:05][356080122617469][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 11168 4970 24489684 128136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 06:39:05][356080122617469][308 ms][DEBUG] targetPkg: running [2025-08-26 06:39:05][356080122617469][308 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 06:39:05][356080122617469][308 ms][DEBUG] START check_boot_completed [2025-08-26 06:39:05][356080122617469][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 06:39:05][356080122617469][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 06:39:05][356080122617469][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 06:39:05][356080122617469][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 06:39:05][356080122617469][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 06:39:05][356080122617469][401 ms][DEBUG] rawBody.length=1148 [2025-08-26 06:39:05][356080122617469][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356080122617469\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7508\"}'\'' -e'"" [2025-08-26 06:39:05][356080122617469][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 06:39:05][356080122617469][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356080122617469\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7508\"}'\'' -e'"" [2025-08-26 06:39:09][356080122617469][4635 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1099c159-92c0-48cb-a378-ef910aa7a2b5","id":"QR_1099c159-92c0-48cb-a378-ef910aa7a2b5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 06:39:09][356080122617469][4791 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-26 06:39:09][356080122617469][4791 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-26 06:39:09][356080122617469][4791 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 06:45:08][353499869935871][1 ms][INFO] === Request start === [2025-08-26 06:45:08][353499869935871][1 ms][DEBUG] START check_scloud [2025-08-26 06:45:08][353499869935871][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 06:45:08][353499869935871][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 11168 4970 24629252 139360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 06:45:08][353499869935871][295 ms][DEBUG] targetPkg: running [2025-08-26 06:45:08][353499869935871][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-26 06:45:08][353499869935871][296 ms][DEBUG] START check_boot_completed [2025-08-26 06:45:08][353499869935871][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 06:45:08][353499869935871][342 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 06:45:08][353499869935871][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 06:45:08][353499869935871][405 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 06:45:08][353499869935871][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 06:45:08][353499869935871][405 ms][DEBUG] rawBody.length=1148 [2025-08-26 06:45:08][353499869935871][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353499869935871\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7462\"}'\'' -e'"" [2025-08-26 06:45:08][353499869935871][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 06:45:08][353499869935871][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353499869935871\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7462\"}'\'' -e'"" [2025-08-26 06:45:12][353499869935871][4466 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8634f6bf-24d8-43ce-ab07-2469b87a6bf5","id":"QR_8634f6bf-24d8-43ce-ab07-2469b87a6bf5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 06:45:12][353499869935871][4622 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-26 06:45:12][353499869935871][4622 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-26 06:45:12][353499869935871][4622 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 06:50:05][351786692336430][1 ms][INFO] === Request start === [2025-08-26 06:50:05][351786692336430][1 ms][DEBUG] START check_scloud [2025-08-26 06:50:05][351786692336430][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 06:50:05][351786692336430][268 ms][DEBUG] SU: done in 266 ms; outu0_a118 11168 4970 24747240 149580 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 06:50:05][351786692336430][268 ms][DEBUG] targetPkg: running [2025-08-26 06:50:05][351786692336430][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-26 06:50:05][351786692336430][268 ms][DEBUG] START check_boot_completed [2025-08-26 06:50:05][351786692336430][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 06:50:05][351786692336430][314 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 06:50:05][351786692336430][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 06:50:05][351786692336430][361 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 06:50:05][351786692336430][361 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 06:50:05][351786692336430][361 ms][DEBUG] START check_internet [2025-08-26 06:50:05][351786692336430][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 06:50:06][351786692336430][752 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.874/201.874/201.874/0.000 ms\n [2025-08-26 06:50:06][351786692336430][752 ms][DEBUG] check_internet: online [2025-08-26 06:50:06][351786692336430][752 ms][DEBUG] END check_internet in 391 ms [2025-08-26 06:50:06][351786692336430][752 ms][DEBUG] rawBody.length=1148 [2025-08-26 06:50:06][351786692336430][752 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692336430\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5399\"}'\'' -e'"" [2025-08-26 06:50:06][351786692336430][752 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 06:50:06][351786692336430][752 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786692336430\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5399\"}'\'' -e'"" [2025-08-26 06:50:09][351786692336430][4532 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe17a3e0-e336-473c-9e4a-c98730459780","id":"QR_fe17a3e0-e336-473c-9e4a-c98730459780","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 06:50:10][351786692336430][4688 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-26 06:50:10][351786692336430][4688 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-26 06:50:10][351786692336430][4688 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 06:53:06][354715950849179][1 ms][INFO] === Request start === [2025-08-26 06:53:06][354715950849179][1 ms][DEBUG] START check_scloud [2025-08-26 06:53:06][354715950849179][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 06:53:06][354715950849179][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 11168 4970 24865100 160420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 06:53:06][354715950849179][304 ms][DEBUG] targetPkg: running [2025-08-26 06:53:06][354715950849179][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-26 06:53:06][354715950849179][304 ms][DEBUG] START check_boot_completed [2025-08-26 06:53:06][354715950849179][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 06:53:06][354715950849179][335 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 06:53:06][354715950849179][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 06:53:06][354715950849179][382 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 06:53:06][354715950849179][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 06:53:06][354715950849179][382 ms][DEBUG] rawBody.length=1148 [2025-08-26 06:53:06][354715950849179][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354715950849179\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3336\"}'\'' -e'"" [2025-08-26 06:53:06][354715950849179][382 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 06:53:06][354715950849179][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354715950849179\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3336\"}'\'' -e'"" [2025-08-26 06:53:11][354715950849179][4850 ms][DEBUG] proc_open done in 4467 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 06:53:11][354715950849179][4850 ms][DEBUG] END runCmdUntilRes#1 in 4468 ms [2025-08-26 06:53:11][354715950849179][4850 ms][WARN] Detected error: Process with pid 11168 either refused to load frida-agent, or terminated during injection [2025-08-26 06:53:11][354715950849179][4850 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 06:53:11][354715950849179][5021 ms][DEBUG] SU: done in 171 ms; out [2025-08-26 06:53:11][354715950849179][5021 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 06:53:11][354715950849179][5021 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 06:53:11][354715950849179][5146 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 06:53:11][354715950849179][5146 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 06:53:11][354715950849179][5334 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 06:53:13][354715950849179][7349 ms][DEBUG] START check_boot_completed [2025-08-26 06:53:13][354715950849179][7349 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 06:53:13][354715950849179][7396 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 06:53:13][354715950849179][7396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 06:53:13][354715950849179][7474 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 06:53:13][354715950849179][7474 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 06:53:16][354715950849179][10489 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 06:53:16][354715950849179][10489 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354715950849179\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3336\"}'\'' -e'"" [2025-08-26 06:53:20][354715950849179][14550 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fdd4dd7d-f43e-40e2-8aec-37d7e41b90bc","id":"QR_fdd4dd7d-f43e-40e2-8aec-37d7e41b90bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 06:53:20][354715950849179][14706 ms][DEBUG] proc_open done in 4218 ms; code=255; res.len=3343 [2025-08-26 06:53:20][354715950849179][14706 ms][DEBUG] END runCmdUntilRes#2 in 4218 ms [2025-08-26 06:53:20][354715950849179][14707 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:05:03][358438736600974][1 ms][INFO] === Request start === [2025-08-26 07:05:03][358438736600974][1 ms][DEBUG] START check_scloud [2025-08-26 07:05:03][358438736600974][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:05:04][358438736600974][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 19165 4970 23640884 126836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:05:04][358438736600974][253 ms][DEBUG] targetPkg: running [2025-08-26 07:05:04][358438736600974][253 ms][DEBUG] END check_scloud in 252 ms [2025-08-26 07:05:04][358438736600974][253 ms][DEBUG] START check_boot_completed [2025-08-26 07:05:04][358438736600974][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:05:04][358438736600974][285 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 07:05:04][358438736600974][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:05:04][358438736600974][331 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 07:05:04][358438736600974][332 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 07:05:04][358438736600974][332 ms][DEBUG] rawBody.length=1148 [2025-08-26 07:05:04][358438736600974][332 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438736600974\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4272\"}'\'' -e'"" [2025-08-26 07:05:04][358438736600974][332 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:05:04][358438736600974][332 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438736600974\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4272\"}'\'' -e'"" [2025-08-26 07:05:08][358438736600974][4221 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_19c3c045-a4ab-4abd-a6a2-095265fac95d","id":"QR_19c3c045-a4ab-4abd-a6a2-095265fac95d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:05:08][358438736600974][4377 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-08-26 07:05:08][358438736600974][4377 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-08-26 07:05:08][358438736600974][4377 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:07:03][350857485793706][0 ms][INFO] === Request start === [2025-08-26 07:07:03][350857485793706][1 ms][DEBUG] START check_scloud [2025-08-26 07:07:03][350857485793706][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:07:04][350857485793706][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 19165 4970 23822244 138508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:07:04][350857485793706][295 ms][DEBUG] targetPkg: running [2025-08-26 07:07:04][350857485793706][295 ms][DEBUG] END check_scloud in 295 ms [2025-08-26 07:07:04][350857485793706][296 ms][DEBUG] START check_boot_completed [2025-08-26 07:07:04][350857485793706][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:07:04][350857485793706][342 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 07:07:04][350857485793706][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:07:04][350857485793706][391 ms][DEBUG] SU: done in 49 ms; out [2025-08-26 07:07:04][350857485793706][391 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 07:07:04][350857485793706][391 ms][DEBUG] rawBody.length=1148 [2025-08-26 07:07:04][350857485793706][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350857485793706\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2531\"}'\'' -e'"" [2025-08-26 07:07:04][350857485793706][391 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:07:04][350857485793706][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350857485793706\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2531\"}'\'' -e'"" [2025-08-26 07:07:08][350857485793706][4279 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_43be2322-5845-488f-ac6a-d1083946e20c","id":"QR_43be2322-5845-488f-ac6a-d1083946e20c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:07:08][350857485793706][4435 ms][DEBUG] proc_open done in 4043 ms; code=255; res.len=3343 [2025-08-26 07:07:08][350857485793706][4435 ms][DEBUG] END runCmdUntilRes#1 in 4044 ms [2025-08-26 07:07:08][350857485793706][4435 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:11:04][352513123874055][1 ms][INFO] === Request start === [2025-08-26 07:11:04][352513123874055][1 ms][DEBUG] START check_scloud [2025-08-26 07:11:04][352513123874055][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:11:05][352513123874055][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 19165 4970 23934088 149160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:11:05][352513123874055][280 ms][DEBUG] targetPkg: running [2025-08-26 07:11:05][352513123874055][280 ms][DEBUG] END check_scloud in 279 ms [2025-08-26 07:11:05][352513123874055][280 ms][DEBUG] START check_boot_completed [2025-08-26 07:11:05][352513123874055][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:11:05][352513123874055][312 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 07:11:05][352513123874055][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:11:05][352513123874055][359 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 07:11:05][352513123874055][359 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 07:11:05][352513123874055][360 ms][DEBUG] rawBody.length=1149 [2025-08-26 07:11:05][352513123874055][360 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352513123874055\",\"model\":\"SM-A166U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CCT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4191\"}'\'' -e'"" [2025-08-26 07:11:05][352513123874055][360 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:11:05][352513123874055][360 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352513123874055\",\"model\":\"SM-A166U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CCT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4191\"}'\'' -e'"" [2025-08-26 07:11:10][352513123874055][5982 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_35d747a7-bbff-420e-8a6b-d135b4745ec5","id":"QR_35d747a7-bbff-420e-8a6b-d135b4745ec5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:11:11][352513123874055][6138 ms][DEBUG] proc_open done in 5779 ms; code=255; res.len=3343 [2025-08-26 07:11:11][352513123874055][6138 ms][DEBUG] END runCmdUntilRes#1 in 5779 ms [2025-08-26 07:11:11][352513123874055][6138 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:12:03][352502218448941][0 ms][INFO] === Request start === [2025-08-26 07:12:03][352502218448941][1 ms][DEBUG] START check_scloud [2025-08-26 07:12:03][352502218448941][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:12:03][352502218448941][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 19165 4970 24041644 159572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:12:03][352502218448941][302 ms][DEBUG] targetPkg: running [2025-08-26 07:12:03][352502218448941][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-26 07:12:03][352502218448941][302 ms][DEBUG] START check_boot_completed [2025-08-26 07:12:03][352502218448941][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:12:04][352502218448941][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 07:12:04][352502218448941][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:12:04][352502218448941][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 07:12:04][352502218448941][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 07:12:04][352502218448941][395 ms][DEBUG] START check_internet [2025-08-26 07:12:04][352502218448941][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 07:12:04][352502218448941][724 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=98.7 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 98.711/98.711/98.711/0.000 ms\n [2025-08-26 07:12:04][352502218448941][724 ms][DEBUG] check_internet: online [2025-08-26 07:12:04][352502218448941][724 ms][DEBUG] END check_internet in 328 ms [2025-08-26 07:12:04][352502218448941][724 ms][DEBUG] rawBody.length=1148 [2025-08-26 07:12:04][352502218448941][724 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352502218448941\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4028\"}'\'' -e'"" [2025-08-26 07:12:04][352502218448941][724 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:12:04][352502218448941][724 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352502218448941\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4028\"}'\'' -e'"" [2025-08-26 07:12:08][352502218448941][4722 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b2f6f03e-d200-4c7e-9fa2-2bfc327e95a6","id":"QR_b2f6f03e-d200-4c7e-9fa2-2bfc327e95a6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:12:08][352502218448941][4879 ms][DEBUG] proc_open done in 4154 ms; code=255; res.len=3343 [2025-08-26 07:12:08][352502218448941][4879 ms][DEBUG] END runCmdUntilRes#1 in 4154 ms [2025-08-26 07:12:08][352502218448941][4879 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:22:04][351240642444787][0 ms][INFO] === Request start === [2025-08-26 07:22:04][351240642444787][0 ms][DEBUG] START check_scloud [2025-08-26 07:22:04][351240642444787][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:22:04][351240642444787][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 19165 4970 24139972 171368 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:22:04][351240642444787][261 ms][DEBUG] targetPkg: running [2025-08-26 07:22:04][351240642444787][261 ms][DEBUG] END check_scloud in 260 ms [2025-08-26 07:22:04][351240642444787][261 ms][DEBUG] START check_boot_completed [2025-08-26 07:22:04][351240642444787][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:22:04][351240642444787][292 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 07:22:04][351240642444787][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:22:04][351240642444787][339 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 07:22:04][351240642444787][339 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 07:22:04][351240642444787][339 ms][DEBUG] START check_internet [2025-08-26 07:22:04][351240642444787][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 07:22:04][351240642444787][667 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=99.8 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 99.854/99.854/99.854/0.000 ms\n [2025-08-26 07:22:04][351240642444787][667 ms][DEBUG] check_internet: online [2025-08-26 07:22:04][351240642444787][667 ms][DEBUG] END check_internet in 328 ms [2025-08-26 07:22:04][351240642444787][667 ms][DEBUG] rawBody.length=1148 [2025-08-26 07:22:04][351240642444787][667 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642444787\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6142\"}'\'' -e'"" [2025-08-26 07:22:04][351240642444787][667 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:22:04][351240642444787][667 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642444787\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6142\"}'\'' -e'"" [2025-08-26 07:22:08][351240642444787][4525 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_08715a91-4fe2-4df2-a7d0-2b32be189b0b","id":"QR_08715a91-4fe2-4df2-a7d0-2b32be189b0b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:22:08][351240642444787][4681 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-26 07:22:08][351240642444787][4681 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-26 07:22:08][351240642444787][4681 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:23:30][351787741332024][0 ms][INFO] === Request start === [2025-08-26 07:23:30][351787741332024][1 ms][DEBUG] START check_scloud [2025-08-26 07:23:30][351787741332024][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:23:30][351787741332024][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 19165 4970 24312308 182416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:23:30][351787741332024][299 ms][DEBUG] targetPkg: running [2025-08-26 07:23:30][351787741332024][299 ms][DEBUG] END check_scloud in 299 ms [2025-08-26 07:23:30][351787741332024][299 ms][DEBUG] START check_boot_completed [2025-08-26 07:23:30][351787741332024][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:23:30][351787741332024][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 07:23:30][351787741332024][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:23:30][351787741332024][408 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 07:23:30][351787741332024][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 07:23:30][351787741332024][408 ms][DEBUG] rawBody.length=1148 [2025-08-26 07:23:30][351787741332024][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351787741332024\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7742\"}'\'' -e'"" [2025-08-26 07:23:30][351787741332024][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:23:30][351787741332024][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351787741332024\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7742\"}'\'' -e'"" [2025-08-26 07:23:34][351787741332024][4032 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 07:23:34][351787741332024][4188 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=107 [2025-08-26 07:23:34][351787741332024][4188 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-26 07:23:34][351787741332024][4188 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 07:23:35][][0 ms][INFO] === Request start === [2025-08-26 07:23:35][][1 ms][DEBUG] START check_scloud [2025-08-26 07:23:35][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:23:35][][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 19165 4970 24473340 194296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:23:35][][313 ms][DEBUG] targetPkg: running [2025-08-26 07:23:35][][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-26 07:23:35][][313 ms][DEBUG] START check_boot_completed [2025-08-26 07:23:35][][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:23:35][][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 07:23:35][][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:23:35][][406 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 07:23:35][][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 07:23:35][][406 ms][DEBUG] rawBody.length=1129 [2025-08-26 07:23:35][][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CT80LG91V\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3318\"}'\'' -e'"" [2025-08-26 07:23:35][][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:23:35][][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CT80LG91V\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3318\"}'\'' -e'"" [2025-08-26 07:23:38][][3734 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 07:23:38][][3890 ms][DEBUG] proc_open done in 3483 ms; code=255; res.len=107 [2025-08-26 07:23:38][][3890 ms][DEBUG] END runCmdUntilRes#1 in 3483 ms [2025-08-26 07:23:38][][3890 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 07:23:41][351787741332024][0 ms][INFO] === Request start === [2025-08-26 07:23:41][351787741332024][1 ms][DEBUG] START check_scloud [2025-08-26 07:23:41][351787741332024][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:23:41][351787741332024][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 19165 4970 24648708 204952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:23:41][351787741332024][256 ms][DEBUG] targetPkg: running [2025-08-26 07:23:41][351787741332024][256 ms][DEBUG] END check_scloud in 255 ms [2025-08-26 07:23:41][351787741332024][256 ms][DEBUG] START check_boot_completed [2025-08-26 07:23:41][351787741332024][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:23:41][351787741332024][303 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 07:23:41][351787741332024][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:23:41][351787741332024][350 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 07:23:41][351787741332024][350 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 07:23:41][351787741332024][350 ms][DEBUG] rawBody.length=1149 [2025-08-26 07:23:41][351787741332024][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351787741332024\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5464\"}'\'' -e'"" [2025-08-26 07:23:41][351787741332024][350 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:23:41][351787741332024][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351787741332024\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5464\"}'\'' -e'"" [2025-08-26 07:23:45][351787741332024][4333 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 07:23:45][351787741332024][4489 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=107 [2025-08-26 07:23:45][351787741332024][4489 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-08-26 07:23:45][351787741332024][4489 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 07:23:46][][0 ms][INFO] === Request start === [2025-08-26 07:23:46][][1 ms][DEBUG] START check_scloud [2025-08-26 07:23:46][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:23:46][][272 ms][DEBUG] SU: done in 272 ms; outu0_a118 19165 4970 24797452 216720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:23:46][][272 ms][DEBUG] targetPkg: running [2025-08-26 07:23:46][][272 ms][DEBUG] END check_scloud in 272 ms [2025-08-26 07:23:46][][272 ms][DEBUG] START check_boot_completed [2025-08-26 07:23:46][][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:23:46][][304 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 07:23:46][][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:23:46][][350 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 07:23:46][][350 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 07:23:46][][350 ms][DEBUG] rawBody.length=1130 [2025-08-26 07:23:46][][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R3CT80LG91V\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8149\"}'\'' -e'"" [2025-08-26 07:23:46][][350 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:23:46][][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F936N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R3CT80LG91V\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8149\"}'\'' -e'"" [2025-08-26 07:23:50][][4006 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 07:23:50][][4162 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=107 [2025-08-26 07:23:50][][4162 ms][DEBUG] END runCmdUntilRes#1 in 3812 ms [2025-08-26 07:23:50][][4162 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 07:24:03][359142811324281][0 ms][INFO] === Request start === [2025-08-26 07:24:03][359142811324281][1 ms][DEBUG] START check_scloud [2025-08-26 07:24:03][359142811324281][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:24:03][359142811324281][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 19165 4970 24901036 227960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:24:03][359142811324281][292 ms][DEBUG] targetPkg: running [2025-08-26 07:24:03][359142811324281][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-26 07:24:03][359142811324281][292 ms][DEBUG] START check_boot_completed [2025-08-26 07:24:03][359142811324281][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:24:03][359142811324281][339 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 07:24:03][359142811324281][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:24:03][359142811324281][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 07:24:03][359142811324281][386 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 07:24:03][359142811324281][386 ms][DEBUG] START check_internet [2025-08-26 07:24:03][359142811324281][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 07:24:04][359142811324281][761 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=98.9 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 98.962/98.962/98.962/0.000 ms\n [2025-08-26 07:24:04][359142811324281][761 ms][DEBUG] check_internet: online [2025-08-26 07:24:04][359142811324281][761 ms][DEBUG] END check_internet in 375 ms [2025-08-26 07:24:04][359142811324281][761 ms][DEBUG] rawBody.length=1148 [2025-08-26 07:24:04][359142811324281][761 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359142811324281\",\"model\":\"SM-N981N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5347\"}'\'' -e'"" [2025-08-26 07:24:04][359142811324281][761 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:24:04][359142811324281][761 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359142811324281\",\"model\":\"SM-N981N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5347\"}'\'' -e'"" [2025-08-26 07:24:08][359142811324281][4728 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f173594-f41e-4163-be4d-4d60ef4829b2","id":"QR_3f173594-f41e-4163-be4d-4d60ef4829b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:24:08][359142811324281][4884 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-08-26 07:24:08][359142811324281][4885 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-26 07:24:08][359142811324281][4885 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:24:10][350536255849415][1 ms][INFO] === Request start === [2025-08-26 07:24:10][350536255849415][1 ms][DEBUG] START check_scloud [2025-08-26 07:24:10][350536255849415][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:24:10][350536255849415][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 19165 4970 25051152 239480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:24:10][350536255849415][303 ms][DEBUG] targetPkg: running [2025-08-26 07:24:10][350536255849415][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 07:24:10][350536255849415][303 ms][DEBUG] START check_boot_completed [2025-08-26 07:24:10][350536255849415][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:24:11][350536255849415][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 07:24:11][350536255849415][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:24:11][350536255849415][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 07:24:11][350536255849415][397 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 07:24:11][350536255849415][397 ms][DEBUG] START check_internet [2025-08-26 07:24:11][350536255849415][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 07:24:11][350536255849415][694 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=186 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 186.181/186.181/186.181/0.000 ms\n [2025-08-26 07:24:11][350536255849415][694 ms][DEBUG] check_internet: online [2025-08-26 07:24:11][350536255849415][694 ms][DEBUG] END check_internet in 296 ms [2025-08-26 07:24:11][350536255849415][694 ms][DEBUG] rawBody.length=1148 [2025-08-26 07:24:11][350536255849415][694 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536255849415\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6497\"}'\'' -e'"" [2025-08-26 07:24:11][350536255849415][694 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:24:11][350536255849415][694 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536255849415\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6497\"}'\'' -e'"" [2025-08-26 07:24:15][350536255849415][4755 ms][DEBUG] proc_open done in 4061 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 07:24:15][350536255849415][4755 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-26 07:24:15][350536255849415][4755 ms][WARN] Detected error: Process with pid 19165 either refused to load frida-agent, or terminated during injection [2025-08-26 07:24:15][350536255849415][4755 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 07:24:15][350536255849415][4912 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 07:24:15][350536255849415][4912 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 07:24:15][350536255849415][4912 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 07:24:15][350536255849415][5083 ms][DEBUG] SU: done in 172 ms; out [2025-08-26 07:24:15][350536255849415][5083 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 07:24:15][350536255849415][5255 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 07:24:17][350536255849415][7270 ms][DEBUG] START check_boot_completed [2025-08-26 07:24:17][350536255849415][7270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:24:17][350536255849415][7317 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 07:24:17][350536255849415][7317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:24:18][350536255849415][7380 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 07:24:18][350536255849415][7380 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 07:24:21][350536255849415][10394 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 07:24:21][350536255849415][10395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536255849415\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6497\"}'\'' -e'"" [2025-08-26 07:24:24][350536255849415][14315 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_23662737-4547-4c0b-992a-63383b2995fa","id":"QR_23662737-4547-4c0b-992a-63383b2995fa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:24:25][350536255849415][14472 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-26 07:24:25][350536255849415][14472 ms][DEBUG] END runCmdUntilRes#2 in 4077 ms [2025-08-26 07:24:25][350536255849415][14472 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:26:03][350176952946022][0 ms][INFO] === Request start === [2025-08-26 07:26:03][350176952946022][1 ms][DEBUG] START check_scloud [2025-08-26 07:26:03][350176952946022][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:26:03][350176952946022][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 21694 4970 23680880 127468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:26:03][350176952946022][304 ms][DEBUG] targetPkg: running [2025-08-26 07:26:03][350176952946022][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-26 07:26:03][350176952946022][304 ms][DEBUG] START check_boot_completed [2025-08-26 07:26:03][350176952946022][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:26:03][350176952946022][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 07:26:03][350176952946022][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:26:03][350176952946022][398 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 07:26:03][350176952946022][398 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 07:26:03][350176952946022][398 ms][DEBUG] START check_internet [2025-08-26 07:26:03][350176952946022][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 07:26:04][350176952946022][647 ms][DEBUG] SU: done in 249 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=135 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 135.796/135.796/135.796/0.000 ms\n [2025-08-26 07:26:04][350176952946022][648 ms][DEBUG] check_internet: online [2025-08-26 07:26:04][350176952946022][648 ms][DEBUG] END check_internet in 249 ms [2025-08-26 07:26:04][350176952946022][648 ms][DEBUG] rawBody.length=1148 [2025-08-26 07:26:04][350176952946022][648 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350176952946022\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3945\"}'\'' -e'"" [2025-08-26 07:26:04][350176952946022][648 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:26:04][350176952946022][648 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350176952946022\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3945\"}'\'' -e'"" [2025-08-26 07:26:07][350176952946022][4428 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e5bbbcaa-68b2-4bb1-b79f-69ac35519ab8","id":"QR_e5bbbcaa-68b2-4bb1-b79f-69ac35519ab8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:26:08][350176952946022][4584 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-26 07:26:08][350176952946022][4584 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-26 07:26:08][350176952946022][4584 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:29:03][350363934575265][1 ms][INFO] === Request start === [2025-08-26 07:29:03][350363934575265][1 ms][DEBUG] START check_scloud [2025-08-26 07:29:03][350363934575265][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:29:03][350363934575265][273 ms][DEBUG] SU: done in 271 ms; outu0_a118 21694 4970 23813092 138412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:29:03][350363934575265][273 ms][DEBUG] targetPkg: running [2025-08-26 07:29:03][350363934575265][273 ms][DEBUG] END check_scloud in 272 ms [2025-08-26 07:29:03][350363934575265][273 ms][DEBUG] START check_boot_completed [2025-08-26 07:29:03][350363934575265][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:29:03][350363934575265][304 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 07:29:03][350363934575265][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:29:03][350363934575265][351 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 07:29:03][350363934575265][351 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 07:29:03][350363934575265][351 ms][DEBUG] rawBody.length=1148 [2025-08-26 07:29:03][350363934575265][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350363934575265\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6162\"}'\'' -e'"" [2025-08-26 07:29:03][350363934575265][351 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:29:03][350363934575265][351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350363934575265\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6162\"}'\'' -e'"" [2025-08-26 07:29:07][350363934575265][4303 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5936492e-0d49-4ef2-bf3a-ac5ee9bd3243","id":"QR_5936492e-0d49-4ef2-bf3a-ac5ee9bd3243","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:29:07][350363934575265][4459 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-26 07:29:07][350363934575265][4459 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-26 07:29:07][350363934575265][4459 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:30:04][357718898750233][0 ms][INFO] === Request start === [2025-08-26 07:30:04][357718898750233][1 ms][DEBUG] START check_scloud [2025-08-26 07:30:04][357718898750233][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:30:04][357718898750233][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 21694 4970 23976136 150380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:30:04][357718898750233][308 ms][DEBUG] targetPkg: running [2025-08-26 07:30:04][357718898750233][308 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 07:30:04][357718898750233][309 ms][DEBUG] START check_boot_completed [2025-08-26 07:30:04][357718898750233][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:30:04][357718898750233][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 07:30:04][357718898750233][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:30:04][357718898750233][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 07:30:04][357718898750233][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 07:30:04][357718898750233][418 ms][DEBUG] START check_internet [2025-08-26 07:30:04][357718898750233][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 07:30:05][357718898750233][715 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=100 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 100.038/100.038/100.038/0.000 ms\n [2025-08-26 07:30:05][357718898750233][715 ms][DEBUG] check_internet: online [2025-08-26 07:30:05][357718898750233][715 ms][DEBUG] END check_internet in 297 ms [2025-08-26 07:30:05][357718898750233][715 ms][DEBUG] rawBody.length=1148 [2025-08-26 07:30:05][357718898750233][715 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357718898750233\",\"model\":\"SM-M146B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9230\"}'\'' -e'"" [2025-08-26 07:30:05][357718898750233][715 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:30:05][357718898750233][715 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357718898750233\",\"model\":\"SM-M146B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9230\"}'\'' -e'"" [2025-08-26 07:30:09][357718898750233][4698 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7c1b988c-169a-4633-966f-c58a35c28c14","id":"QR_7c1b988c-169a-4633-966f-c58a35c28c14","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:30:09][357718898750233][4854 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-08-26 07:30:09][357718898750233][4854 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-08-26 07:30:09][357718898750233][4854 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:37:03][353182200668365][1 ms][INFO] === Request start === [2025-08-26 07:37:03][353182200668365][1 ms][DEBUG] START check_scloud [2025-08-26 07:37:03][353182200668365][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:37:03][353182200668365][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 21694 4970 24070368 161852 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:37:03][353182200668365][277 ms][DEBUG] targetPkg: running [2025-08-26 07:37:03][353182200668365][277 ms][DEBUG] END check_scloud in 276 ms [2025-08-26 07:37:03][353182200668365][277 ms][DEBUG] START check_boot_completed [2025-08-26 07:37:03][353182200668365][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:37:03][353182200668365][324 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 07:37:03][353182200668365][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:37:03][353182200668365][371 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 07:37:03][353182200668365][371 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 07:37:03][353182200668365][371 ms][DEBUG] rawBody.length=1148 [2025-08-26 07:37:03][353182200668365][371 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182200668365\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3161\"}'\'' -e'"" [2025-08-26 07:37:03][353182200668365][371 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:37:03][353182200668365][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182200668365\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3161\"}'\'' -e'"" [2025-08-26 07:37:07][353182200668365][4244 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d667d4cd-c8ec-42ab-be86-66d496019360","id":"QR_d667d4cd-c8ec-42ab-be86-66d496019360","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:37:07][353182200668365][4401 ms][DEBUG] proc_open done in 4029 ms; code=255; res.len=3343 [2025-08-26 07:37:07][353182200668365][4401 ms][DEBUG] END runCmdUntilRes#1 in 4029 ms [2025-08-26 07:37:07][353182200668365][4401 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:39:04][352574702418532][1 ms][INFO] === Request start === [2025-08-26 07:39:04][352574702418532][1 ms][DEBUG] START check_scloud [2025-08-26 07:39:04][352574702418532][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:39:05][352574702418532][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 21694 4970 24207312 172572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:39:05][352574702418532][292 ms][DEBUG] targetPkg: running [2025-08-26 07:39:05][352574702418532][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-26 07:39:05][352574702418532][292 ms][DEBUG] START check_boot_completed [2025-08-26 07:39:05][352574702418532][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:39:05][352574702418532][321 ms][DEBUG] ADB: done in 29 ms; out [2025-08-26 07:39:05][352574702418532][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:39:05][352574702418532][369 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 07:39:05][352574702418532][369 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-26 07:39:05][352574702418532][369 ms][DEBUG] rawBody.length=1150 [2025-08-26 07:39:05][352574702418532][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352574702418532\",\"model\":\"SM-S536DL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9348\"}'\'' -e'"" [2025-08-26 07:39:05][352574702418532][369 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:39:05][352574702418532][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352574702418532\",\"model\":\"SM-S536DL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9348\"}'\'' -e'"" [2025-08-26 07:39:10][352574702418532][5586 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b34528c0-1f50-46ba-a734-3c7e09656433","id":"QR_b34528c0-1f50-46ba-a734-3c7e09656433","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:39:10][352574702418532][5742 ms][DEBUG] proc_open done in 5373 ms; code=255; res.len=3343 [2025-08-26 07:39:10][352574702418532][5742 ms][DEBUG] END runCmdUntilRes#1 in 5373 ms [2025-08-26 07:39:10][352574702418532][5742 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:39:15][356414815954022][0 ms][INFO] === Request start === [2025-08-26 07:39:15][356414815954022][1 ms][DEBUG] START check_scloud [2025-08-26 07:39:15][356414815954022][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:39:16][356414815954022][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 21694 4970 24327384 184428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:39:16][356414815954022][304 ms][DEBUG] targetPkg: running [2025-08-26 07:39:16][356414815954022][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-26 07:39:16][356414815954022][304 ms][DEBUG] START check_boot_completed [2025-08-26 07:39:16][356414815954022][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:39:16][356414815954022][350 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 07:39:16][356414815954022][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:39:16][356414815954022][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 07:39:16][356414815954022][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 07:39:16][356414815954022][413 ms][DEBUG] rawBody.length=1148 [2025-08-26 07:39:16][356414815954022][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815954022\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3147\"}'\'' -e'"" [2025-08-26 07:39:16][356414815954022][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:39:16][356414815954022][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414815954022\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3147\"}'\'' -e'"" [2025-08-26 07:39:20][356414815954022][4256 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_47064369-761a-4e0f-b2f1-0ad04b88cd6f","id":"QR_47064369-761a-4e0f-b2f1-0ad04b88cd6f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:39:20][356414815954022][4412 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-08-26 07:39:20][356414815954022][4412 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-26 07:39:20][356414815954022][4412 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:39:22][357962504443763][0 ms][INFO] === Request start === [2025-08-26 07:39:22][357962504443763][1 ms][DEBUG] START check_scloud [2025-08-26 07:39:22][357962504443763][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:39:22][357962504443763][297 ms][DEBUG] SU: done in 297 ms; outu0_a118 21694 4970 24474016 195352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:39:22][357962504443763][298 ms][DEBUG] targetPkg: running [2025-08-26 07:39:22][357962504443763][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-26 07:39:22][357962504443763][298 ms][DEBUG] START check_boot_completed [2025-08-26 07:39:22][357962504443763][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:39:23][357962504443763][344 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 07:39:23][357962504443763][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:39:23][357962504443763][422 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 07:39:23][357962504443763][423 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 07:39:23][357962504443763][423 ms][DEBUG] rawBody.length=1148 [2025-08-26 07:39:23][357962504443763][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962504443763\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6894\"}'\'' -e'"" [2025-08-26 07:39:23][357962504443763][423 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:39:23][357962504443763][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962504443763\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6894\"}'\'' -e'"" [2025-08-26 07:39:26][357962504443763][4156 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_075555c2-ebc3-4db7-add7-2e88b7470727","id":"QR_075555c2-ebc3-4db7-add7-2e88b7470727","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:39:26][357962504443763][4312 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-08-26 07:39:26][357962504443763][4312 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-26 07:39:26][357962504443763][4312 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:43:03][355644568722892][1 ms][INFO] === Request start === [2025-08-26 07:43:03][355644568722892][1 ms][DEBUG] START check_scloud [2025-08-26 07:43:03][355644568722892][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:43:03][355644568722892][255 ms][DEBUG] SU: done in 253 ms; outu0_a118 21694 4970 24593980 207952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:43:03][355644568722892][255 ms][DEBUG] targetPkg: running [2025-08-26 07:43:03][355644568722892][255 ms][DEBUG] END check_scloud in 254 ms [2025-08-26 07:43:03][355644568722892][255 ms][DEBUG] START check_boot_completed [2025-08-26 07:43:03][355644568722892][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:43:04][355644568722892][301 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 07:43:04][355644568722892][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:43:04][355644568722892][348 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 07:43:04][355644568722892][348 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 07:43:04][355644568722892][348 ms][DEBUG] rawBody.length=1148 [2025-08-26 07:43:04][355644568722892][348 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355644568722892\",\"model\":\"SM-M127G\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5878\"}'\'' -e'"" [2025-08-26 07:43:04][355644568722892][348 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:43:04][355644568722892][348 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355644568722892\",\"model\":\"SM-M127G\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5878\"}'\'' -e'"" [2025-08-26 07:43:07][355644568722892][4175 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_13b4de68-7049-407d-8dc9-5976bfec3fe9","id":"QR_13b4de68-7049-407d-8dc9-5976bfec3fe9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:43:08][355644568722892][4332 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-26 07:43:08][355644568722892][4332 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-26 07:43:08][355644568722892][4332 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:49:03][350131655255155][0 ms][INFO] === Request start === [2025-08-26 07:49:03][350131655255155][0 ms][DEBUG] START check_scloud [2025-08-26 07:49:03][350131655255155][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:49:04][350131655255155][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 21694 4970 24755004 219504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:49:04][350131655255155][310 ms][DEBUG] targetPkg: running [2025-08-26 07:49:04][350131655255155][310 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 07:49:04][350131655255155][310 ms][DEBUG] START check_boot_completed [2025-08-26 07:49:04][350131655255155][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:49:04][350131655255155][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 07:49:04][350131655255155][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:49:04][350131655255155][404 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 07:49:04][350131655255155][404 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 07:49:04][350131655255155][404 ms][DEBUG] rawBody.length=1148 [2025-08-26 07:49:04][350131655255155][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350131655255155\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8283\"}'\'' -e'"" [2025-08-26 07:49:04][350131655255155][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:49:04][350131655255155][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350131655255155\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8283\"}'\'' -e'"" [2025-08-26 07:49:08][350131655255155][4325 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6c893840-3acf-4970-9afb-6e94ebd0004d","id":"QR_6c893840-3acf-4970-9afb-6e94ebd0004d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:49:08][350131655255155][4481 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-26 07:49:08][350131655255155][4481 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-26 07:49:08][350131655255155][4481 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:51:03][354916448029339][0 ms][INFO] === Request start === [2025-08-26 07:51:03][354916448029339][1 ms][DEBUG] START check_scloud [2025-08-26 07:51:03][354916448029339][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:51:03][354916448029339][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 21694 4970 24913956 229392 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:51:03][354916448029339][282 ms][DEBUG] targetPkg: running [2025-08-26 07:51:03][354916448029339][282 ms][DEBUG] END check_scloud in 282 ms [2025-08-26 07:51:03][354916448029339][282 ms][DEBUG] START check_boot_completed [2025-08-26 07:51:03][354916448029339][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:51:03][354916448029339][329 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 07:51:03][354916448029339][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:51:03][354916448029339][391 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 07:51:03][354916448029339][391 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 07:51:03][354916448029339][391 ms][DEBUG] rawBody.length=1148 [2025-08-26 07:51:03][354916448029339][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916448029339\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7771\"}'\'' -e'"" [2025-08-26 07:51:03][354916448029339][391 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:51:03][354916448029339][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916448029339\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7771\"}'\'' -e'"" [2025-08-26 07:51:07][354916448029339][4359 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cd97db38-8ff2-4e94-98d5-189269c3797e","id":"QR_cd97db38-8ff2-4e94-98d5-189269c3797e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:51:07][354916448029339][4515 ms][DEBUG] proc_open done in 4124 ms; code=255; res.len=3343 [2025-08-26 07:51:07][354916448029339][4515 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-26 07:51:07][354916448029339][4515 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:51:10][355859831381629][1 ms][INFO] === Request start === [2025-08-26 07:51:10][355859831381629][1 ms][DEBUG] START check_scloud [2025-08-26 07:51:10][355859831381629][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:51:10][355859831381629][247 ms][DEBUG] SU: done in 246 ms; outu0_a118 21694 4970 25050412 234300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:51:10][355859831381629][247 ms][DEBUG] targetPkg: running [2025-08-26 07:51:10][355859831381629][247 ms][DEBUG] END check_scloud in 246 ms [2025-08-26 07:51:10][355859831381629][247 ms][DEBUG] START check_boot_completed [2025-08-26 07:51:10][355859831381629][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:51:10][355859831381629][294 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 07:51:10][355859831381629][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:51:10][355859831381629][340 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 07:51:10][355859831381629][341 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 07:51:10][355859831381629][341 ms][DEBUG] rawBody.length=1148 [2025-08-26 07:51:10][355859831381629][341 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859831381629\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2227\"}'\'' -e'"" [2025-08-26 07:51:10][355859831381629][341 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:51:10][355859831381629][341 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859831381629\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2227\"}'\'' -e'"" [2025-08-26 07:51:14][355859831381629][4371 ms][DEBUG] proc_open done in 4031 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 07:51:14][355859831381629][4371 ms][DEBUG] END runCmdUntilRes#1 in 4031 ms [2025-08-26 07:51:14][355859831381629][4371 ms][WARN] Detected error: Process with pid 21694 either refused to load frida-agent, or terminated during injection [2025-08-26 07:51:14][355859831381629][4371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 07:51:14][355859831381629][4527 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 07:51:14][355859831381629][4527 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 07:51:14][355859831381629][4527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 07:51:15][355859831381629][4668 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 07:51:15][355859831381629][4668 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 07:51:15][355859831381629][4824 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 07:51:17][355859831381629][6839 ms][DEBUG] START check_boot_completed [2025-08-26 07:51:17][355859831381629][6839 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:51:17][355859831381629][6886 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 07:51:17][355859831381629][6886 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:51:17][355859831381629][6948 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 07:51:17][355859831381629][6949 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 07:51:20][355859831381629][9963 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 07:51:20][355859831381629][9963 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859831381629\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2227\"}'\'' -e'"" [2025-08-26 07:51:23][355859831381629][13556 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c0df6a05-d210-4a02-a07c-4fddd252e673","id":"QR_c0df6a05-d210-4a02-a07c-4fddd252e673","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:51:24][355859831381629][13713 ms][DEBUG] proc_open done in 3749 ms; code=255; res.len=3343 [2025-08-26 07:51:24][355859831381629][13713 ms][DEBUG] END runCmdUntilRes#2 in 3749 ms [2025-08-26 07:51:24][355859831381629][13713 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:51:26][351272336199765][0 ms][INFO] === Request start === [2025-08-26 07:51:26][351272336199765][1 ms][DEBUG] START check_scloud [2025-08-26 07:51:26][351272336199765][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:51:26][351272336199765][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 24025 4970 23726236 124800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:51:26][351272336199765][298 ms][DEBUG] targetPkg: running [2025-08-26 07:51:26][351272336199765][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-26 07:51:26][351272336199765][298 ms][DEBUG] START check_boot_completed [2025-08-26 07:51:26][351272336199765][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:51:26][351272336199765][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 07:51:26][351272336199765][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:51:26][351272336199765][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 07:51:26][351272336199765][391 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 07:51:26][351272336199765][391 ms][DEBUG] rawBody.length=1148 [2025-08-26 07:51:26][351272336199765][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272336199765\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9742\"}'\'' -e'"" [2025-08-26 07:51:26][351272336199765][391 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:51:26][351272336199765][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272336199765\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9742\"}'\'' -e'"" [2025-08-26 07:51:30][351272336199765][4297 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6a89d1b9-4773-481e-ba4e-bb285e59ebb7","id":"QR_6a89d1b9-4773-481e-ba4e-bb285e59ebb7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:51:30][351272336199765][4453 ms][DEBUG] proc_open done in 4062 ms; code=255; res.len=3343 [2025-08-26 07:51:30][351272336199765][4453 ms][DEBUG] END runCmdUntilRes#1 in 4062 ms [2025-08-26 07:51:30][351272336199765][4453 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:53:03][355478282495729][0 ms][INFO] === Request start === [2025-08-26 07:53:03][355478282495729][1 ms][DEBUG] START check_scloud [2025-08-26 07:53:03][355478282495729][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:53:03][355478282495729][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 24025 4970 23797816 138112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:53:03][355478282495729][276 ms][DEBUG] targetPkg: running [2025-08-26 07:53:03][355478282495729][276 ms][DEBUG] END check_scloud in 276 ms [2025-08-26 07:53:03][355478282495729][276 ms][DEBUG] START check_boot_completed [2025-08-26 07:53:03][355478282495729][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:53:03][355478282495729][323 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 07:53:03][355478282495729][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:53:03][355478282495729][370 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 07:53:03][355478282495729][370 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 07:53:03][355478282495729][370 ms][DEBUG] rawBody.length=1148 [2025-08-26 07:53:03][355478282495729][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355478282495729\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2469\"}'\'' -e'"" [2025-08-26 07:53:03][355478282495729][371 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:53:03][355478282495729][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355478282495729\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2469\"}'\'' -e'"" [2025-08-26 07:53:07][355478282495729][4556 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_873929dd-fb85-4eb3-a006-655a5aab19ec","id":"QR_873929dd-fb85-4eb3-a006-655a5aab19ec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:53:08][355478282495729][4713 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-08-26 07:53:08][355478282495729][4713 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-26 07:53:08][355478282495729][4713 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:54:05][352743953621025][1 ms][INFO] === Request start === [2025-08-26 07:54:05][352743953621025][1 ms][DEBUG] START check_scloud [2025-08-26 07:54:05][352743953621025][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:54:05][352743953621025][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 24025 4970 23916752 150032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:54:05][352743953621025][313 ms][DEBUG] targetPkg: running [2025-08-26 07:54:05][352743953621025][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-26 07:54:05][352743953621025][313 ms][DEBUG] START check_boot_completed [2025-08-26 07:54:05][352743953621025][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:54:05][352743953621025][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 07:54:05][352743953621025][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:54:05][352743953621025][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 07:54:05][352743953621025][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 07:54:05][352743953621025][407 ms][DEBUG] START check_internet [2025-08-26 07:54:05][352743953621025][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 07:54:05][352743953621025][704 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=99.2 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 99.227/99.227/99.227/0.000 ms\n [2025-08-26 07:54:05][352743953621025][704 ms][DEBUG] check_internet: online [2025-08-26 07:54:05][352743953621025][704 ms][DEBUG] END check_internet in 297 ms [2025-08-26 07:54:05][352743953621025][704 ms][DEBUG] rawBody.length=1148 [2025-08-26 07:54:05][352743953621025][704 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352743953621025\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1732\"}'\'' -e'"" [2025-08-26 07:54:05][352743953621025][704 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:54:05][352743953621025][704 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352743953621025\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1732\"}'\'' -e'"" [2025-08-26 07:54:09][352743953621025][4531 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a591819a-6ff2-4727-a97b-fc9089f70f95","id":"QR_a591819a-6ff2-4727-a97b-fc9089f70f95","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:54:09][352743953621025][4687 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-26 07:54:09][352743953621025][4687 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-26 07:54:09][352743953621025][4687 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:56:03][357450474375686][0 ms][INFO] === Request start === [2025-08-26 07:56:03][357450474375686][1 ms][DEBUG] START check_scloud [2025-08-26 07:56:03][357450474375686][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:56:03][357450474375686][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 24025 4970 24068724 160916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:56:03][357450474375686][311 ms][DEBUG] targetPkg: running [2025-08-26 07:56:03][357450474375686][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 07:56:03][357450474375686][311 ms][DEBUG] START check_boot_completed [2025-08-26 07:56:03][357450474375686][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:56:03][357450474375686][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 07:56:03][357450474375686][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:56:03][357450474375686][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 07:56:03][357450474375686][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 07:56:03][357450474375686][404 ms][DEBUG] START check_internet [2025-08-26 07:56:03][357450474375686][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 07:56:04][357450474375686][686 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=175 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 175.667/175.667/175.667/0.000 ms\n [2025-08-26 07:56:04][357450474375686][686 ms][DEBUG] check_internet: online [2025-08-26 07:56:04][357450474375686][686 ms][DEBUG] END check_internet in 281 ms [2025-08-26 07:56:04][357450474375686][686 ms][DEBUG] rawBody.length=1148 [2025-08-26 07:56:04][357450474375686][686 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450474375686\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7608\"}'\'' -e'"" [2025-08-26 07:56:04][357450474375686][686 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:56:04][357450474375686][686 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450474375686\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7608\"}'\'' -e'"" [2025-08-26 07:56:08][357450474375686][4778 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1678512b-ef51-4dc3-aff6-c99952575fb8","id":"QR_1678512b-ef51-4dc3-aff6-c99952575fb8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:56:08][357450474375686][4935 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-08-26 07:56:08][357450474375686][4935 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-26 07:56:08][357450474375686][4935 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:57:03][352844251711516][1 ms][INFO] === Request start === [2025-08-26 07:57:03][352844251711516][1 ms][DEBUG] START check_scloud [2025-08-26 07:57:03][352844251711516][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:57:03][352844251711516][312 ms][DEBUG] SU: done in 310 ms; outu0_a118 24025 4970 24189684 171988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:57:03][352844251711516][312 ms][DEBUG] targetPkg: running [2025-08-26 07:57:03][352844251711516][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-26 07:57:03][352844251711516][312 ms][DEBUG] START check_boot_completed [2025-08-26 07:57:03][352844251711516][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:57:03][352844251711516][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 07:57:03][352844251711516][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:57:03][352844251711516][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 07:57:03][352844251711516][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 07:57:03][352844251711516][421 ms][DEBUG] rawBody.length=1148 [2025-08-26 07:57:03][352844251711516][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352844251711516\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3656\"}'\'' -e'"" [2025-08-26 07:57:03][352844251711516][421 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:57:03][352844251711516][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352844251711516\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3656\"}'\'' -e'"" [2025-08-26 07:57:07][352844251711516][4388 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d08f0f21-5a25-472b-9ccf-ece5caa686e7","id":"QR_d08f0f21-5a25-472b-9ccf-ece5caa686e7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:57:07][352844251711516][4545 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-08-26 07:57:07][352844251711516][4545 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-26 07:57:07][352844251711516][4545 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 07:59:10][350287315541440][1 ms][INFO] === Request start === [2025-08-26 07:59:10][350287315541440][1 ms][DEBUG] START check_scloud [2025-08-26 07:59:10][350287315541440][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:59:11][350287315541440][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 24025 4970 24322008 183964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:59:11][350287315541440][312 ms][DEBUG] targetPkg: running [2025-08-26 07:59:11][350287315541440][312 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 07:59:11][350287315541440][312 ms][DEBUG] START check_boot_completed [2025-08-26 07:59:11][350287315541440][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:59:11][350287315541440][343 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 07:59:11][350287315541440][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:59:11][350287315541440][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 07:59:11][350287315541440][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 07:59:11][350287315541440][390 ms][DEBUG] rawBody.length=1148 [2025-08-26 07:59:11][350287315541440][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287315541440\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9842\"}'\'' -e'"" [2025-08-26 07:59:11][350287315541440][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:59:11][350287315541440][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287315541440\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9842\"}'\'' -e'"" [2025-08-26 07:59:14][350287315541440][4014 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 07:59:14][350287315541440][4170 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=107 [2025-08-26 07:59:14][350287315541440][4170 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-26 07:59:14][350287315541440][4170 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 07:59:15][][0 ms][INFO] === Request start === [2025-08-26 07:59:15][][1 ms][DEBUG] START check_scloud [2025-08-26 07:59:15][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:59:15][][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 24025 4970 24458464 194768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:59:15][][270 ms][DEBUG] targetPkg: running [2025-08-26 07:59:15][][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-26 07:59:15][][270 ms][DEBUG] START check_boot_completed [2025-08-26 07:59:15][][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:59:15][][317 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 07:59:15][][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:59:15][][363 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 07:59:15][][363 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 07:59:15][][363 ms][DEBUG] rawBody.length=1129 [2025-08-26 07:59:15][][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8WC0T06KR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1654\"}'\'' -e'"" [2025-08-26 07:59:15][][363 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:59:15][][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8WC0T06KR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1654\"}'\'' -e'"" [2025-08-26 07:59:18][][3738 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 07:59:19][][3894 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=107 [2025-08-26 07:59:19][][3894 ms][DEBUG] END runCmdUntilRes#1 in 3531 ms [2025-08-26 07:59:19][][3894 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 07:59:21][350287315541440][0 ms][INFO] === Request start === [2025-08-26 07:59:21][350287315541440][1 ms][DEBUG] START check_scloud [2025-08-26 07:59:21][350287315541440][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 07:59:21][350287315541440][243 ms][DEBUG] SU: done in 242 ms; outu0_a118 24025 4970 24601064 206696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 07:59:21][350287315541440][243 ms][DEBUG] targetPkg: running [2025-08-26 07:59:21][350287315541440][243 ms][DEBUG] END check_scloud in 243 ms [2025-08-26 07:59:21][350287315541440][244 ms][DEBUG] START check_boot_completed [2025-08-26 07:59:21][350287315541440][244 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 07:59:21][350287315541440][289 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 07:59:21][350287315541440][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 07:59:21][350287315541440][352 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 07:59:21][350287315541440][352 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-26 07:59:21][350287315541440][352 ms][DEBUG] rawBody.length=1149 [2025-08-26 07:59:21][350287315541440][352 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287315541440\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1400\"}'\'' -e'"" [2025-08-26 07:59:21][350287315541440][352 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 07:59:21][350287315541440][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287315541440\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1400\"}'\'' -e'"" [2025-08-26 07:59:27][350287315541440][5710 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_301ce9e6-22a1-4162-89c4-a0dd2c79340c","id":"QR_301ce9e6-22a1-4162-89c4-a0dd2c79340c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 07:59:27][350287315541440][5866 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-08-26 07:59:27][350287315541440][5866 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-26 07:59:27][350287315541440][5866 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:02:03][350320365857349][1 ms][INFO] === Request start === [2025-08-26 08:02:03][350320365857349][1 ms][DEBUG] START check_scloud [2025-08-26 08:02:03][350320365857349][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:02:03][350320365857349][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 24025 4970 24696324 217804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:02:03][350320365857349][278 ms][DEBUG] targetPkg: running [2025-08-26 08:02:03][350320365857349][278 ms][DEBUG] END check_scloud in 277 ms [2025-08-26 08:02:03][350320365857349][278 ms][DEBUG] START check_boot_completed [2025-08-26 08:02:03][350320365857349][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:02:03][350320365857349][325 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 08:02:03][350320365857349][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:02:03][350320365857349][403 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 08:02:03][350320365857349][403 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 08:02:03][350320365857349][403 ms][DEBUG] START check_internet [2025-08-26 08:02:03][350320365857349][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 08:02:04][350320365857349][809 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=98.1 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 98.193/98.193/98.193/0.000 ms\n [2025-08-26 08:02:04][350320365857349][809 ms][DEBUG] check_internet: online [2025-08-26 08:02:04][350320365857349][809 ms][DEBUG] END check_internet in 406 ms [2025-08-26 08:02:04][350320365857349][809 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:02:04][350320365857349][810 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320365857349\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8221\"}'\'' -e'"" [2025-08-26 08:02:04][350320365857349][810 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:02:04][350320365857349][810 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320365857349\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8221\"}'\'' -e'"" [2025-08-26 08:02:08][350320365857349][4839 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_639cceec-d07f-497b-a366-27f60c1c9ae5","id":"QR_639cceec-d07f-497b-a366-27f60c1c9ae5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:02:08][350320365857349][4996 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-26 08:02:08][350320365857349][4996 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-26 08:02:08][350320365857349][4996 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:06:03][354068193425047][1 ms][INFO] === Request start === [2025-08-26 08:06:03][354068193425047][1 ms][DEBUG] START check_scloud [2025-08-26 08:06:03][354068193425047][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:06:03][354068193425047][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 24025 4970 24830568 229536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:06:03][354068193425047][305 ms][DEBUG] targetPkg: running [2025-08-26 08:06:03][354068193425047][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 08:06:03][354068193425047][305 ms][DEBUG] START check_boot_completed [2025-08-26 08:06:03][354068193425047][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:06:03][354068193425047][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 08:06:03][354068193425047][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:06:03][354068193425047][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 08:06:03][354068193425047][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 08:06:03][354068193425047][383 ms][DEBUG] START check_internet [2025-08-26 08:06:03][354068193425047][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 08:06:04][354068193425047][711 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=100 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 100.421/100.421/100.421/0.000 ms\n [2025-08-26 08:06:04][354068193425047][711 ms][DEBUG] check_internet: online [2025-08-26 08:06:04][354068193425047][711 ms][DEBUG] END check_internet in 328 ms [2025-08-26 08:06:04][354068193425047][711 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:06:04][354068193425047][711 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068193425047\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8067\"}'\'' -e'"" [2025-08-26 08:06:04][354068193425047][711 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:06:04][354068193425047][711 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068193425047\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8067\"}'\'' -e'"" [2025-08-26 08:06:07][354068193425047][4538 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a25ba069-62fe-480e-acb0-59620ec92fb2","id":"QR_a25ba069-62fe-480e-acb0-59620ec92fb2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:06:08][354068193425047][4695 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-26 08:06:08][354068193425047][4695 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-26 08:06:08][354068193425047][4695 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:07:03][350013881052657][0 ms][INFO] === Request start === [2025-08-26 08:07:03][350013881052657][1 ms][DEBUG] START check_scloud [2025-08-26 08:07:03][350013881052657][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:07:04][350013881052657][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 24025 4970 24941264 240316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:07:04][350013881052657][303 ms][DEBUG] targetPkg: running [2025-08-26 08:07:04][350013881052657][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 08:07:04][350013881052657][303 ms][DEBUG] START check_boot_completed [2025-08-26 08:07:04][350013881052657][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:07:04][350013881052657][348 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 08:07:04][350013881052657][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:07:04][350013881052657][396 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 08:07:04][350013881052657][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 08:07:04][350013881052657][396 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:07:04][350013881052657][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881052657\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4799\"}'\'' -e'"" [2025-08-26 08:07:04][350013881052657][396 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:07:04][350013881052657][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881052657\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4799\"}'\'' -e'"" [2025-08-26 08:07:07][350013881052657][4144 ms][DEBUG] proc_open done in 3747 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 08:07:07][350013881052657][4144 ms][DEBUG] END runCmdUntilRes#1 in 3748 ms [2025-08-26 08:07:07][350013881052657][4144 ms][WARN] Detected error: Process with pid 24025 either refused to load frida-agent, or terminated during injection [2025-08-26 08:07:07][350013881052657][4144 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 08:07:08][350013881052657][4284 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 08:07:08][350013881052657][4284 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 08:07:08][350013881052657][4284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 08:07:08][350013881052657][4425 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 08:07:08][350013881052657][4425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 08:07:08][350013881052657][4581 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 08:07:10][350013881052657][6596 ms][DEBUG] START check_boot_completed [2025-08-26 08:07:10][350013881052657][6596 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:07:10][350013881052657][6643 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 08:07:10][350013881052657][6643 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:07:10][350013881052657][6690 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 08:07:10][350013881052657][6690 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 08:07:13][350013881052657][9705 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 08:07:13][350013881052657][9705 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881052657\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4799\"}'\'' -e'"" [2025-08-26 08:07:17][350013881052657][13610 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5c1bf97b-b488-4bf3-9621-761cc098add9","id":"QR_5c1bf97b-b488-4bf3-9621-761cc098add9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:07:17][350013881052657][13766 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-08-26 08:07:17][350013881052657][13766 ms][DEBUG] END runCmdUntilRes#2 in 4062 ms [2025-08-26 08:07:17][350013881052657][13767 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:07:20][350048584509439][0 ms][INFO] === Request start === [2025-08-26 08:07:20][350048584509439][1 ms][DEBUG] START check_scloud [2025-08-26 08:07:20][350048584509439][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:07:20][350048584509439][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 25358 4970 23703196 124744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:07:20][350048584509439][294 ms][DEBUG] targetPkg: running [2025-08-26 08:07:20][350048584509439][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-26 08:07:20][350048584509439][294 ms][DEBUG] START check_boot_completed [2025-08-26 08:07:20][350048584509439][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:07:20][350048584509439][325 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 08:07:20][350048584509439][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:07:20][350048584509439][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 08:07:20][350048584509439][372 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 08:07:20][350048584509439][372 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:07:20][350048584509439][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350048584509439\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2638\"}'\'' -e'"" [2025-08-26 08:07:20][350048584509439][372 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:07:20][350048584509439][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350048584509439\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2638\"}'\'' -e'"" [2025-08-26 08:07:24][350048584509439][3949 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c758be1-dff4-4bd3-97da-29cf6116e6e1","id":"QR_9c758be1-dff4-4bd3-97da-29cf6116e6e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:07:24][350048584509439][4105 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-08-26 08:07:24][350048584509439][4105 ms][DEBUG] END runCmdUntilRes#1 in 3734 ms [2025-08-26 08:07:24][350048584509439][4105 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:09:03][351642489551048][1 ms][INFO] === Request start === [2025-08-26 08:09:03][351642489551048][1 ms][DEBUG] START check_scloud [2025-08-26 08:09:03][351642489551048][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:09:03][351642489551048][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 25358 4970 23797360 138720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:09:03][351642489551048][311 ms][DEBUG] targetPkg: running [2025-08-26 08:09:03][351642489551048][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 08:09:03][351642489551048][311 ms][DEBUG] START check_boot_completed [2025-08-26 08:09:03][351642489551048][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:09:03][351642489551048][343 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 08:09:03][351642489551048][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:09:03][351642489551048][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 08:09:03][351642489551048][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 08:09:03][351642489551048][389 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:09:03][351642489551048][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642489551048\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8448\"}'\'' -e'"" [2025-08-26 08:09:03][351642489551048][389 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:09:03][351642489551048][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642489551048\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8448\"}'\'' -e'"" [2025-08-26 08:09:07][351642489551048][4654 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_01a27be8-7add-45f2-9fca-63268f5604e7","id":"QR_01a27be8-7add-45f2-9fca-63268f5604e7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:09:08][351642489551048][4810 ms][DEBUG] proc_open done in 4421 ms; code=255; res.len=3343 [2025-08-26 08:09:08][351642489551048][4810 ms][DEBUG] END runCmdUntilRes#1 in 4421 ms [2025-08-26 08:09:08][351642489551048][4810 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:12:03][351786693755380][1 ms][INFO] === Request start === [2025-08-26 08:12:03][351786693755380][1 ms][DEBUG] START check_scloud [2025-08-26 08:12:03][351786693755380][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:12:03][351786693755380][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 25358 4970 23887624 151212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:12:03][351786693755380][284 ms][DEBUG] targetPkg: running [2025-08-26 08:12:03][351786693755380][284 ms][DEBUG] END check_scloud in 283 ms [2025-08-26 08:12:03][351786693755380][284 ms][DEBUG] START check_boot_completed [2025-08-26 08:12:03][351786693755380][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:12:03][351786693755380][315 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 08:12:03][351786693755380][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:12:03][351786693755380][362 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 08:12:03][351786693755380][362 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 08:12:03][351786693755380][362 ms][DEBUG] START check_internet [2025-08-26 08:12:03][351786693755380][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 08:12:04][351786693755380][659 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=99.0 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 99.096/99.096/99.096/0.000 ms\n [2025-08-26 08:12:04][351786693755380][659 ms][DEBUG] check_internet: online [2025-08-26 08:12:04][351786693755380][659 ms][DEBUG] END check_internet in 297 ms [2025-08-26 08:12:04][351786693755380][659 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:12:04][351786693755380][659 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693755380\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9920\"}'\'' -e'"" [2025-08-26 08:12:04][351786693755380][659 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:12:04][351786693755380][659 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693755380\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9920\"}'\'' -e'"" [2025-08-26 08:12:08][351786693755380][4798 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a05ca862-4f04-4c9b-9e7b-fdf3b4a71438","id":"QR_a05ca862-4f04-4c9b-9e7b-fdf3b4a71438","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:12:08][351786693755380][4955 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-26 08:12:08][351786693755380][4955 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-26 08:12:08][351786693755380][4955 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:16:03][357450473315121][1 ms][INFO] === Request start === [2025-08-26 08:16:03][357450473315121][1 ms][DEBUG] START check_scloud [2025-08-26 08:16:03][357450473315121][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:16:03][357450473315121][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 25358 4970 23999532 162016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:16:03][357450473315121][304 ms][DEBUG] targetPkg: running [2025-08-26 08:16:03][357450473315121][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-26 08:16:03][357450473315121][304 ms][DEBUG] START check_boot_completed [2025-08-26 08:16:03][357450473315121][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:16:03][357450473315121][335 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 08:16:03][357450473315121][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:16:03][357450473315121][382 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 08:16:03][357450473315121][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 08:16:03][357450473315121][383 ms][DEBUG] START check_internet [2025-08-26 08:16:03][357450473315121][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 08:16:03][357450473315121][632 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=78.4 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 78.448/78.448/78.448/0.000 ms\n [2025-08-26 08:16:03][357450473315121][632 ms][DEBUG] check_internet: online [2025-08-26 08:16:03][357450473315121][632 ms][DEBUG] END check_internet in 250 ms [2025-08-26 08:16:03][357450473315121][632 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:16:03][357450473315121][633 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450473315121\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9226\"}'\'' -e'"" [2025-08-26 08:16:03][357450473315121][633 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:16:03][357450473315121][633 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450473315121\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9226\"}'\'' -e'"" [2025-08-26 08:16:08][357450473315121][4990 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5d82e14a-43f1-40b1-9a91-beddea794f0c","id":"QR_5d82e14a-43f1-40b1-9a91-beddea794f0c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:16:08][357450473315121][5147 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=3343 [2025-08-26 08:16:08][357450473315121][5147 ms][DEBUG] END runCmdUntilRes#1 in 4514 ms [2025-08-26 08:16:08][357450473315121][5147 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:16:10][358792080760895][0 ms][INFO] === Request start === [2025-08-26 08:16:10][358792080760895][1 ms][DEBUG] START check_scloud [2025-08-26 08:16:10][358792080760895][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:16:10][358792080760895][286 ms][DEBUG] SU: done in 286 ms; outu0_a118 25358 4970 24139828 171568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:16:10][358792080760895][286 ms][DEBUG] targetPkg: running [2025-08-26 08:16:10][358792080760895][286 ms][DEBUG] END check_scloud in 286 ms [2025-08-26 08:16:10][358792080760895][287 ms][DEBUG] START check_boot_completed [2025-08-26 08:16:10][358792080760895][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:16:10][358792080760895][332 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 08:16:10][358792080760895][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:16:11][358792080760895][395 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 08:16:11][358792080760895][395 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-26 08:16:11][358792080760895][395 ms][DEBUG] START check_internet [2025-08-26 08:16:11][358792080760895][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 08:16:11][358792080760895][614 ms][DEBUG] SU: done in 219 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=108 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 108.697/108.697/108.697/0.000 ms\n [2025-08-26 08:16:11][358792080760895][614 ms][DEBUG] check_internet: online [2025-08-26 08:16:11][358792080760895][614 ms][DEBUG] END check_internet in 219 ms [2025-08-26 08:16:11][358792080760895][614 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:16:11][358792080760895][614 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358792080760895\",\"model\":\"SM-G955F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"OPS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4248\"}'\'' -e'"" [2025-08-26 08:16:11][358792080760895][614 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:16:11][358792080760895][614 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358792080760895\",\"model\":\"SM-G955F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"OPS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4248\"}'\'' -e'"" [2025-08-26 08:16:15][358792080760895][4691 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ebbf0e68-7cde-49a6-aa39-9948600beebd","id":"QR_ebbf0e68-7cde-49a6-aa39-9948600beebd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:16:15][358792080760895][4847 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-26 08:16:15][358792080760895][4847 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-26 08:16:15][358792080760895][4847 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:19:03][356356732387515][1 ms][INFO] === Request start === [2025-08-26 08:19:03][356356732387515][1 ms][DEBUG] START check_scloud [2025-08-26 08:19:03][356356732387515][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:19:04][356356732387515][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 25358 4970 24274228 171124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:19:04][356356732387515][304 ms][DEBUG] targetPkg: running [2025-08-26 08:19:04][356356732387515][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-26 08:19:04][356356732387515][304 ms][DEBUG] START check_boot_completed [2025-08-26 08:19:04][356356732387515][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:19:04][356356732387515][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 08:19:04][356356732387515][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:19:04][356356732387515][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 08:19:04][356356732387515][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 08:19:04][356356732387515][413 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:19:04][356356732387515][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356356732387515\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4839\"}'\'' -e'"" [2025-08-26 08:19:04][356356732387515][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:19:04][356356732387515][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356356732387515\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4839\"}'\'' -e'"" [2025-08-26 08:19:08][356356732387515][4334 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_745da24d-3d16-41fe-8fed-69a15b310bb2","id":"QR_745da24d-3d16-41fe-8fed-69a15b310bb2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:19:08][356356732387515][4490 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=3343 [2025-08-26 08:19:08][356356732387515][4490 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-26 08:19:08][356356732387515][4490 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:19:12][354519745050154][0 ms][INFO] === Request start === [2025-08-26 08:19:12][354519745050154][1 ms][DEBUG] START check_scloud [2025-08-26 08:19:12][354519745050154][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:19:12][354519745050154][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 25358 4970 24435260 182036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:19:12][354519745050154][252 ms][DEBUG] targetPkg: running [2025-08-26 08:19:12][354519745050154][252 ms][DEBUG] END check_scloud in 251 ms [2025-08-26 08:19:12][354519745050154][252 ms][DEBUG] START check_boot_completed [2025-08-26 08:19:12][354519745050154][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:19:12][354519745050154][298 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 08:19:12][354519745050154][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:19:12][354519745050154][376 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 08:19:12][354519745050154][376 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 08:19:12][354519745050154][376 ms][DEBUG] rawBody.length=1158 [2025-08-26 08:19:12][354519745050154][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354519745050154\",\"model\":\"SM-X110\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YX703H5ZM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8589\"}'\'' -e'"" [2025-08-26 08:19:12][354519745050154][376 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:19:12][354519745050154][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354519745050154\",\"model\":\"SM-X110\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YX703H5ZM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8589\"}'\'' -e'"" [2025-08-26 08:19:16][354519745050154][4313 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5909cf99-54c1-4943-b90f-4b08fcd4db55","id":"QR_5909cf99-54c1-4943-b90f-4b08fcd4db55","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:19:16][354519745050154][4469 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-08-26 08:19:16][354519745050154][4469 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-08-26 08:19:16][354519745050154][4469 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:23:03][355200990320498][1 ms][INFO] === Request start === [2025-08-26 08:23:03][355200990320498][1 ms][DEBUG] START check_scloud [2025-08-26 08:23:03][355200990320498][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:23:03][355200990320498][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 25358 4970 24555260 190212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:23:03][355200990320498][294 ms][DEBUG] targetPkg: running [2025-08-26 08:23:03][355200990320498][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-26 08:23:03][355200990320498][294 ms][DEBUG] START check_boot_completed [2025-08-26 08:23:03][355200990320498][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:23:03][355200990320498][325 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 08:23:03][355200990320498][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:23:03][355200990320498][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 08:23:03][355200990320498][372 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 08:23:03][355200990320498][372 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:23:03][355200990320498][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355200990320498\",\"model\":\"SM-X826B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9007\"}'\'' -e'"" [2025-08-26 08:23:03][355200990320498][372 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:23:03][355200990320498][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355200990320498\",\"model\":\"SM-X826B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9007\"}'\'' -e'"" [2025-08-26 08:23:07][355200990320498][4277 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b7db67f-bb12-4a1d-a141-9154f674ab28","id":"QR_8b7db67f-bb12-4a1d-a141-9154f674ab28","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:23:07][355200990320498][4433 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-08-26 08:23:07][355200990320498][4433 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-26 08:23:07][355200990320498][4434 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:25:03][352677530513968][0 ms][INFO] === Request start === [2025-08-26 08:25:03][352677530513968][1 ms][DEBUG] START check_scloud [2025-08-26 08:25:03][352677530513968][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:25:03][352677530513968][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 25358 4970 24693728 199212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:25:03][352677530513968][299 ms][DEBUG] targetPkg: running [2025-08-26 08:25:03][352677530513968][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-26 08:25:03][352677530513968][299 ms][DEBUG] START check_boot_completed [2025-08-26 08:25:03][352677530513968][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:25:04][352677530513968][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 08:25:04][352677530513968][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:25:04][352677530513968][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 08:25:04][352677530513968][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 08:25:04][352677530513968][377 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:25:04][352677530513968][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530513968\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6253\"}'\'' -e'"" [2025-08-26 08:25:04][352677530513968][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:25:04][352677530513968][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530513968\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6253\"}'\'' -e'"" [2025-08-26 08:25:07][352677530513968][4142 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f56e14ee-00b0-4d3a-8c80-6ef9958c4aff","id":"QR_f56e14ee-00b0-4d3a-8c80-6ef9958c4aff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:25:07][352677530513968][4298 ms][DEBUG] proc_open done in 3921 ms; code=255; res.len=3343 [2025-08-26 08:25:07][352677530513968][4298 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-08-26 08:25:07][352677530513968][4298 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:27:03][352397452171352][1 ms][INFO] === Request start === [2025-08-26 08:27:03][352397452171352][1 ms][DEBUG] START check_scloud [2025-08-26 08:27:03][352397452171352][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:27:04][352397452171352][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 25358 4970 24844296 200404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:27:04][352397452171352][300 ms][DEBUG] targetPkg: running [2025-08-26 08:27:04][352397452171352][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-26 08:27:04][352397452171352][300 ms][DEBUG] START check_boot_completed [2025-08-26 08:27:04][352397452171352][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:27:04][352397452171352][331 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 08:27:04][352397452171352][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:27:04][352397452171352][378 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 08:27:04][352397452171352][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 08:27:04][352397452171352][378 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:27:04][352397452171352][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452171352\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9187\"}'\'' -e'"" [2025-08-26 08:27:04][352397452171352][378 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:27:04][352397452171352][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452171352\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9187\"}'\'' -e'"" [2025-08-26 08:27:08][352397452171352][4330 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4cd5fc41-3b8f-40c2-9892-d4eaa2579a78","id":"QR_4cd5fc41-3b8f-40c2-9892-d4eaa2579a78","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:27:08][352397452171352][4486 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-26 08:27:08][352397452171352][4486 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-26 08:27:08][352397452171352][4486 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:27:11][352384571655374][0 ms][INFO] === Request start === [2025-08-26 08:27:11][352384571655374][1 ms][DEBUG] START check_scloud [2025-08-26 08:27:11][352384571655374][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:27:11][352384571655374][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 25358 4970 25013520 211444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:27:11][352384571655374][317 ms][DEBUG] targetPkg: running [2025-08-26 08:27:11][352384571655374][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-26 08:27:11][352384571655374][317 ms][DEBUG] START check_boot_completed [2025-08-26 08:27:11][352384571655374][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:27:12][352384571655374][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 08:27:12][352384571655374][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:27:12][352384571655374][442 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 08:27:12][352384571655374][442 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 08:27:12][352384571655374][442 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:27:12][352384571655374][442 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352384571655374\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4387\"}'\'' -e'"" [2025-08-26 08:27:12][352384571655374][442 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:27:12][352384571655374][442 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352384571655374\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4387\"}'\'' -e'"" [2025-08-26 08:27:15][352384571655374][4253 ms][DEBUG] proc_open done in 3811 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 08:27:15][352384571655374][4253 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-26 08:27:15][352384571655374][4253 ms][WARN] Detected error: Process with pid 25358 either refused to load frida-agent, or terminated during injection [2025-08-26 08:27:15][352384571655374][4253 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 08:27:16][352384571655374][4378 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 08:27:16][352384571655374][4379 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 08:27:16][352384571655374][4379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 08:27:16][352384571655374][4519 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 08:27:16][352384571655374][4519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 08:27:16][352384571655374][4675 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 08:27:18][352384571655374][6690 ms][DEBUG] START check_boot_completed [2025-08-26 08:27:18][352384571655374][6690 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:27:18][352384571655374][6737 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 08:27:18][352384571655374][6737 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:27:18][352384571655374][6800 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 08:27:18][352384571655374][6800 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 08:27:21][352384571655374][9814 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 08:27:21][352384571655374][9815 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352384571655374\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4387\"}'\'' -e'"" [2025-08-26 08:27:24][352384571655374][13298 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2598e8e0-5450-47c9-99ad-68a434ad9f1e","id":"QR_2598e8e0-5450-47c9-99ad-68a434ad9f1e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:27:25][352384571655374][13454 ms][DEBUG] proc_open done in 3640 ms; code=255; res.len=3343 [2025-08-26 08:27:25][352384571655374][13454 ms][DEBUG] END runCmdUntilRes#2 in 3640 ms [2025-08-26 08:27:25][352384571655374][13454 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:28:03][352743952851219][0 ms][INFO] === Request start === [2025-08-26 08:28:03][352743952851219][1 ms][DEBUG] START check_scloud [2025-08-26 08:28:03][352743952851219][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:28:04][352743952851219][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 27603 4970 23691796 127276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:28:04][352743952851219][302 ms][DEBUG] targetPkg: running [2025-08-26 08:28:04][352743952851219][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-26 08:28:04][352743952851219][302 ms][DEBUG] START check_boot_completed [2025-08-26 08:28:04][352743952851219][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:28:04][352743952851219][347 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 08:28:04][352743952851219][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:28:04][352743952851219][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 08:28:04][352743952851219][394 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-26 08:28:04][352743952851219][394 ms][DEBUG] START check_internet [2025-08-26 08:28:04][352743952851219][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 08:28:04][352743952851219][707 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=99.7 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 99.702/99.702/99.702/0.000 ms\n [2025-08-26 08:28:04][352743952851219][707 ms][DEBUG] check_internet: online [2025-08-26 08:28:04][352743952851219][707 ms][DEBUG] END check_internet in 313 ms [2025-08-26 08:28:04][352743952851219][707 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:28:04][352743952851219][707 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352743952851219\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9365\"}'\'' -e'"" [2025-08-26 08:28:04][352743952851219][707 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:28:04][352743952851219][707 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352743952851219\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9365\"}'\'' -e'"" [2025-08-26 08:28:08][352743952851219][4346 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f0fa887d-7ff4-4579-a7e1-aff98dd4d859","id":"QR_f0fa887d-7ff4-4579-a7e1-aff98dd4d859","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:28:08][352743952851219][4503 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=3343 [2025-08-26 08:28:08][352743952851219][4503 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-26 08:28:08][352743952851219][4503 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:36:03][352949521384729][1 ms][INFO] === Request start === [2025-08-26 08:36:03][352949521384729][1 ms][DEBUG] START check_scloud [2025-08-26 08:36:03][352949521384729][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:36:03][352949521384729][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 27603 4970 23825020 138340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:36:03][352949521384729][270 ms][DEBUG] targetPkg: running [2025-08-26 08:36:03][352949521384729][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-26 08:36:03][352949521384729][270 ms][DEBUG] START check_boot_completed [2025-08-26 08:36:03][352949521384729][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:36:03][352949521384729][301 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 08:36:03][352949521384729][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:36:03][352949521384729][348 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 08:36:03][352949521384729][348 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 08:36:03][352949521384729][348 ms][DEBUG] START check_internet [2025-08-26 08:36:03][352949521384729][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 08:36:03][352949521384729][692 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=98.3 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 98.387/98.387/98.387/0.000 ms\n [2025-08-26 08:36:03][352949521384729][692 ms][DEBUG] check_internet: online [2025-08-26 08:36:03][352949521384729][692 ms][DEBUG] END check_internet in 344 ms [2025-08-26 08:36:03][352949521384729][692 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:36:03][352949521384729][692 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352949521384729\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9145\"}'\'' -e'"" [2025-08-26 08:36:03][352949521384729][692 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:36:03][352949521384729][692 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352949521384729\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9145\"}'\'' -e'"" [2025-08-26 08:36:07][352949521384729][4628 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_198d8a18-9fa3-49c8-b1f4-08617f831e5a","id":"QR_198d8a18-9fa3-49c8-b1f4-08617f831e5a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:36:08][352949521384729][4784 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-08-26 08:36:08][352949521384729][4784 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-26 08:36:08][352949521384729][4784 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:38:03][354945970118319][0 ms][INFO] === Request start === [2025-08-26 08:38:03][354945970118319][1 ms][DEBUG] START check_scloud [2025-08-26 08:38:03][354945970118319][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:38:04][354945970118319][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 27603 4970 24007340 150108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:38:04][354945970118319][295 ms][DEBUG] targetPkg: running [2025-08-26 08:38:04][354945970118319][295 ms][DEBUG] END check_scloud in 295 ms [2025-08-26 08:38:04][354945970118319][296 ms][DEBUG] START check_boot_completed [2025-08-26 08:38:04][354945970118319][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:38:04][354945970118319][342 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 08:38:04][354945970118319][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:38:04][354945970118319][390 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 08:38:04][354945970118319][390 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 08:38:04][354945970118319][390 ms][DEBUG] START check_internet [2025-08-26 08:38:04][354945970118319][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 08:38:04][354945970118319][623 ms][DEBUG] SU: done in 233 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=108 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 108.191/108.191/108.191/0.000 ms\n [2025-08-26 08:38:04][354945970118319][623 ms][DEBUG] check_internet: online [2025-08-26 08:38:04][354945970118319][623 ms][DEBUG] END check_internet in 233 ms [2025-08-26 08:38:04][354945970118319][624 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:38:04][354945970118319][624 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354945970118319\",\"model\":\"SM-A528B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8462\"}'\'' -e'"" [2025-08-26 08:38:04][354945970118319][624 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:38:04][354945970118319][624 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354945970118319\",\"model\":\"SM-A528B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8462\"}'\'' -e'"" [2025-08-26 08:38:08][354945970118319][4919 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c06cf5e0-68c6-4db9-a40d-70141408e689","id":"QR_c06cf5e0-68c6-4db9-a40d-70141408e689","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:38:08][354945970118319][5075 ms][DEBUG] proc_open done in 4451 ms; code=255; res.len=3343 [2025-08-26 08:38:08][354945970118319][5075 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-08-26 08:38:08][354945970118319][5075 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:43:03][350532450533052][1 ms][INFO] === Request start === [2025-08-26 08:43:03][350532450533052][1 ms][DEBUG] START check_scloud [2025-08-26 08:43:03][350532450533052][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:43:03][350532450533052][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 27603 4970 24164304 161808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:43:03][350532450533052][277 ms][DEBUG] targetPkg: running [2025-08-26 08:43:03][350532450533052][277 ms][DEBUG] END check_scloud in 276 ms [2025-08-26 08:43:03][350532450533052][277 ms][DEBUG] START check_boot_completed [2025-08-26 08:43:03][350532450533052][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:43:04][350532450533052][322 ms][DEBUG] ADB: done in 44 ms; out [2025-08-26 08:43:04][350532450533052][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:43:04][350532450533052][400 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 08:43:04][350532450533052][400 ms][DEBUG] END check_boot_completed in 123 ms [2025-08-26 08:43:04][350532450533052][400 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:43:04][350532450533052][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350532450533052\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8126\"}'\'' -e'"" [2025-08-26 08:43:04][350532450533052][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:43:04][350532450533052][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350532450533052\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8126\"}'\'' -e'"" [2025-08-26 08:43:07][350532450533052][4289 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2ba060aa-f539-498d-955b-39c674654f24","id":"QR_2ba060aa-f539-498d-955b-39c674654f24","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:43:08][350532450533052][4446 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-08-26 08:43:08][350532450533052][4446 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-08-26 08:43:08][350532450533052][4446 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:44:03][358261912313794][0 ms][INFO] === Request start === [2025-08-26 08:44:03][358261912313794][1 ms][DEBUG] START check_scloud [2025-08-26 08:44:03][358261912313794][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:44:04][358261912313794][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 27603 4970 24325300 172712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:44:04][358261912313794][307 ms][DEBUG] targetPkg: running [2025-08-26 08:44:04][358261912313794][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 08:44:04][358261912313794][307 ms][DEBUG] START check_boot_completed [2025-08-26 08:44:04][358261912313794][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:44:04][358261912313794][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 08:44:04][358261912313794][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:44:04][358261912313794][417 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 08:44:04][358261912313794][417 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 08:44:04][358261912313794][417 ms][DEBUG] START check_internet [2025-08-26 08:44:04][358261912313794][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 08:44:04][358261912313794][791 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=99.2 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 99.278/99.278/99.278/0.000 ms\n [2025-08-26 08:44:04][358261912313794][791 ms][DEBUG] check_internet: online [2025-08-26 08:44:04][358261912313794][791 ms][DEBUG] END check_internet in 374 ms [2025-08-26 08:44:04][358261912313794][791 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:44:04][358261912313794][791 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358261912313794\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6078\"}'\'' -e'"" [2025-08-26 08:44:04][358261912313794][791 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:44:04][358261912313794][791 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358261912313794\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6078\"}'\'' -e'"" [2025-08-26 08:44:08][358261912313794][4711 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3768f8e6-b2ca-4909-b483-cc6d8ea1d1ff","id":"QR_3768f8e6-b2ca-4909-b483-cc6d8ea1d1ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:44:08][358261912313794][4868 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=3343 [2025-08-26 08:44:08][358261912313794][4868 ms][DEBUG] END runCmdUntilRes#1 in 4076 ms [2025-08-26 08:44:08][358261912313794][4868 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:45:03][357026895410979][0 ms][INFO] === Request start === [2025-08-26 08:45:03][357026895410979][1 ms][DEBUG] START check_scloud [2025-08-26 08:45:03][357026895410979][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:45:03][357026895410979][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 27603 4970 24439192 184644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:45:03][357026895410979][283 ms][DEBUG] targetPkg: running [2025-08-26 08:45:03][357026895410979][283 ms][DEBUG] END check_scloud in 282 ms [2025-08-26 08:45:03][357026895410979][283 ms][DEBUG] START check_boot_completed [2025-08-26 08:45:03][357026895410979][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:45:03][357026895410979][330 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 08:45:03][357026895410979][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:45:03][357026895410979][392 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 08:45:03][357026895410979][393 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 08:45:03][357026895410979][393 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:45:03][357026895410979][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357026895410979\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ECT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6896\"}'\'' -e'"" [2025-08-26 08:45:03][357026895410979][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:45:03][357026895410979][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357026895410979\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ECT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6896\"}'\'' -e'"" [2025-08-26 08:45:07][357026895410979][4266 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e0fe469a-575c-4a04-a2f2-b57f62696699","id":"QR_e0fe469a-575c-4a04-a2f2-b57f62696699","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:45:07][357026895410979][4422 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-26 08:45:07][357026895410979][4422 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-26 08:45:07][357026895410979][4423 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:46:03][350131655262334][1 ms][INFO] === Request start === [2025-08-26 08:46:03][350131655262334][1 ms][DEBUG] START check_scloud [2025-08-26 08:46:03][350131655262334][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:46:03][350131655262334][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 27603 4970 24605336 195104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:46:03][350131655262334][305 ms][DEBUG] targetPkg: running [2025-08-26 08:46:03][350131655262334][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 08:46:03][350131655262334][305 ms][DEBUG] START check_boot_completed [2025-08-26 08:46:03][350131655262334][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:46:03][350131655262334][350 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 08:46:03][350131655262334][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:46:03][350131655262334][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 08:46:03][350131655262334][397 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-26 08:46:03][350131655262334][397 ms][DEBUG] START check_internet [2025-08-26 08:46:03][350131655262334][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 08:46:03][350131655262334][694 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=191 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 191.211/191.211/191.211/0.000 ms\n [2025-08-26 08:46:03][350131655262334][694 ms][DEBUG] check_internet: online [2025-08-26 08:46:03][350131655262334][694 ms][DEBUG] END check_internet in 297 ms [2025-08-26 08:46:03][350131655262334][694 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:46:03][350131655262334][694 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350131655262334\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1828\"}'\'' -e'"" [2025-08-26 08:46:03][350131655262334][694 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:46:03][350131655262334][694 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350131655262334\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1828\"}'\'' -e'"" [2025-08-26 08:46:07][350131655262334][4584 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1d9cb788-40f6-4d25-a894-52aac385b466","id":"QR_1d9cb788-40f6-4d25-a894-52aac385b466","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:46:07][350131655262334][4740 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-08-26 08:46:07][350131655262334][4740 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-08-26 08:46:07][350131655262334][4740 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:47:03][356196384553513][0 ms][INFO] === Request start === [2025-08-26 08:47:03][356196384553513][1 ms][DEBUG] START check_scloud [2025-08-26 08:47:03][356196384553513][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:47:03][356196384553513][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 27603 4970 24715132 203892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:47:03][356196384553513][318 ms][DEBUG] targetPkg: running [2025-08-26 08:47:03][356196384553513][318 ms][DEBUG] END check_scloud in 318 ms [2025-08-26 08:47:03][356196384553513][318 ms][DEBUG] START check_boot_completed [2025-08-26 08:47:03][356196384553513][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:47:04][356196384553513][349 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 08:47:04][356196384553513][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:47:04][356196384553513][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 08:47:04][356196384553513][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 08:47:04][356196384553513][396 ms][DEBUG] rawBody.length=1147 [2025-08-26 08:47:04][356196384553513][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356196384553513\",\"model\":\"SM-T505\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ECT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1579\"}'\'' -e'"" [2025-08-26 08:47:04][356196384553513][396 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:47:04][356196384553513][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356196384553513\",\"model\":\"SM-T505\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ECT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1579\"}'\'' -e'"" [2025-08-26 08:47:08][356196384553513][4364 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8e04dd6-3e31-48f4-8453-6c26dc5eb7d2","id":"QR_b8e04dd6-3e31-48f4-8453-6c26dc5eb7d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:47:08][356196384553513][4520 ms][DEBUG] proc_open done in 4124 ms; code=255; res.len=3343 [2025-08-26 08:47:08][356196384553513][4520 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-26 08:47:08][356196384553513][4520 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:48:03][350637545717865][0 ms][INFO] === Request start === [2025-08-26 08:48:03][350637545717865][1 ms][DEBUG] START check_scloud [2025-08-26 08:48:03][350637545717865][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:48:03][350637545717865][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 27603 4970 24822880 214716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:48:03][350637545717865][271 ms][DEBUG] targetPkg: running [2025-08-26 08:48:03][350637545717865][271 ms][DEBUG] END check_scloud in 271 ms [2025-08-26 08:48:03][350637545717865][271 ms][DEBUG] START check_boot_completed [2025-08-26 08:48:03][350637545717865][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:48:03][350637545717865][318 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 08:48:03][350637545717865][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:48:03][350637545717865][381 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 08:48:03][350637545717865][381 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 08:48:03][350637545717865][381 ms][DEBUG] START check_internet [2025-08-26 08:48:03][350637545717865][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 08:48:04][350637545717865][693 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=206 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 206.445/206.445/206.445/0.000 ms\n [2025-08-26 08:48:04][350637545717865][694 ms][DEBUG] check_internet: online [2025-08-26 08:48:04][350637545717865][694 ms][DEBUG] END check_internet in 313 ms [2025-08-26 08:48:04][350637545717865][694 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:48:04][350637545717865][694 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637545717865\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"S08\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5784\"}'\'' -e'"" [2025-08-26 08:48:04][350637545717865][694 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:48:04][350637545717865][694 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637545717865\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"S08\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5784\"}'\'' -e'"" [2025-08-26 08:48:08][350637545717865][4723 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9b8566de-9789-4095-81d0-a303ef110ae1","id":"QR_9b8566de-9789-4095-81d0-a303ef110ae1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:48:08][350637545717865][4879 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-26 08:48:08][350637545717865][4879 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-26 08:48:08][350637545717865][4879 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:50:03][352990180026425][1 ms][INFO] === Request start === [2025-08-26 08:50:03][352990180026425][1 ms][DEBUG] START check_scloud [2025-08-26 08:50:03][352990180026425][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:50:03][352990180026425][303 ms][DEBUG] SU: done in 301 ms; outu0_a118 27603 4970 24961352 222028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:50:03][352990180026425][303 ms][DEBUG] targetPkg: running [2025-08-26 08:50:03][352990180026425][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 08:50:03][352990180026425][303 ms][DEBUG] START check_boot_completed [2025-08-26 08:50:03][352990180026425][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:50:03][352990180026425][350 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 08:50:03][352990180026425][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:50:04][352990180026425][412 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 08:50:04][352990180026425][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 08:50:04][352990180026425][412 ms][DEBUG] START check_internet [2025-08-26 08:50:04][352990180026425][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 08:50:04][352990180026425][818 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=99.7 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 99.778/99.778/99.778/0.000 ms\n [2025-08-26 08:50:04][352990180026425][818 ms][DEBUG] check_internet: online [2025-08-26 08:50:04][352990180026425][818 ms][DEBUG] END check_internet in 406 ms [2025-08-26 08:50:04][352990180026425][818 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:50:04][352990180026425][818 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352990180026425\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8060\"}'\'' -e'"" [2025-08-26 08:50:04][352990180026425][818 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:50:04][352990180026425][818 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352990180026425\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8060\"}'\'' -e'"" [2025-08-26 08:50:08][352990180026425][4895 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3e11a5a6-6d63-4923-ad4e-c360ed5baa92","id":"QR_3e11a5a6-6d63-4923-ad4e-c360ed5baa92","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:50:08][352990180026425][5051 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-26 08:50:08][352990180026425][5052 ms][DEBUG] END runCmdUntilRes#1 in 4234 ms [2025-08-26 08:50:08][352990180026425][5052 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:57:03][354747951643970][0 ms][INFO] === Request start === [2025-08-26 08:57:03][354747951643970][0 ms][DEBUG] START check_scloud [2025-08-26 08:57:03][354747951643970][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:57:03][354747951643970][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 27603 4970 25071968 221524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:57:03][354747951643970][312 ms][DEBUG] targetPkg: running [2025-08-26 08:57:03][354747951643970][312 ms][DEBUG] END check_scloud in 312 ms [2025-08-26 08:57:03][354747951643970][312 ms][DEBUG] START check_boot_completed [2025-08-26 08:57:03][354747951643970][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:57:03][354747951643970][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 08:57:03][354747951643970][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:57:03][354747951643970][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 08:57:03][354747951643970][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 08:57:03][354747951643970][421 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:57:03][354747951643970][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747951643970\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6566\"}'\'' -e'"" [2025-08-26 08:57:03][354747951643970][421 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:57:03][354747951643970][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747951643970\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6566\"}'\'' -e'"" [2025-08-26 08:57:07][354747951643970][4280 ms][DEBUG] proc_open done in 3858 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 08:57:07][354747951643970][4280 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-26 08:57:07][354747951643970][4280 ms][WARN] Detected error: Process with pid 27603 either refused to load frida-agent, or terminated during injection [2025-08-26 08:57:07][354747951643970][4280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 08:57:07][354747951643970][4405 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 08:57:07][354747951643970][4405 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 08:57:07][354747951643970][4405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 08:57:07][354747951643970][4545 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 08:57:07][354747951643970][4545 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 08:57:08][354747951643970][4733 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 08:57:10][354747951643970][6748 ms][DEBUG] START check_boot_completed [2025-08-26 08:57:10][354747951643970][6748 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:57:10][354747951643970][6779 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 08:57:10][354747951643970][6779 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:57:10][354747951643970][6826 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 08:57:10][354747951643970][6826 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 08:57:13][354747951643970][9841 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 08:57:13][354747951643970][9841 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747951643970\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6566\"}'\'' -e'"" [2025-08-26 08:57:16][354747951643970][13543 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dbb9e943-d6e0-40e6-a44a-1c34ec5a0cf7","id":"QR_dbb9e943-d6e0-40e6-a44a-1c34ec5a0cf7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:57:17][354747951643970][13699 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-26 08:57:17][354747951643970][13699 ms][DEBUG] END runCmdUntilRes#2 in 3859 ms [2025-08-26 08:57:17][354747951643970][13699 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 08:58:03][350635580033883][0 ms][INFO] === Request start === [2025-08-26 08:58:03][350635580033883][1 ms][DEBUG] START check_scloud [2025-08-26 08:58:03][350635580033883][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 08:58:04][350635580033883][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 29838 4970 23657392 127380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 08:58:04][350635580033883][270 ms][DEBUG] targetPkg: running [2025-08-26 08:58:04][350635580033883][270 ms][DEBUG] END check_scloud in 270 ms [2025-08-26 08:58:04][350635580033883][270 ms][DEBUG] START check_boot_completed [2025-08-26 08:58:04][350635580033883][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 08:58:04][350635580033883][317 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 08:58:04][350635580033883][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 08:58:04][350635580033883][364 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 08:58:04][350635580033883][364 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 08:58:04][350635580033883][364 ms][DEBUG] START check_internet [2025-08-26 08:58:04][350635580033883][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 08:58:04][350635580033883][707 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=101 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 101.178/101.178/101.178/0.000 ms\n [2025-08-26 08:58:04][350635580033883][708 ms][DEBUG] check_internet: online [2025-08-26 08:58:04][350635580033883][708 ms][DEBUG] END check_internet in 344 ms [2025-08-26 08:58:04][350635580033883][708 ms][DEBUG] rawBody.length=1148 [2025-08-26 08:58:04][350635580033883][708 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350635580033883\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2707\"}'\'' -e'"" [2025-08-26 08:58:04][350635580033883][708 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 08:58:04][350635580033883][708 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350635580033883\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2707\"}'\'' -e'"" [2025-08-26 08:58:08][350635580033883][4628 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_06722db7-0c81-45be-9490-651347bb6822","id":"QR_06722db7-0c81-45be-9490-651347bb6822","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 08:58:08][350635580033883][4784 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=3343 [2025-08-26 08:58:08][350635580033883][4784 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-26 08:58:08][350635580033883][4784 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:02:02][352731457083891][1 ms][INFO] === Request start === [2025-08-26 09:02:02][352731457083891][1 ms][DEBUG] START check_scloud [2025-08-26 09:02:02][352731457083891][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:02:03][352731457083891][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 29838 4970 23748616 138196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:02:03][352731457083891][258 ms][DEBUG] targetPkg: running [2025-08-26 09:02:03][352731457083891][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-26 09:02:03][352731457083891][258 ms][DEBUG] START check_boot_completed [2025-08-26 09:02:03][352731457083891][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:02:03][352731457083891][289 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 09:02:03][352731457083891][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:02:03][352731457083891][336 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:02:03][352731457083891][336 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 09:02:03][352731457083891][336 ms][DEBUG] START check_internet [2025-08-26 09:02:03][352731457083891][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:02:03][352731457083891][743 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=99.8 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 99.876/99.876/99.876/0.000 ms\n [2025-08-26 09:02:03][352731457083891][743 ms][DEBUG] check_internet: online [2025-08-26 09:02:03][352731457083891][743 ms][DEBUG] END check_internet in 406 ms [2025-08-26 09:02:03][352731457083891][743 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:02:03][352731457083891][743 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352731457083891\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7691\"}'\'' -e'"" [2025-08-26 09:02:03][352731457083891][743 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:02:03][352731457083891][743 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352731457083891\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7691\"}'\'' -e'"" [2025-08-26 09:02:07][352731457083891][4757 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c9f37db1-ace2-4074-8c16-baeb389bdd1a","id":"QR_c9f37db1-ace2-4074-8c16-baeb389bdd1a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:02:07][352731457083891][4913 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-26 09:02:07][352731457083891][4913 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-26 09:02:07][352731457083891][4913 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:03:03][355497599065223][0 ms][INFO] === Request start === [2025-08-26 09:03:03][355497599065223][1 ms][DEBUG] START check_scloud [2025-08-26 09:03:03][355497599065223][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:03:04][355497599065223][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 29838 4970 23875820 149988 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:03:04][355497599065223][303 ms][DEBUG] targetPkg: running [2025-08-26 09:03:04][355497599065223][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 09:03:04][355497599065223][303 ms][DEBUG] START check_boot_completed [2025-08-26 09:03:04][355497599065223][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:03:04][355497599065223][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 09:03:04][355497599065223][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:03:04][355497599065223][412 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 09:03:04][355497599065223][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 09:03:04][355497599065223][412 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:03:04][355497599065223][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355497599065223\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9360\"}'\'' -e'"" [2025-08-26 09:03:04][355497599065223][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:03:04][355497599065223][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355497599065223\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9360\"}'\'' -e'"" [2025-08-26 09:03:08][355497599065223][4333 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_445a5ef2-0c45-48e0-bb9b-0c9d573ea671","id":"QR_445a5ef2-0c45-48e0-bb9b-0c9d573ea671","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:03:08][355497599065223][4489 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-26 09:03:08][355497599065223][4489 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-26 09:03:08][355497599065223][4489 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:03:10][350471125178821][0 ms][INFO] === Request start === [2025-08-26 09:03:10][350471125178821][1 ms][DEBUG] START check_scloud [2025-08-26 09:03:10][350471125178821][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:03:11][350471125178821][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 29838 4970 24050996 161016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:03:11][350471125178821][307 ms][DEBUG] targetPkg: running [2025-08-26 09:03:11][350471125178821][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 09:03:11][350471125178821][307 ms][DEBUG] START check_boot_completed [2025-08-26 09:03:11][350471125178821][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:03:11][350471125178821][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:03:11][350471125178821][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:03:11][350471125178821][416 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 09:03:11][350471125178821][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 09:03:11][350471125178821][416 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:03:11][350471125178821][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471125178821\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7643\"}'\'' -e'"" [2025-08-26 09:03:11][350471125178821][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:03:11][350471125178821][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471125178821\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7643\"}'\'' -e'"" [2025-08-26 09:03:15][350471125178821][4587 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9680397e-0d50-4cbf-8c86-436c92d4cc9a","id":"QR_9680397e-0d50-4cbf-8c86-436c92d4cc9a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:03:15][350471125178821][4743 ms][DEBUG] proc_open done in 4327 ms; code=255; res.len=3343 [2025-08-26 09:03:15][350471125178821][4743 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-26 09:03:15][350471125178821][4743 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:03:22][350471125178821][0 ms][INFO] === Request start === [2025-08-26 09:03:22][350471125178821][1 ms][DEBUG] START check_scloud [2025-08-26 09:03:22][350471125178821][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:03:22][350471125178821][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 29838 4970 24212028 172096 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:03:22][350471125178821][304 ms][DEBUG] targetPkg: running [2025-08-26 09:03:22][350471125178821][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-26 09:03:22][350471125178821][304 ms][DEBUG] START check_boot_completed [2025-08-26 09:03:22][350471125178821][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:03:22][350471125178821][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 09:03:22][350471125178821][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:03:22][350471125178821][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:03:22][350471125178821][397 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 09:03:22][350471125178821][397 ms][DEBUG] rawBody.length=1149 [2025-08-26 09:03:22][350471125178821][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471125178821\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6009\"}'\'' -e'"" [2025-08-26 09:03:22][350471125178821][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:03:22][350471125178821][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471125178821\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6009\"}'\'' -e'"" [2025-08-26 09:03:28][350471125178821][5536 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_23d65e5e-e944-412d-a5da-b637841c47b3","id":"QR_23d65e5e-e944-412d-a5da-b637841c47b3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:03:28][350471125178821][5693 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-08-26 09:03:28][350471125178821][5693 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-08-26 09:03:28][350471125178821][5693 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:05:03][351199558454745][1 ms][INFO] === Request start === [2025-08-26 09:05:03][351199558454745][1 ms][DEBUG] START check_scloud [2025-08-26 09:05:03][351199558454745][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:05:03][351199558454745][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 29838 4970 24327768 184168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:05:03][351199558454745][287 ms][DEBUG] targetPkg: running [2025-08-26 09:05:03][351199558454745][287 ms][DEBUG] END check_scloud in 286 ms [2025-08-26 09:05:03][351199558454745][287 ms][DEBUG] START check_boot_completed [2025-08-26 09:05:03][351199558454745][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:05:03][351199558454745][318 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 09:05:03][351199558454745][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:05:03][351199558454745][365 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:05:03][351199558454745][365 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 09:05:03][351199558454745][365 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:05:03][351199558454745][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199558454745\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4838\"}'\'' -e'"" [2025-08-26 09:05:03][351199558454745][365 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:05:03][351199558454745][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199558454745\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4838\"}'\'' -e'"" [2025-08-26 09:05:07][351199558454745][4302 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7417b2fd-2223-4605-9aca-e45f3a55b281","id":"QR_7417b2fd-2223-4605-9aca-e45f3a55b281","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:05:08][351199558454745][4458 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-08-26 09:05:08][351199558454745][4458 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-08-26 09:05:08][351199558454745][4458 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:05:10][355128630817765][0 ms][INFO] === Request start === [2025-08-26 09:05:10][355128630817765][0 ms][DEBUG] START check_scloud [2025-08-26 09:05:10][355128630817765][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:05:10][355128630817765][287 ms][DEBUG] SU: done in 287 ms; outu0_a118 29838 4970 24501088 195100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:05:10][355128630817765][287 ms][DEBUG] targetPkg: running [2025-08-26 09:05:10][355128630817765][287 ms][DEBUG] END check_scloud in 287 ms [2025-08-26 09:05:10][355128630817765][287 ms][DEBUG] START check_boot_completed [2025-08-26 09:05:10][355128630817765][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:05:11][355128630817765][334 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 09:05:11][355128630817765][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:05:11][355128630817765][396 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 09:05:11][355128630817765][396 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 09:05:11][355128630817765][396 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:05:11][355128630817765][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355128630817765\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3976\"}'\'' -e'"" [2025-08-26 09:05:11][355128630817765][396 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:05:11][355128630817765][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355128630817765\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3976\"}'\'' -e'"" [2025-08-26 09:05:14][355128630817765][4145 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_30596ec3-d0c4-41b3-a264-da430f368a1a","id":"QR_30596ec3-d0c4-41b3-a264-da430f368a1a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:05:14][355128630817765][4301 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-26 09:05:14][355128630817765][4302 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-26 09:05:14][355128630817765][4302 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:07:03][352978604949306][0 ms][INFO] === Request start === [2025-08-26 09:07:03][352978604949306][1 ms][DEBUG] START check_scloud [2025-08-26 09:07:03][352978604949306][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:07:03][352978604949306][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 29838 4970 24643616 207200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:07:03][352978604949306][263 ms][DEBUG] targetPkg: running [2025-08-26 09:07:03][352978604949306][263 ms][DEBUG] END check_scloud in 262 ms [2025-08-26 09:07:03][352978604949306][263 ms][DEBUG] START check_boot_completed [2025-08-26 09:07:03][352978604949306][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:07:03][352978604949306][308 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 09:07:03][352978604949306][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:07:03][352978604949306][355 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:07:03][352978604949306][355 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-26 09:07:03][352978604949306][355 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:07:03][352978604949306][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978604949306\",\"model\":\"SM-M326B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6181\"}'\'' -e'"" [2025-08-26 09:07:03][352978604949306][355 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:07:03][352978604949306][355 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978604949306\",\"model\":\"SM-M326B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6181\"}'\'' -e'"" [2025-08-26 09:07:07][352978604949306][4479 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1c45ec5e-5908-48e3-853c-670396223631","id":"QR_1c45ec5e-5908-48e3-853c-670396223631","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:07:07][352978604949306][4635 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-26 09:07:07][352978604949306][4635 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-26 09:07:07][352978604949306][4635 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:08:03][356054117921269][1 ms][INFO] === Request start === [2025-08-26 09:08:03][356054117921269][1 ms][DEBUG] START check_scloud [2025-08-26 09:08:03][356054117921269][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:08:03][356054117921269][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 29838 4970 24794244 218388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:08:03][356054117921269][270 ms][DEBUG] targetPkg: running [2025-08-26 09:08:03][356054117921269][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-26 09:08:03][356054117921269][270 ms][DEBUG] START check_boot_completed [2025-08-26 09:08:03][356054117921269][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:08:03][356054117921269][316 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:08:03][356054117921269][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:08:03][356054117921269][426 ms][DEBUG] SU: done in 109 ms; out [2025-08-26 09:08:03][356054117921269][426 ms][DEBUG] END check_boot_completed in 156 ms [2025-08-26 09:08:03][356054117921269][426 ms][DEBUG] START check_internet [2025-08-26 09:08:03][356054117921269][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:08:03][356054117921269][832 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=99.7 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 99.772/99.772/99.772/0.000 ms\n [2025-08-26 09:08:03][356054117921269][832 ms][DEBUG] check_internet: online [2025-08-26 09:08:03][356054117921269][832 ms][DEBUG] END check_internet in 406 ms [2025-08-26 09:08:03][356054117921269][832 ms][DEBUG] rawBody.length=1147 [2025-08-26 09:08:03][356054117921269][832 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356054117921269\",\"model\":\"SM-T505\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8680\"}'\'' -e'"" [2025-08-26 09:08:03][356054117921269][832 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:08:03][356054117921269][832 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356054117921269\",\"model\":\"SM-T505\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8680\"}'\'' -e'"" [2025-08-26 09:08:07][356054117921269][4721 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4e6b3b02-9938-4d8f-840f-ae514d71d107","id":"QR_4e6b3b02-9938-4d8f-840f-ae514d71d107","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:08:07][356054117921269][4878 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-08-26 09:08:07][356054117921269][4878 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-08-26 09:08:07][356054117921269][4878 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:12:03][352838650033936][1 ms][INFO] === Request start === [2025-08-26 09:12:03][352838650033936][1 ms][DEBUG] START check_scloud [2025-08-26 09:12:03][352838650033936][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:12:04][352838650033936][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 29838 4970 24907496 229968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:12:04][352838650033936][306 ms][DEBUG] targetPkg: running [2025-08-26 09:12:04][352838650033936][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-26 09:12:04][352838650033936][306 ms][DEBUG] START check_boot_completed [2025-08-26 09:12:04][352838650033936][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:12:04][352838650033936][337 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 09:12:04][352838650033936][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:12:04][352838650033936][386 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 09:12:04][352838650033936][386 ms][DEBUG] END check_boot_completed in 80 ms [2025-08-26 09:12:04][352838650033936][386 ms][DEBUG] START check_internet [2025-08-26 09:12:04][352838650033936][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:12:04][352838650033936][744 ms][DEBUG] SU: done in 358 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=101 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 101.210/101.210/101.210/0.000 ms\n [2025-08-26 09:12:04][352838650033936][744 ms][DEBUG] check_internet: online [2025-08-26 09:12:04][352838650033936][744 ms][DEBUG] END check_internet in 358 ms [2025-08-26 09:12:04][352838650033936][744 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:12:04][352838650033936][744 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838650033936\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8416\"}'\'' -e'"" [2025-08-26 09:12:04][352838650033936][744 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:12:04][352838650033936][744 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838650033936\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8416\"}'\'' -e'"" [2025-08-26 09:12:08][352838650033936][4555 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e41fc813-430c-431c-a6f4-953a6fe009b3","id":"QR_e41fc813-430c-431c-a6f4-953a6fe009b3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:12:08][352838650033936][4711 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-26 09:12:08][352838650033936][4712 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-26 09:12:08][352838650033936][4712 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:12:11][350928505987790][0 ms][INFO] === Request start === [2025-08-26 09:12:11][350928505987790][1 ms][DEBUG] START check_scloud [2025-08-26 09:12:11][350928505987790][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:12:11][350928505987790][299 ms][DEBUG] SU: done in 299 ms; outu0_a118 29838 4970 25072628 240808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:12:11][350928505987790][300 ms][DEBUG] targetPkg: running [2025-08-26 09:12:11][350928505987790][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-26 09:12:11][350928505987790][300 ms][DEBUG] START check_boot_completed [2025-08-26 09:12:11][350928505987790][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:12:11][350928505987790][331 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 09:12:11][350928505987790][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:12:11][350928505987790][378 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:12:11][350928505987790][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 09:12:11][350928505987790][378 ms][DEBUG] START check_internet [2025-08-26 09:12:11][350928505987790][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:12:11][350928505987790][613 ms][DEBUG] SU: done in 235 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=123 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 123.583/123.583/123.583/0.000 ms\n [2025-08-26 09:12:11][350928505987790][614 ms][DEBUG] check_internet: online [2025-08-26 09:12:11][350928505987790][614 ms][DEBUG] END check_internet in 236 ms [2025-08-26 09:12:11][350928505987790][614 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:12:11][350928505987790][614 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350928505987790\",\"model\":\"SM-G990B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3639\"}'\'' -e'"" [2025-08-26 09:12:11][350928505987790][614 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:12:11][350928505987790][614 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350928505987790\",\"model\":\"SM-G990B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3639\"}'\'' -e'"" [2025-08-26 09:12:15][350928505987790][4346 ms][DEBUG] proc_open done in 3732 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 09:12:15][350928505987790][4346 ms][DEBUG] END runCmdUntilRes#1 in 3732 ms [2025-08-26 09:12:15][350928505987790][4346 ms][WARN] Detected error: Process with pid 29838 either refused to load frida-agent, or terminated during injection [2025-08-26 09:12:15][350928505987790][4346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 09:12:15][350928505987790][4486 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 09:12:15][350928505987790][4486 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 09:12:15][350928505987790][4486 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 09:12:15][350928505987790][4611 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 09:12:15][350928505987790][4611 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 09:12:15][350928505987790][4783 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 09:12:17][350928505987790][6798 ms][DEBUG] START check_boot_completed [2025-08-26 09:12:17][350928505987790][6798 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:12:17][350928505987790][6845 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:12:17][350928505987790][6845 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:12:17][350928505987790][6907 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 09:12:17][350928505987790][6908 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 09:12:20][350928505987790][9922 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 09:12:20][350928505987790][9922 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350928505987790\",\"model\":\"SM-G990B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3639\"}'\'' -e'"" [2025-08-26 09:12:25][350928505987790][14405 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d635eb6e-d85c-46bf-b667-dfad4b0d7029","id":"QR_d635eb6e-d85c-46bf-b667-dfad4b0d7029","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:12:25][350928505987790][14562 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=3343 [2025-08-26 09:12:25][350928505987790][14562 ms][DEBUG] END runCmdUntilRes#2 in 4640 ms [2025-08-26 09:12:25][350928505987790][14562 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:16:03][357962508963584][1 ms][INFO] === Request start === [2025-08-26 09:16:03][357962508963584][1 ms][DEBUG] START check_scloud [2025-08-26 09:16:03][357962508963584][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:16:03][357962508963584][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 31176 4970 23647516 127816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:16:03][357962508963584][317 ms][DEBUG] targetPkg: running [2025-08-26 09:16:03][357962508963584][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-26 09:16:03][357962508963584][317 ms][DEBUG] START check_boot_completed [2025-08-26 09:16:03][357962508963584][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:16:03][357962508963584][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:16:03][357962508963584][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:16:03][357962508963584][426 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 09:16:03][357962508963584][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 09:16:03][357962508963584][426 ms][DEBUG] START check_internet [2025-08-26 09:16:03][357962508963584][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:16:04][357962508963584][800 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=100 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 100.188/100.188/100.188/0.000 ms\n [2025-08-26 09:16:04][357962508963584][801 ms][DEBUG] check_internet: online [2025-08-26 09:16:04][357962508963584][801 ms][DEBUG] END check_internet in 375 ms [2025-08-26 09:16:04][357962508963584][801 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:16:04][357962508963584][801 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508963584\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8092\"}'\'' -e'"" [2025-08-26 09:16:04][357962508963584][801 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:16:04][357962508963584][801 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962508963584\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8092\"}'\'' -e'"" [2025-08-26 09:16:08][357962508963584][5346 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7ee0eb0c-2d4b-424c-b4ca-da0d1c296a22","id":"QR_7ee0eb0c-2d4b-424c-b4ca-da0d1c296a22","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:16:08][357962508963584][5503 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-08-26 09:16:08][357962508963584][5503 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-08-26 09:16:08][357962508963584][5503 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:18:29][352060480480829][1 ms][INFO] === Request start === [2025-08-26 09:18:29][352060480480829][1 ms][DEBUG] START check_scloud [2025-08-26 09:18:29][352060480480829][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:18:30][352060480480829][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 31176 4970 23797176 138580 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:18:30][352060480480829][310 ms][DEBUG] targetPkg: running [2025-08-26 09:18:30][352060480480829][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 09:18:30][352060480480829][310 ms][DEBUG] START check_boot_completed [2025-08-26 09:18:30][352060480480829][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:18:30][352060480480829][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 09:18:30][352060480480829][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:18:30][352060480480829][390 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 09:18:30][352060480480829][390 ms][DEBUG] END check_boot_completed in 80 ms [2025-08-26 09:18:30][352060480480829][390 ms][DEBUG] START check_internet [2025-08-26 09:18:30][352060480480829][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:18:30][352060480480829][732 ms][DEBUG] SU: done in 342 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=100 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 100.151/100.151/100.151/0.000 ms\n [2025-08-26 09:18:30][352060480480829][732 ms][DEBUG] check_internet: online [2025-08-26 09:18:30][352060480480829][732 ms][DEBUG] END check_internet in 342 ms [2025-08-26 09:18:30][352060480480829][732 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:18:30][352060480480829][732 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060480480829\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3251\"}'\'' -e'"" [2025-08-26 09:18:30][352060480480829][732 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:18:30][352060480480829][732 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060480480829\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3251\"}'\'' -e'"" [2025-08-26 09:18:34][352060480480829][4653 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_58331979-73d7-439d-85ee-e394e9667745","id":"QR_58331979-73d7-439d-85ee-e394e9667745","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:18:34][352060480480829][4809 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=3343 [2025-08-26 09:18:34][352060480480829][4809 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-26 09:18:34][352060480480829][4809 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:24:03][352961651114636][1 ms][INFO] === Request start === [2025-08-26 09:24:03][352961651114636][1 ms][DEBUG] START check_scloud [2025-08-26 09:24:03][352961651114636][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:24:03][352961651114636][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 31176 4970 23939612 150348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:24:03][352961651114636][298 ms][DEBUG] targetPkg: running [2025-08-26 09:24:03][352961651114636][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-26 09:24:03][352961651114636][298 ms][DEBUG] START check_boot_completed [2025-08-26 09:24:03][352961651114636][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:24:03][352961651114636][329 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 09:24:03][352961651114636][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:24:03][352961651114636][376 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:24:03][352961651114636][376 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 09:24:03][352961651114636][376 ms][DEBUG] START check_internet [2025-08-26 09:24:03][352961651114636][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:24:03][352961651114636][751 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=99.9 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 99.980/99.980/99.980/0.000 ms\n [2025-08-26 09:24:03][352961651114636][751 ms][DEBUG] check_internet: online [2025-08-26 09:24:03][352961651114636][751 ms][DEBUG] END check_internet in 375 ms [2025-08-26 09:24:03][352961651114636][751 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:24:03][352961651114636][751 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352961651114636\",\"model\":\"SM-M336K\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4345\"}'\'' -e'"" [2025-08-26 09:24:03][352961651114636][751 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:24:03][352961651114636][751 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352961651114636\",\"model\":\"SM-M336K\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4345\"}'\'' -e'"" [2025-08-26 09:24:07][352961651114636][4719 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_12d41a76-cdc6-41ac-8405-13c4eab19150","id":"QR_12d41a76-cdc6-41ac-8405-13c4eab19150","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:24:08][352961651114636][4875 ms][DEBUG] proc_open done in 4124 ms; code=255; res.len=3343 [2025-08-26 09:24:08][352961651114636][4875 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-26 09:24:08][352961651114636][4875 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:25:05][355100981527269][0 ms][INFO] === Request start === [2025-08-26 09:25:05][355100981527269][1 ms][DEBUG] START check_scloud [2025-08-26 09:25:05][355100981527269][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:25:05][355100981527269][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 31176 4970 24061440 161324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:25:05][355100981527269][307 ms][DEBUG] targetPkg: running [2025-08-26 09:25:05][355100981527269][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 09:25:05][355100981527269][307 ms][DEBUG] START check_boot_completed [2025-08-26 09:25:05][355100981527269][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:25:05][355100981527269][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 09:25:05][355100981527269][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:25:05][355100981527269][402 ms][DEBUG] SU: done in 49 ms; out [2025-08-26 09:25:05][355100981527269][402 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 09:25:05][355100981527269][402 ms][DEBUG] rawBody.length=1149 [2025-08-26 09:25:05][355100981527269][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355100981527269\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1499\"}'\'' -e'"" [2025-08-26 09:25:05][355100981527269][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:25:05][355100981527269][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355100981527269\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1499\"}'\'' -e'"" [2025-08-26 09:25:11][355100981527269][5868 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f590cfaa-b82c-468e-8ccd-1147655b3efe","id":"QR_f590cfaa-b82c-468e-8ccd-1147655b3efe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:25:11][355100981527269][6024 ms][DEBUG] proc_open done in 5621 ms; code=255; res.len=3343 [2025-08-26 09:25:11][355100981527269][6024 ms][DEBUG] END runCmdUntilRes#1 in 5622 ms [2025-08-26 09:25:11][355100981527269][6024 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:25:17][357699981116278][0 ms][INFO] === Request start === [2025-08-26 09:25:17][357699981116278][1 ms][DEBUG] START check_scloud [2025-08-26 09:25:17][357699981116278][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:25:18][357699981116278][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 31176 4970 24181384 171948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:25:18][357699981116278][315 ms][DEBUG] targetPkg: running [2025-08-26 09:25:18][357699981116278][315 ms][DEBUG] END check_scloud in 315 ms [2025-08-26 09:25:18][357699981116278][315 ms][DEBUG] START check_boot_completed [2025-08-26 09:25:18][357699981116278][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:25:18][357699981116278][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:25:18][357699981116278][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:25:18][357699981116278][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:25:18][357699981116278][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 09:25:18][357699981116278][409 ms][DEBUG] rawBody.length=1149 [2025-08-26 09:25:18][357699981116278][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357699981116278\",\"model\":\"SM-A066M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2660\"}'\'' -e'"" [2025-08-26 09:25:18][357699981116278][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:25:18][357699981116278][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357699981116278\",\"model\":\"SM-A066M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2660\"}'\'' -e'"" [2025-08-26 09:25:23][357699981116278][5345 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_851ed925-cd11-44e5-a5e2-51cf6cc7dacd","id":"QR_851ed925-cd11-44e5-a5e2-51cf6cc7dacd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:25:23][357699981116278][5501 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-08-26 09:25:23][357699981116278][5501 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-08-26 09:25:23][357699981116278][5501 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:26:03][357950541152174][0 ms][INFO] === Request start === [2025-08-26 09:26:03][357950541152174][1 ms][DEBUG] START check_scloud [2025-08-26 09:26:03][357950541152174][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:26:04][357950541152174][269 ms][DEBUG] SU: done in 269 ms; outu0_a118 31176 4970 24289096 184072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:26:04][357950541152174][270 ms][DEBUG] targetPkg: running [2025-08-26 09:26:04][357950541152174][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-26 09:26:04][357950541152174][270 ms][DEBUG] START check_boot_completed [2025-08-26 09:26:04][357950541152174][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:26:04][357950541152174][316 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 09:26:04][357950541152174][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:26:04][357950541152174][363 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:26:04][357950541152174][363 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 09:26:04][357950541152174][363 ms][DEBUG] START check_internet [2025-08-26 09:26:04][357950541152174][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:26:04][357950541152174][613 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=147 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 147.310/147.310/147.310/0.000 ms\n [2025-08-26 09:26:04][357950541152174][613 ms][DEBUG] check_internet: online [2025-08-26 09:26:04][357950541152174][613 ms][DEBUG] END check_internet in 250 ms [2025-08-26 09:26:04][357950541152174][613 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:26:04][357950541152174][614 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950541152174\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4963\"}'\'' -e'"" [2025-08-26 09:26:04][357950541152174][614 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:26:04][357950541152174][614 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357950541152174\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4963\"}'\'' -e'"" [2025-08-26 09:26:08][357950541152174][4487 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b393bd98-e05d-4f6a-aae2-889c55217953","id":"QR_b393bd98-e05d-4f6a-aae2-889c55217953","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:26:08][357950541152174][4643 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-26 09:26:08][357950541152174][4644 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-26 09:26:08][357950541152174][4644 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:29:02][351978522095977][1 ms][INFO] === Request start === [2025-08-26 09:29:02][351978522095977][1 ms][DEBUG] START check_scloud [2025-08-26 09:29:02][351978522095977][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:29:03][351978522095977][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 31176 4970 24423340 194980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:29:03][351978522095977][305 ms][DEBUG] targetPkg: running [2025-08-26 09:29:03][351978522095977][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 09:29:03][351978522095977][305 ms][DEBUG] START check_boot_completed [2025-08-26 09:29:03][351978522095977][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:29:03][351978522095977][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 09:29:03][351978522095977][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:29:03][351978522095977][414 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 09:29:03][351978522095977][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 09:29:03][351978522095977][414 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:29:03][351978522095977][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522095977\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2164\"}'\'' -e'"" [2025-08-26 09:29:03][351978522095977][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:29:03][351978522095977][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522095977\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2164\"}'\'' -e'"" [2025-08-26 09:29:07][351978522095977][4741 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0ced412-5edd-400e-aa9a-aa81d3998ff6","id":"QR_b0ced412-5edd-400e-aa9a-aa81d3998ff6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:29:07][351978522095977][4897 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-08-26 09:29:07][351978522095977][4897 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-26 09:29:07][351978522095977][4897 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:29:10][354068195636948][0 ms][INFO] === Request start === [2025-08-26 09:29:10][354068195636948][1 ms][DEBUG] START check_scloud [2025-08-26 09:29:10][354068195636948][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:29:10][354068195636948][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 31176 4970 24594484 206928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:29:10][354068195636948][314 ms][DEBUG] targetPkg: running [2025-08-26 09:29:10][354068195636948][314 ms][DEBUG] END check_scloud in 314 ms [2025-08-26 09:29:10][354068195636948][315 ms][DEBUG] START check_boot_completed [2025-08-26 09:29:10][354068195636948][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:29:10][354068195636948][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:29:10][354068195636948][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:29:10][354068195636948][424 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 09:29:10][354068195636948][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 09:29:10][354068195636948][424 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:29:10][354068195636948][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195636948\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1117\"}'\'' -e'"" [2025-08-26 09:29:10][354068195636948][424 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:29:10][354068195636948][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195636948\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1117\"}'\'' -e'"" [2025-08-26 09:29:14][354068195636948][4079 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_28784a77-75ea-4dec-a3e1-003a1baaa5a2","id":"QR_28784a77-75ea-4dec-a3e1-003a1baaa5a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:29:14][354068195636948][4235 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-26 09:29:14][354068195636948][4235 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-26 09:29:14][354068195636948][4235 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:29:17][351240642030826][0 ms][INFO] === Request start === [2025-08-26 09:29:17][351240642030826][1 ms][DEBUG] START check_scloud [2025-08-26 09:29:17][351240642030826][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:29:17][351240642030826][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 31176 4970 24745212 217216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:29:17][351240642030826][265 ms][DEBUG] targetPkg: running [2025-08-26 09:29:17][351240642030826][265 ms][DEBUG] END check_scloud in 265 ms [2025-08-26 09:29:17][351240642030826][265 ms][DEBUG] START check_boot_completed [2025-08-26 09:29:17][351240642030826][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:29:17][351240642030826][312 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:29:17][351240642030826][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:29:17][351240642030826][374 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 09:29:17][351240642030826][374 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 09:29:17][351240642030826][375 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:29:17][351240642030826][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642030826\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7153\"}'\'' -e'"" [2025-08-26 09:29:17][351240642030826][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:29:17][351240642030826][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642030826\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7153\"}'\'' -e'"" [2025-08-26 09:29:21][351240642030826][4045 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ee7e387-e0c0-440e-9a17-6ca2614d20ff","id":"QR_5ee7e387-e0c0-440e-9a17-6ca2614d20ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:29:21][351240642030826][4201 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=3343 [2025-08-26 09:29:21][351240642030826][4202 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-26 09:29:21][351240642030826][4202 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:31:03][353684147536019][1 ms][INFO] === Request start === [2025-08-26 09:31:03][353684147536019][1 ms][DEBUG] START check_scloud [2025-08-26 09:31:03][353684147536019][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:31:03][353684147536019][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 31176 4970 24822168 229308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:31:03][353684147536019][276 ms][DEBUG] targetPkg: running [2025-08-26 09:31:03][353684147536019][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-26 09:31:03][353684147536019][276 ms][DEBUG] START check_boot_completed [2025-08-26 09:31:03][353684147536019][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:31:03][353684147536019][322 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 09:31:03][353684147536019][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:31:03][353684147536019][385 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 09:31:03][353684147536019][385 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 09:31:03][353684147536019][385 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:31:03][353684147536019][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684147536019\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9500\"}'\'' -e'"" [2025-08-26 09:31:03][353684147536019][385 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:31:03][353684147536019][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684147536019\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9500\"}'\'' -e'"" [2025-08-26 09:31:07][353684147536019][4634 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ceeac709-ec11-40b7-8ee8-2de57b6b55d0","id":"QR_ceeac709-ec11-40b7-8ee8-2de57b6b55d0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:31:07][353684147536019][4790 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3343 [2025-08-26 09:31:07][353684147536019][4790 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-26 09:31:07][353684147536019][4790 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:33:29][351642485570646][1 ms][INFO] === Request start === [2025-08-26 09:33:29][351642485570646][1 ms][DEBUG] START check_scloud [2025-08-26 09:33:29][351642485570646][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:33:29][351642485570646][319 ms][DEBUG] SU: done in 317 ms; outu0_a118 31176 4970 24979996 105636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:33:29][351642485570646][319 ms][DEBUG] targetPkg: running [2025-08-26 09:33:29][351642485570646][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-26 09:33:29][351642485570646][319 ms][DEBUG] START check_boot_completed [2025-08-26 09:33:29][351642485570646][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:33:29][351642485570646][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 09:33:29][351642485570646][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:33:29][351642485570646][444 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 09:33:29][351642485570646][444 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 09:33:29][351642485570646][444 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:33:29][351642485570646][444 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642485570646\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9394\"}'\'' -e'"" [2025-08-26 09:33:29][351642485570646][444 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:33:29][351642485570646][444 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642485570646\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9394\"}'\'' -e'"" [2025-08-26 09:33:34][351642485570646][4974 ms][DEBUG] proc_open done in 4530 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 09:33:34][351642485570646][4974 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-08-26 09:33:34][351642485570646][4974 ms][WARN] Detected error: Process with pid 31176 either refused to load frida-agent, or terminated during injection [2025-08-26 09:33:34][351642485570646][4974 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 09:33:34][351642485570646][5114 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 09:33:34][351642485570646][5114 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 09:33:34][351642485570646][5115 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 09:33:34][351642485570646][5255 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 09:33:34][351642485570646][5255 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 09:33:34][351642485570646][5521 ms][DEBUG] SU: done in 265 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 09:33:36][351642485570646][7535 ms][DEBUG] START check_boot_completed [2025-08-26 09:33:36][351642485570646][7536 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:33:36][351642485570646][7583 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:33:36][351642485570646][7583 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:33:36][351642485570646][7645 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 09:33:36][351642485570646][7645 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 09:33:39][351642485570646][10660 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 09:33:39][351642485570646][10660 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642485570646\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9394\"}'\'' -e'"" [2025-08-26 09:33:43][351642485570646][14175 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 09:33:43][351642485570646][14331 ms][DEBUG] proc_open done in 3671 ms; code=255; res.len=107 [2025-08-26 09:33:43][351642485570646][14331 ms][DEBUG] END runCmdUntilRes#2 in 3671 ms [2025-08-26 09:33:43][351642485570646][14331 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 09:33:43][][0 ms][INFO] === Request start === [2025-08-26 09:33:43][][1 ms][DEBUG] START check_scloud [2025-08-26 09:33:43][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:33:44][][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 2410 4970 23787676 123652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:33:44][][264 ms][DEBUG] targetPkg: running [2025-08-26 09:33:44][][264 ms][DEBUG] END check_scloud in 263 ms [2025-08-26 09:33:44][][264 ms][DEBUG] START check_boot_completed [2025-08-26 09:33:44][][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:33:44][][295 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 09:33:44][][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:33:44][][342 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:33:44][][342 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 09:33:44][][342 ms][DEBUG] rawBody.length=1129 [2025-08-26 09:33:44][][342 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X5069Z8B\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8591\"}'\'' -e'"" [2025-08-26 09:33:44][][342 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:33:44][][342 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X5069Z8B\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8591\"}'\'' -e'"" [2025-08-26 09:33:47][][3747 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 09:33:47][][3903 ms][DEBUG] proc_open done in 3562 ms; code=255; res.len=107 [2025-08-26 09:33:47][][3903 ms][DEBUG] END runCmdUntilRes#1 in 3562 ms [2025-08-26 09:33:47][][3904 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 09:33:50][351642485570646][0 ms][INFO] === Request start === [2025-08-26 09:33:50][351642485570646][1 ms][DEBUG] START check_scloud [2025-08-26 09:33:50][351642485570646][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:33:50][351642485570646][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 2410 4970 23934308 135156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:33:50][351642485570646][297 ms][DEBUG] targetPkg: running [2025-08-26 09:33:50][351642485570646][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-26 09:33:50][351642485570646][297 ms][DEBUG] START check_boot_completed [2025-08-26 09:33:50][351642485570646][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:33:50][351642485570646][344 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:33:50][351642485570646][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:33:50][351642485570646][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:33:50][351642485570646][391 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 09:33:50][351642485570646][391 ms][DEBUG] rawBody.length=1149 [2025-08-26 09:33:50][351642485570646][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642485570646\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1766\"}'\'' -e'"" [2025-08-26 09:33:50][351642485570646][391 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:33:50][351642485570646][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642485570646\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1766\"}'\'' -e'"" [2025-08-26 09:33:51][351642485570646][1453 ms][DEBUG] proc_open done in 1062 ms (timeout); code=4; out.len=0 err.len=135 [2025-08-26 09:33:51][351642485570646][1453 ms][DEBUG] END runCmdUntilRes#1 in 1063 ms [2025-08-26 09:33:51][351642485570646][1453 ms][ERROR] NO RESULT; code=124 outUnable to access process with pid 2767 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root errUnable to access process with pid 2767 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root\r\n [2025-08-26 09:34:29][351642485570646][0 ms][INFO] === Request start === [2025-08-26 09:34:29][351642485570646][1 ms][DEBUG] START check_scloud [2025-08-26 09:34:29][351642485570646][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:34:30][351642485570646][386 ms][DEBUG] SU: done in 385 ms; out [2025-08-26 09:34:30][351642485570646][386 ms][WARN] targetPkg: not running, restarting [2025-08-26 09:34:30][351642485570646][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 09:34:30][351642485570646][636 ms][DEBUG] SU: done in 250 ms; out [2025-08-26 09:34:30][351642485570646][636 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 09:34:30][351642485570646][1073 ms][DEBUG] SU: done in 437 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 09:34:32][351642485570646][3088 ms][DEBUG] END check_scloud in 3088 ms [2025-08-26 09:34:32][351642485570646][3088 ms][DEBUG] START check_boot_completed [2025-08-26 09:34:32][351642485570646][3088 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:34:32][351642485570646][3135 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:34:32][351642485570646][3135 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:34:32][351642485570646][3198 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 09:34:32][351642485570646][3198 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 09:34:32][351642485570646][3198 ms][DEBUG] START check_internet [2025-08-26 09:34:32][351642485570646][3198 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:34:33][351642485570646][3635 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=78.3 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 78.342/78.342/78.342/0.000 ms\n [2025-08-26 09:34:33][351642485570646][3635 ms][DEBUG] check_internet: online [2025-08-26 09:34:33][351642485570646][3635 ms][DEBUG] END check_internet in 437 ms [2025-08-26 09:34:33][351642485570646][3636 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:34:33][351642485570646][3636 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642485570646\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6667\"}'\'' -e'"" [2025-08-26 09:34:33][351642485570646][3636 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:34:33][351642485570646][3636 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642485570646\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6667\"}'\'' -e'"" [2025-08-26 09:34:39][351642485570646][9587 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 09:34:39][351642485570646][9743 ms][DEBUG] proc_open done in 6107 ms; code=255; res.len=107 [2025-08-26 09:34:39][351642485570646][9743 ms][DEBUG] END runCmdUntilRes#1 in 6107 ms [2025-08-26 09:34:39][351642485570646][9743 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 09:34:39][][0 ms][INFO] === Request start === [2025-08-26 09:34:39][][1 ms][DEBUG] START check_scloud [2025-08-26 09:34:39][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:34:40][][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 5984 2891 23813856 118848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:34:40][][313 ms][DEBUG] targetPkg: running [2025-08-26 09:34:40][][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-26 09:34:40][][313 ms][DEBUG] START check_boot_completed [2025-08-26 09:34:40][][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:34:40][][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:34:40][][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:34:40][][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:34:40][][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 09:34:40][][407 ms][DEBUG] START check_internet [2025-08-26 09:34:40][][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:34:40][][594 ms][DEBUG] SU: done in 187 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=83.6 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 83.657/83.657/83.657/0.000 ms\n [2025-08-26 09:34:40][][594 ms][DEBUG] check_internet: online [2025-08-26 09:34:40][][594 ms][DEBUG] END check_internet in 187 ms [2025-08-26 09:34:40][][594 ms][DEBUG] rawBody.length=1129 [2025-08-26 09:34:40][][594 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X5069Z8B\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6114\"}'\'' -e'"" [2025-08-26 09:34:40][][594 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:34:40][][594 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X5069Z8B\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6114\"}'\'' -e'"" [2025-08-26 09:34:44][][5108 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 09:34:45][][5265 ms][DEBUG] proc_open done in 4670 ms; code=255; res.len=107 [2025-08-26 09:34:45][][5265 ms][DEBUG] END runCmdUntilRes#1 in 4671 ms [2025-08-26 09:34:45][][5265 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 09:34:47][351642485570646][0 ms][INFO] === Request start === [2025-08-26 09:34:47][351642485570646][1 ms][DEBUG] START check_scloud [2025-08-26 09:34:47][351642485570646][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:34:47][351642485570646][346 ms][DEBUG] SU: done in 345 ms; out [2025-08-26 09:34:47][351642485570646][346 ms][WARN] targetPkg: not running, restarting [2025-08-26 09:34:47][351642485570646][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 09:34:47][351642485570646][518 ms][DEBUG] SU: done in 172 ms; out [2025-08-26 09:34:47][351642485570646][518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 09:34:48][351642485570646][752 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 09:34:50][351642485570646][2767 ms][DEBUG] END check_scloud in 2766 ms [2025-08-26 09:34:50][351642485570646][2767 ms][DEBUG] START check_boot_completed [2025-08-26 09:34:50][351642485570646][2767 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:34:50][351642485570646][2814 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:34:50][351642485570646][2814 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:34:50][351642485570646][2876 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 09:34:50][351642485570646][2877 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 09:34:50][351642485570646][2877 ms][DEBUG] START check_internet [2025-08-26 09:34:50][351642485570646][2877 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:34:50][351642485570646][3126 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=126 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 126.232/126.232/126.232/0.000 ms\n [2025-08-26 09:34:50][351642485570646][3127 ms][DEBUG] check_internet: online [2025-08-26 09:34:50][351642485570646][3127 ms][DEBUG] END check_internet in 250 ms [2025-08-26 09:34:50][351642485570646][3127 ms][DEBUG] rawBody.length=1149 [2025-08-26 09:34:50][351642485570646][3127 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642485570646\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9504\"}'\'' -e'"" [2025-08-26 09:34:50][351642485570646][3127 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:34:50][351642485570646][3127 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642485570646\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9504\"}'\'' -e'"" [2025-08-26 09:34:53][351642485570646][5673 ms][DEBUG] proc_open done in 2546 ms (timeout); code=4; out.len=0 err.len=26 [2025-08-26 09:34:53][351642485570646][5673 ms][DEBUG] END runCmdUntilRes#1 in 2546 ms [2025-08-26 09:34:53][351642485570646][5673 ms][WARN] Detected error: The connection is closed [2025-08-26 09:34:53][351642485570646][5673 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 09:34:53][351642485570646][5876 ms][DEBUG] SU: done in 203 ms; out [2025-08-26 09:34:53][351642485570646][5876 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 09:34:53][351642485570646][5876 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 09:34:53][351642485570646][6048 ms][DEBUG] SU: done in 172 ms; out [2025-08-26 09:34:53][351642485570646][6048 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 09:34:53][351642485570646][6298 ms][DEBUG] SU: done in 250 ms; out [2025-08-26 09:34:55][351642485570646][8313 ms][DEBUG] START check_boot_completed [2025-08-26 09:34:55][351642485570646][8313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:34:55][351642485570646][8360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:34:55][351642485570646][8360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:34:55][351642485570646][8438 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 09:34:55][351642485570646][8438 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 09:34:58][351642485570646][11452 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 09:34:58][351642485570646][11453 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642485570646\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9504\"}'\'' -e'"" [2025-08-26 09:35:00][351642485570646][12999 ms][DEBUG] proc_open done in 1547 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-26 09:35:00][351642485570646][12999 ms][DEBUG] END runCmdUntilRes#2 in 1547 ms [2025-08-26 09:35:00][351642485570646][12999 ms][WARN] Detected error 2; Reboot the device [2025-08-26 09:35:00][351642485570646][12999 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-26 09:35:01][351642485570646][13702 ms][DEBUG] SU: done in 702 ms; out [2025-08-26 09:35:29][351642485570646][0 ms][INFO] === Request start === [2025-08-26 09:35:29][351642485570646][1 ms][DEBUG] START check_scloud [2025-08-26 09:35:29][351642485570646][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:35:29][351642485570646][46 ms][DEBUG] SU: done in 45 ms; out [2025-08-26 09:35:29][351642485570646][46 ms][WARN] targetPkg: not running, restarting [2025-08-26 09:35:29][351642485570646][46 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 09:35:29][351642485570646][93 ms][DEBUG] SU: done in 46 ms; out [2025-08-26 09:35:29][351642485570646][93 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 09:35:29][351642485570646][124 ms][DEBUG] SU: done in 31 ms; out [2025-08-26 09:35:31][351642485570646][2139 ms][DEBUG] END check_scloud in 2138 ms [2025-08-26 09:35:31][351642485570646][2139 ms][DEBUG] START check_boot_completed [2025-08-26 09:35:31][351642485570646][2139 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:36:02][351642485570646][32636 ms][DEBUG] ADB: done in 30497 ms; out [2025-08-26 09:36:02][351642485570646][32636 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:36:02][351642485570646][32714 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 09:36:02][351642485570646][32714 ms][DEBUG] END check_boot_completed in 30575 ms [2025-08-26 09:36:02][351642485570646][32714 ms][DEBUG] START check_internet [2025-08-26 09:36:02][351642485570646][32714 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:36:02][351642485570646][32839 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 09:36:02][351642485570646][32839 ms][WARN] check_internet: offline [2025-08-26 09:36:02][351642485570646][32840 ms][DEBUG] END check_internet in 125 ms [2025-08-26 09:36:29][351642485570646][1 ms][INFO] === Request start === [2025-08-26 09:36:29][351642485570646][1 ms][DEBUG] START check_scloud [2025-08-26 09:36:29][351642485570646][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:36:29][351642485570646][386 ms][DEBUG] SU: done in 385 ms; out [2025-08-26 09:36:29][351642485570646][386 ms][WARN] targetPkg: not running, restarting [2025-08-26 09:36:29][351642485570646][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 09:36:29][351642485570646][526 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 09:36:29][351642485570646][527 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 09:36:30][351642485570646][776 ms][DEBUG] SU: done in 250 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 09:36:32][351642485570646][2791 ms][DEBUG] END check_scloud in 2790 ms [2025-08-26 09:36:32][351642485570646][2791 ms][DEBUG] START check_boot_completed [2025-08-26 09:36:32][351642485570646][2792 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:36:32][351642485570646][2838 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:36:32][351642485570646][2838 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:36:32][351642485570646][2901 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 09:36:32][351642485570646][2901 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 09:36:32][351642485570646][2901 ms][DEBUG] START check_internet [2025-08-26 09:36:32][351642485570646][2901 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:36:32][351642485570646][3246 ms][DEBUG] SU: done in 345 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=78.8 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 78.869/78.869/78.869/0.000 ms\n [2025-08-26 09:36:32][351642485570646][3246 ms][DEBUG] check_internet: online [2025-08-26 09:36:32][351642485570646][3246 ms][DEBUG] END check_internet in 346 ms [2025-08-26 09:36:32][351642485570646][3246 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:36:32][351642485570646][3246 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642485570646\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4117\"}'\'' -e'"" [2025-08-26 09:36:32][351642485570646][3246 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:36:32][351642485570646][3247 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642485570646\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4117\"}'\'' -e'"" [2025-08-26 09:36:37][351642485570646][8587 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 09:36:38][351642485570646][8743 ms][DEBUG] proc_open done in 5496 ms; code=255; res.len=107 [2025-08-26 09:36:38][351642485570646][8743 ms][DEBUG] END runCmdUntilRes#1 in 5497 ms [2025-08-26 09:36:38][351642485570646][8743 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 09:36:38][][0 ms][INFO] === Request start === [2025-08-26 09:36:38][][1 ms][DEBUG] START check_scloud [2025-08-26 09:36:38][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:36:38][][358 ms][DEBUG] SU: done in 357 ms; outu0_a118 10535 4968 23606396 121668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:36:38][][358 ms][DEBUG] targetPkg: running [2025-08-26 09:36:38][][358 ms][DEBUG] END check_scloud in 357 ms [2025-08-26 09:36:38][][358 ms][DEBUG] START check_boot_completed [2025-08-26 09:36:38][][358 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:36:38][][405 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 09:36:38][][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:36:38][][467 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 09:36:38][][467 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 09:36:38][][467 ms][DEBUG] START check_internet [2025-08-26 09:36:38][][467 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:36:39][][702 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=85.0 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 85.031/85.031/85.031/0.000 ms\n [2025-08-26 09:36:39][][702 ms][DEBUG] check_internet: online [2025-08-26 09:36:39][][702 ms][DEBUG] END check_internet in 234 ms [2025-08-26 09:36:39][][702 ms][DEBUG] rawBody.length=1129 [2025-08-26 09:36:39][][702 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X5069Z8B\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8985\"}'\'' -e'"" [2025-08-26 09:36:39][][702 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:36:39][][702 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X5069Z8B\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8985\"}'\'' -e'"" [2025-08-26 09:36:43][][5528 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 09:36:44][][5685 ms][DEBUG] proc_open done in 4982 ms; code=255; res.len=107 [2025-08-26 09:36:44][][5685 ms][DEBUG] END runCmdUntilRes#1 in 4983 ms [2025-08-26 09:36:44][][5685 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 09:36:46][351642485570646][0 ms][INFO] === Request start === [2025-08-26 09:36:46][351642485570646][1 ms][DEBUG] START check_scloud [2025-08-26 09:36:46][351642485570646][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:36:46][351642485570646][322 ms][DEBUG] SU: done in 322 ms; outu0_a118 10535 4968 23777604 97712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:36:46][351642485570646][323 ms][DEBUG] targetPkg: running [2025-08-26 09:36:46][351642485570646][323 ms][DEBUG] END check_scloud in 322 ms [2025-08-26 09:36:46][351642485570646][323 ms][DEBUG] START check_boot_completed [2025-08-26 09:36:46][351642485570646][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:36:46][351642485570646][369 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:36:46][351642485570646][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:36:46][351642485570646][463 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 09:36:46][351642485570646][463 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 09:36:46][351642485570646][463 ms][DEBUG] START check_internet [2025-08-26 09:36:46][351642485570646][463 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:36:47][351642485570646][713 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=78.2 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 78.244/78.244/78.244/0.000 ms\n [2025-08-26 09:36:47][351642485570646][713 ms][DEBUG] check_internet: online [2025-08-26 09:36:47][351642485570646][713 ms][DEBUG] END check_internet in 250 ms [2025-08-26 09:36:47][351642485570646][713 ms][DEBUG] rawBody.length=1149 [2025-08-26 09:36:47][351642485570646][713 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642485570646\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3245\"}'\'' -e'"" [2025-08-26 09:36:47][351642485570646][713 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:36:47][351642485570646][714 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642485570646\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3245\"}'\'' -e'"" [2025-08-26 09:36:52][351642485570646][6586 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ac172e9e-61e3-4a8c-bf1b-4cf7b0d89a8f","id":"QR_ac172e9e-61e3-4a8c-bf1b-4cf7b0d89a8f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:36:53][351642485570646][6743 ms][DEBUG] proc_open done in 6029 ms; code=255; res.len=3343 [2025-08-26 09:36:53][351642485570646][6743 ms][DEBUG] END runCmdUntilRes#1 in 6029 ms [2025-08-26 09:36:53][351642485570646][6743 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:37:03][350938282523486][0 ms][INFO] === Request start === [2025-08-26 09:37:03][350938282523486][1 ms][DEBUG] START check_scloud [2025-08-26 09:37:03][350938282523486][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:37:04][350938282523486][330 ms][DEBUG] SU: done in 329 ms; outu0_a118 10535 4968 23846012 81644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:37:04][350938282523486][330 ms][DEBUG] targetPkg: running [2025-08-26 09:37:04][350938282523486][330 ms][DEBUG] END check_scloud in 329 ms [2025-08-26 09:37:04][350938282523486][330 ms][DEBUG] START check_boot_completed [2025-08-26 09:37:04][350938282523486][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:37:04][350938282523486][377 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 09:37:04][350938282523486][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:37:04][350938282523486][423 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:37:04][350938282523486][423 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 09:37:04][350938282523486][423 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:37:04][350938282523486][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938282523486\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7097\"}'\'' -e'"" [2025-08-26 09:37:04][350938282523486][423 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:37:04][350938282523486][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938282523486\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7097\"}'\'' -e'"" [2025-08-26 09:37:08][350938282523486][4313 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_45c7ef45-e060-47e9-ba23-488adf1d991c","id":"QR_45c7ef45-e060-47e9-ba23-488adf1d991c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:37:08][350938282523486][4469 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-08-26 09:37:08][350938282523486][4469 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-08-26 09:37:08][350938282523486][4469 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:37:11][350938289635952][0 ms][INFO] === Request start === [2025-08-26 09:37:11][350938289635952][1 ms][DEBUG] START check_scloud [2025-08-26 09:37:11][350938289635952][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:37:11][350938289635952][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 10535 4968 24008928 88260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:37:11][350938289635952][284 ms][DEBUG] targetPkg: running [2025-08-26 09:37:11][350938289635952][284 ms][DEBUG] END check_scloud in 283 ms [2025-08-26 09:37:11][350938289635952][284 ms][DEBUG] START check_boot_completed [2025-08-26 09:37:11][350938289635952][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:37:11][350938289635952][330 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 09:37:11][350938289635952][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:37:11][350938289635952][393 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 09:37:11][350938289635952][393 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 09:37:11][350938289635952][393 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:37:11][350938289635952][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938289635952\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9420\"}'\'' -e'"" [2025-08-26 09:37:11][350938289635952][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:37:11][350938289635952][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938289635952\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9420\"}'\'' -e'"" [2025-08-26 09:37:15][350938289635952][4345 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0aa114b6-56c8-40da-9a52-bef3a14b0132","id":"QR_0aa114b6-56c8-40da-9a52-bef3a14b0132","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:37:15][350938289635952][4501 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-26 09:37:15][350938289635952][4501 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-26 09:37:15][350938289635952][4501 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:37:18][350142324359674][0 ms][INFO] === Request start === [2025-08-26 09:37:18][350142324359674][1 ms][DEBUG] START check_scloud [2025-08-26 09:37:18][350142324359674][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:37:18][350142324359674][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 10535 4968 24186344 95240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:37:18][350142324359674][283 ms][DEBUG] targetPkg: running [2025-08-26 09:37:18][350142324359674][283 ms][DEBUG] END check_scloud in 283 ms [2025-08-26 09:37:18][350142324359674][283 ms][DEBUG] START check_boot_completed [2025-08-26 09:37:18][350142324359674][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:37:18][350142324359674][330 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:37:18][350142324359674][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:37:18][350142324359674][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:37:18][350142324359674][377 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 09:37:18][350142324359674][377 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:37:18][350142324359674][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350142324359674\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4617\"}'\'' -e'"" [2025-08-26 09:37:18][350142324359674][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:37:18][350142324359674][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350142324359674\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4617\"}'\'' -e'"" [2025-08-26 09:37:22][350142324359674][4126 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_37bd305a-b746-4f40-a54f-2e6e56392e93","id":"QR_37bd305a-b746-4f40-a54f-2e6e56392e93","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:37:22][350142324359674][4282 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-26 09:37:22][350142324359674][4282 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-26 09:37:22][350142324359674][4282 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:38:03][350756483216225][1 ms][INFO] === Request start === [2025-08-26 09:38:03][350756483216225][1 ms][DEBUG] START check_scloud [2025-08-26 09:38:03][350756483216225][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:38:03][350756483216225][352 ms][DEBUG] SU: done in 351 ms; outu0_a118 10535 4968 24314500 91568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:38:03][350756483216225][353 ms][DEBUG] targetPkg: running [2025-08-26 09:38:03][350756483216225][353 ms][DEBUG] END check_scloud in 352 ms [2025-08-26 09:38:03][350756483216225][353 ms][DEBUG] START check_boot_completed [2025-08-26 09:38:03][350756483216225][353 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:38:03][350756483216225][399 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 09:38:03][350756483216225][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:38:03][350756483216225][446 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:38:03][350756483216225][446 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 09:38:03][350756483216225][446 ms][DEBUG] START check_internet [2025-08-26 09:38:03][350756483216225][446 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:38:03][350756483216225][665 ms][DEBUG] SU: done in 219 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=104 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 104.728/104.728/104.728/0.000 ms\n [2025-08-26 09:38:03][350756483216225][665 ms][DEBUG] check_internet: online [2025-08-26 09:38:03][350756483216225][665 ms][DEBUG] END check_internet in 219 ms [2025-08-26 09:38:03][350756483216225][665 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:38:03][350756483216225][665 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350756483216225\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4351\"}'\'' -e'"" [2025-08-26 09:38:03][350756483216225][665 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:38:03][350756483216225][666 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350756483216225\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4351\"}'\'' -e'"" [2025-08-26 09:38:07][350756483216225][4367 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_faf68e56-8a39-4c72-a7c7-5837d54e874d","id":"QR_faf68e56-8a39-4c72-a7c7-5837d54e874d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:38:07][350756483216225][4523 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-26 09:38:07][350756483216225][4523 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-26 09:38:07][350756483216225][4523 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:38:10][352891564316202][0 ms][INFO] === Request start === [2025-08-26 09:38:10][352891564316202][1 ms][DEBUG] START check_scloud [2025-08-26 09:38:10][352891564316202][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:38:10][352891564316202][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 10535 4968 24438668 103360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:38:10][352891564316202][304 ms][DEBUG] targetPkg: running [2025-08-26 09:38:10][352891564316202][304 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 09:38:10][352891564316202][304 ms][DEBUG] START check_boot_completed [2025-08-26 09:38:10][352891564316202][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:38:10][352891564316202][349 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 09:38:10][352891564316202][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:38:10][352891564316202][412 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 09:38:10][352891564316202][412 ms][DEBUG] END check_boot_completed in 107 ms [2025-08-26 09:38:10][352891564316202][412 ms][DEBUG] START check_internet [2025-08-26 09:38:10][352891564316202][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:38:11][352891564316202][755 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=191 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 191.556/191.556/191.556/0.000 ms\n [2025-08-26 09:38:11][352891564316202][756 ms][DEBUG] check_internet: online [2025-08-26 09:38:11][352891564316202][756 ms][DEBUG] END check_internet in 344 ms [2025-08-26 09:38:11][352891564316202][756 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:38:11][352891564316202][756 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352891564316202\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1191\"}'\'' -e'"" [2025-08-26 09:38:11][352891564316202][756 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:38:11][352891564316202][756 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352891564316202\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1191\"}'\'' -e'"" [2025-08-26 09:38:14][352891564316202][4411 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3202eac1-533c-4f98-9ef0-9ff510fa55ce","id":"QR_3202eac1-533c-4f98-9ef0-9ff510fa55ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:38:15][352891564316202][4567 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-26 09:38:15][352891564316202][4567 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-26 09:38:15][352891564316202][4567 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:38:17][351267960374767][0 ms][INFO] === Request start === [2025-08-26 09:38:17][351267960374767][1 ms][DEBUG] START check_scloud [2025-08-26 09:38:17][351267960374767][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:38:17][351267960374767][330 ms][DEBUG] SU: done in 330 ms; outu0_a118 10535 4968 24615060 109536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:38:17][351267960374767][330 ms][DEBUG] targetPkg: running [2025-08-26 09:38:17][351267960374767][331 ms][DEBUG] END check_scloud in 330 ms [2025-08-26 09:38:17][351267960374767][331 ms][DEBUG] START check_boot_completed [2025-08-26 09:38:17][351267960374767][331 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:38:17][351267960374767][377 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:38:17][351267960374767][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:38:17][351267960374767][441 ms][DEBUG] SU: done in 64 ms; out [2025-08-26 09:38:17][351267960374767][441 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 09:38:17][351267960374767][441 ms][DEBUG] START check_internet [2025-08-26 09:38:17][351267960374767][441 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:38:18][351267960374767][659 ms][DEBUG] SU: done in 217 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=85.4 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 85.436/85.436/85.436/0.000 ms\n [2025-08-26 09:38:18][351267960374767][659 ms][DEBUG] check_internet: online [2025-08-26 09:38:18][351267960374767][659 ms][DEBUG] END check_internet in 218 ms [2025-08-26 09:38:18][351267960374767][659 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:38:18][351267960374767][659 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267960374767\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9677\"}'\'' -e'"" [2025-08-26 09:38:18][351267960374767][659 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:38:18][351267960374767][659 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267960374767\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9677\"}'\'' -e'"" [2025-08-26 09:38:21][351267960374767][4251 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_167c828c-e5cf-4ebf-b5d0-6aa7089b861a","id":"QR_167c828c-e5cf-4ebf-b5d0-6aa7089b861a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:38:21][351267960374767][4407 ms][DEBUG] proc_open done in 3748 ms; code=255; res.len=3343 [2025-08-26 09:38:21][351267960374767][4407 ms][DEBUG] END runCmdUntilRes#1 in 3748 ms [2025-08-26 09:38:21][351267960374767][4407 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:40:03][351240644159094][1 ms][INFO] === Request start === [2025-08-26 09:40:03][351240644159094][1 ms][DEBUG] START check_scloud [2025-08-26 09:40:03][351240644159094][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:40:04][351240644159094][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 10535 4968 24682724 123676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:40:04][351240644159094][280 ms][DEBUG] targetPkg: running [2025-08-26 09:40:04][351240644159094][280 ms][DEBUG] END check_scloud in 279 ms [2025-08-26 09:40:04][351240644159094][280 ms][DEBUG] START check_boot_completed [2025-08-26 09:40:04][351240644159094][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:40:04][351240644159094][327 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 09:40:04][351240644159094][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:40:04][351240644159094][389 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 09:40:04][351240644159094][390 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 09:40:04][351240644159094][390 ms][DEBUG] START check_internet [2025-08-26 09:40:04][351240644159094][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:40:04][351240644159094][749 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=98.7 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 98.737/98.737/98.737/0.000 ms\n [2025-08-26 09:40:04][351240644159094][749 ms][DEBUG] check_internet: online [2025-08-26 09:40:04][351240644159094][749 ms][DEBUG] END check_internet in 359 ms [2025-08-26 09:40:04][351240644159094][749 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:40:04][351240644159094][749 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240644159094\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2684\"}'\'' -e'"" [2025-08-26 09:40:04][351240644159094][749 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:40:04][351240644159094][749 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240644159094\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2684\"}'\'' -e'"" [2025-08-26 09:40:08][351240644159094][4623 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a8db19c-d0f6-41b6-ae4c-2b0581ef8dd4","id":"QR_0a8db19c-d0f6-41b6-ae4c-2b0581ef8dd4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:40:08][351240644159094][4779 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-26 09:40:08][351240644159094][4779 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-26 09:40:08][351240644159094][4779 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:41:02][352677530751543][0 ms][INFO] === Request start === [2025-08-26 09:41:02][352677530751543][1 ms][DEBUG] START check_scloud [2025-08-26 09:41:02][352677530751543][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:41:03][352677530751543][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 10535 4968 24815048 130768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:41:03][352677530751543][268 ms][DEBUG] targetPkg: running [2025-08-26 09:41:03][352677530751543][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-26 09:41:03][352677530751543][268 ms][DEBUG] START check_boot_completed [2025-08-26 09:41:03][352677530751543][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:41:03][352677530751543][314 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 09:41:03][352677530751543][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:41:03][352677530751543][377 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 09:41:03][352677530751543][377 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 09:41:03][352677530751543][377 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:41:03][352677530751543][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530751543\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7239\"}'\'' -e'"" [2025-08-26 09:41:03][352677530751543][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:41:03][352677530751543][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530751543\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7239\"}'\'' -e'"" [2025-08-26 09:41:06][352677530751543][4063 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_23f0cdf4-1ece-4ca1-a3bb-e716413ff272","id":"QR_23f0cdf4-1ece-4ca1-a3bb-e716413ff272","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:41:07][352677530751543][4219 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3343 [2025-08-26 09:41:07][352677530751543][4220 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-08-26 09:41:07][352677530751543][4220 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:41:09][353850237052973][0 ms][INFO] === Request start === [2025-08-26 09:41:09][353850237052973][1 ms][DEBUG] START check_scloud [2025-08-26 09:41:09][353850237052973][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:41:10][353850237052973][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 10535 4968 24949460 137512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:41:10][353850237052973][321 ms][DEBUG] targetPkg: running [2025-08-26 09:41:10][353850237052973][321 ms][DEBUG] END check_scloud in 321 ms [2025-08-26 09:41:10][353850237052973][321 ms][DEBUG] START check_boot_completed [2025-08-26 09:41:10][353850237052973][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:41:10][353850237052973][368 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:41:10][353850237052973][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:41:10][353850237052973][415 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:41:10][353850237052973][415 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 09:41:10][353850237052973][415 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:41:10][353850237052973][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353850237052973\",\"model\":\"SM-M625F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"NPB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4142\"}'\'' -e'"" [2025-08-26 09:41:10][353850237052973][415 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:41:10][353850237052973][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353850237052973\",\"model\":\"SM-M625F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"NPB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4142\"}'\'' -e'"" [2025-08-26 09:41:14][353850237052973][4804 ms][DEBUG] proc_open done in 4390 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 09:41:14][353850237052973][4805 ms][DEBUG] END runCmdUntilRes#1 in 4390 ms [2025-08-26 09:41:14][353850237052973][4805 ms][WARN] Detected error: Process with pid 10535 either refused to load frida-agent, or terminated during injection [2025-08-26 09:41:14][353850237052973][4805 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 09:41:14][353850237052973][4961 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 09:41:14][353850237052973][4961 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 09:41:14][353850237052973][4961 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 09:41:14][353850237052973][5101 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 09:41:14][353850237052973][5101 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 09:41:14][353850237052973][5273 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 09:41:16][353850237052973][7288 ms][DEBUG] START check_boot_completed [2025-08-26 09:41:16][353850237052973][7288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:41:17][353850237052973][7335 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:41:17][353850237052973][7335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:41:17][353850237052973][7398 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 09:41:17][353850237052973][7398 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 09:41:20][353850237052973][10412 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 09:41:20][353850237052973][10412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353850237052973\",\"model\":\"SM-M625F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"NPB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4142\"}'\'' -e'"" [2025-08-26 09:41:24][353850237052973][14380 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_38768ee2-d8b1-4767-b4be-ca39c212039a","id":"QR_38768ee2-d8b1-4767-b4be-ca39c212039a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:41:24][353850237052973][14536 ms][DEBUG] proc_open done in 4124 ms; code=255; res.len=3343 [2025-08-26 09:41:24][353850237052973][14536 ms][DEBUG] END runCmdUntilRes#2 in 4124 ms [2025-08-26 09:41:24][353850237052973][14536 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:43:03][352549934238221][1 ms][INFO] === Request start === [2025-08-26 09:43:03][352549934238221][1 ms][DEBUG] START check_scloud [2025-08-26 09:43:03][352549934238221][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:43:03][352549934238221][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 19161 4968 23489620 127276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:43:03][352549934238221][262 ms][DEBUG] targetPkg: running [2025-08-26 09:43:03][352549934238221][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-26 09:43:03][352549934238221][262 ms][DEBUG] START check_boot_completed [2025-08-26 09:43:03][352549934238221][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:43:03][352549934238221][309 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:43:03][352549934238221][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:43:03][352549934238221][357 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 09:43:03][352549934238221][357 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 09:43:03][352549934238221][357 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:43:03][352549934238221][357 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549934238221\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7171\"}'\'' -e'"" [2025-08-26 09:43:03][352549934238221][357 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:43:03][352549934238221][357 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549934238221\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7171\"}'\'' -e'"" [2025-08-26 09:43:07][352549934238221][4292 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_44273043-e42f-42bf-8b36-00ad8ef1b059","id":"QR_44273043-e42f-42bf-8b36-00ad8ef1b059","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:43:07][352549934238221][4449 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-08-26 09:43:07][352549934238221][4449 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-26 09:43:07][352549934238221][4449 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:44:03][350013885499201][0 ms][INFO] === Request start === [2025-08-26 09:44:03][350013885499201][1 ms][DEBUG] START check_scloud [2025-08-26 09:44:03][350013885499201][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:44:04][350013885499201][288 ms][DEBUG] SU: done in 288 ms; outu0_a118 19161 4968 23587884 138504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:44:04][350013885499201][289 ms][DEBUG] targetPkg: running [2025-08-26 09:44:04][350013885499201][289 ms][DEBUG] END check_scloud in 288 ms [2025-08-26 09:44:04][350013885499201][289 ms][DEBUG] START check_boot_completed [2025-08-26 09:44:04][350013885499201][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:44:04][350013885499201][335 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 09:44:04][350013885499201][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:44:04][350013885499201][382 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:44:04][350013885499201][382 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 09:44:04][350013885499201][382 ms][DEBUG] START check_internet [2025-08-26 09:44:04][350013885499201][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:44:04][350013885499201][773 ms][DEBUG] SU: done in 392 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=99.8 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 99.865/99.865/99.865/0.000 ms\n [2025-08-26 09:44:04][350013885499201][773 ms][DEBUG] check_internet: online [2025-08-26 09:44:04][350013885499201][773 ms][DEBUG] END check_internet in 392 ms [2025-08-26 09:44:04][350013885499201][773 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:44:04][350013885499201][774 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013885499201\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8152\"}'\'' -e'"" [2025-08-26 09:44:04][350013885499201][774 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:44:04][350013885499201][774 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013885499201\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8152\"}'\'' -e'"" [2025-08-26 09:44:08][350013885499201][4537 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c4fc99c3-3695-45f4-80c8-1899b6e31368","id":"QR_c4fc99c3-3695-45f4-80c8-1899b6e31368","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:44:08][350013885499201][4693 ms][DEBUG] proc_open done in 3919 ms; code=255; res.len=3343 [2025-08-26 09:44:08][350013885499201][4693 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-08-26 09:44:08][350013885499201][4693 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:44:11][350330053331556][0 ms][INFO] === Request start === [2025-08-26 09:44:11][350330053331556][1 ms][DEBUG] START check_scloud [2025-08-26 09:44:11][350330053331556][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:44:11][350330053331556][287 ms][DEBUG] SU: done in 287 ms; outu0_a118 19161 4968 23740596 150152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:44:11][350330053331556][287 ms][DEBUG] targetPkg: running [2025-08-26 09:44:11][350330053331556][288 ms][DEBUG] END check_scloud in 287 ms [2025-08-26 09:44:11][350330053331556][288 ms][DEBUG] START check_boot_completed [2025-08-26 09:44:11][350330053331556][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:44:11][350330053331556][334 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 09:44:11][350330053331556][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:44:11][350330053331556][397 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 09:44:11][350330053331556][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 09:44:11][350330053331556][397 ms][DEBUG] START check_internet [2025-08-26 09:44:11][350330053331556][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:44:11][350330053331556][694 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=140 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 140.341/140.341/140.341/0.000 ms\n [2025-08-26 09:44:11][350330053331556][694 ms][DEBUG] check_internet: online [2025-08-26 09:44:11][350330053331556][694 ms][DEBUG] END check_internet in 297 ms [2025-08-26 09:44:11][350330053331556][694 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:44:11][350330053331556][694 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350330053331556\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5118\"}'\'' -e'"" [2025-08-26 09:44:11][350330053331556][694 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:44:11][350330053331556][694 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350330053331556\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5118\"}'\'' -e'"" [2025-08-26 09:44:15][350330053331556][4130 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4c829c9c-4452-49b0-a290-b5a523a0c8a9","id":"QR_4c829c9c-4452-49b0-a290-b5a523a0c8a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:44:15][350330053331556][4286 ms][DEBUG] proc_open done in 3592 ms; code=255; res.len=3343 [2025-08-26 09:44:15][350330053331556][4286 ms][DEBUG] END runCmdUntilRes#1 in 3592 ms [2025-08-26 09:44:15][350330053331556][4286 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:46:03][350938289692557][1 ms][INFO] === Request start === [2025-08-26 09:46:03][350938289692557][1 ms][DEBUG] START check_scloud [2025-08-26 09:46:03][350938289692557][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:46:03][350938289692557][314 ms][DEBUG] SU: done in 312 ms; outu0_a118 19161 4968 23846196 161404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:46:04][350938289692557][314 ms][DEBUG] targetPkg: running [2025-08-26 09:46:04][350938289692557][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-26 09:46:04][350938289692557][314 ms][DEBUG] START check_boot_completed [2025-08-26 09:46:04][350938289692557][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:46:04][350938289692557][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 09:46:04][350938289692557][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:46:04][350938289692557][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:46:04][350938289692557][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 09:46:04][350938289692557][407 ms][DEBUG] START check_internet [2025-08-26 09:46:04][350938289692557][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:46:04][350938289692557][626 ms][DEBUG] SU: done in 219 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=120 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 120.233/120.233/120.233/0.000 ms\n [2025-08-26 09:46:04][350938289692557][626 ms][DEBUG] check_internet: online [2025-08-26 09:46:04][350938289692557][626 ms][DEBUG] END check_internet in 219 ms [2025-08-26 09:46:04][350938289692557][626 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:46:04][350938289692557][627 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938289692557\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9634\"}'\'' -e'"" [2025-08-26 09:46:04][350938289692557][627 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:46:04][350938289692557][627 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938289692557\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9634\"}'\'' -e'"" [2025-08-26 09:46:08][350938289692557][4969 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a3855991-ec65-418b-8f31-e29caaa65fc3","id":"QR_a3855991-ec65-418b-8f31-e29caaa65fc3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:46:08][350938289692557][5125 ms][DEBUG] proc_open done in 4498 ms; code=255; res.len=3343 [2025-08-26 09:46:08][350938289692557][5125 ms][DEBUG] END runCmdUntilRes#1 in 4498 ms [2025-08-26 09:46:08][350938289692557][5125 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:46:11][352397453433371][0 ms][INFO] === Request start === [2025-08-26 09:46:11][352397453433371][1 ms][DEBUG] START check_scloud [2025-08-26 09:46:11][352397453433371][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:46:11][352397453433371][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 19161 4968 23980604 173268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:46:11][352397453433371][320 ms][DEBUG] targetPkg: running [2025-08-26 09:46:11][352397453433371][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-26 09:46:11][352397453433371][320 ms][DEBUG] START check_boot_completed [2025-08-26 09:46:11][352397453433371][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:46:11][352397453433371][366 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 09:46:11][352397453433371][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:46:11][352397453433371][413 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:46:11][352397453433371][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 09:46:11][352397453433371][413 ms][DEBUG] START check_internet [2025-08-26 09:46:11][352397453433371][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:46:12][352397453433371][679 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=156 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 156.156/156.156/156.156/0.000 ms\n [2025-08-26 09:46:12][352397453433371][679 ms][DEBUG] check_internet: online [2025-08-26 09:46:12][352397453433371][679 ms][DEBUG] END check_internet in 266 ms [2025-08-26 09:46:12][352397453433371][679 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:46:12][352397453433371][679 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453433371\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5810\"}'\'' -e'"" [2025-08-26 09:46:12][352397453433371][679 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:46:12][352397453433371][679 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453433371\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5810\"}'\'' -e'"" [2025-08-26 09:46:15][352397453433371][4193 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d7f50dd5-4eb1-475d-9986-0f014b4598ce","id":"QR_d7f50dd5-4eb1-475d-9986-0f014b4598ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:46:15][352397453433371][4350 ms][DEBUG] proc_open done in 3670 ms; code=255; res.len=3343 [2025-08-26 09:46:15][352397453433371][4350 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-26 09:46:15][352397453433371][4350 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:46:18][351684403060011][0 ms][INFO] === Request start === [2025-08-26 09:46:18][351684403060011][1 ms][DEBUG] START check_scloud [2025-08-26 09:46:18][351684403060011][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:46:18][351684403060011][265 ms][DEBUG] SU: done in 265 ms; outu0_a118 19161 4968 24116548 184188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:46:18][351684403060011][266 ms][DEBUG] targetPkg: running [2025-08-26 09:46:18][351684403060011][266 ms][DEBUG] END check_scloud in 265 ms [2025-08-26 09:46:18][351684403060011][266 ms][DEBUG] START check_boot_completed [2025-08-26 09:46:18][351684403060011][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:46:18][351684403060011][312 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 09:46:18][351684403060011][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:46:18][351684403060011][360 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 09:46:18][351684403060011][360 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 09:46:18][351684403060011][360 ms][DEBUG] START check_internet [2025-08-26 09:46:18][351684403060011][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:46:18][351684403060011][641 ms][DEBUG] SU: done in 280 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=157 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 157.582/157.582/157.582/0.000 ms\n [2025-08-26 09:46:18][351684403060011][641 ms][DEBUG] check_internet: online [2025-08-26 09:46:18][351684403060011][641 ms][DEBUG] END check_internet in 280 ms [2025-08-26 09:46:18][351684403060011][641 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:46:18][351684403060011][641 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351684403060011\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XFE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2126\"}'\'' -e'"" [2025-08-26 09:46:18][351684403060011][641 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:46:18][351684403060011][641 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351684403060011\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XFE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2126\"}'\'' -e'"" [2025-08-26 09:46:22][351684403060011][4061 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_601f9f44-7a59-4e76-a19a-90c83b48dd69","id":"QR_601f9f44-7a59-4e76-a19a-90c83b48dd69","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:46:22][351684403060011][4218 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=3343 [2025-08-26 09:46:22][351684403060011][4218 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-08-26 09:46:22][351684403060011][4218 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:46:24][352674520721727][1 ms][INFO] === Request start === [2025-08-26 09:46:24][352674520721727][1 ms][DEBUG] START check_scloud [2025-08-26 09:46:24][352674520721727][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:46:25][352674520721727][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 19161 4968 24251944 196176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:46:25][352674520721727][255 ms][DEBUG] targetPkg: running [2025-08-26 09:46:25][352674520721727][255 ms][DEBUG] END check_scloud in 254 ms [2025-08-26 09:46:25][352674520721727][255 ms][DEBUG] START check_boot_completed [2025-08-26 09:46:25][352674520721727][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:46:25][352674520721727][301 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 09:46:25][352674520721727][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:46:25][352674520721727][350 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 09:46:25][352674520721727][350 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 09:46:25][352674520721727][350 ms][DEBUG] START check_internet [2025-08-26 09:46:25][352674520721727][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:46:25][352674520721727][536 ms][DEBUG] SU: done in 186 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=85.4 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 85.477/85.477/85.477/0.000 ms\n [2025-08-26 09:46:25][352674520721727][536 ms][DEBUG] check_internet: online [2025-08-26 09:46:25][352674520721727][536 ms][DEBUG] END check_internet in 186 ms [2025-08-26 09:46:25][352674520721727][536 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:46:25][352674520721727][536 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520721727\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6964\"}'\'' -e'"" [2025-08-26 09:46:25][352674520721727][536 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:46:25][352674520721727][536 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520721727\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6964\"}'\'' -e'"" [2025-08-26 09:46:28][352674520721727][4004 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e2c31217-9144-4458-b883-d5e840ddc598","id":"QR_e2c31217-9144-4458-b883-d5e840ddc598","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:46:29][352674520721727][4160 ms][DEBUG] proc_open done in 3623 ms; code=255; res.len=3343 [2025-08-26 09:46:29][352674520721727][4160 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-08-26 09:46:29][352674520721727][4160 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:47:03][354747954477251][0 ms][INFO] === Request start === [2025-08-26 09:47:03][354747954477251][1 ms][DEBUG] START check_scloud [2025-08-26 09:47:03][354747954477251][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:47:04][354747954477251][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 19161 4968 24363588 207612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:47:04][354747954477251][303 ms][DEBUG] targetPkg: running [2025-08-26 09:47:04][354747954477251][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 09:47:04][354747954477251][303 ms][DEBUG] START check_boot_completed [2025-08-26 09:47:04][354747954477251][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:47:04][354747954477251][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 09:47:04][354747954477251][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:47:04][354747954477251][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:47:04][354747954477251][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 09:47:04][354747954477251][381 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:47:04][354747954477251][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747954477251\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6327\"}'\'' -e'"" [2025-08-26 09:47:04][354747954477251][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:47:04][354747954477251][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747954477251\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6327\"}'\'' -e'"" [2025-08-26 09:47:07][354747954477251][3817 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2076cdf4-23de-44b9-b9b1-aa367682dd85","id":"QR_2076cdf4-23de-44b9-b9b1-aa367682dd85","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:47:07][354747954477251][3974 ms][DEBUG] proc_open done in 3592 ms; code=255; res.len=3343 [2025-08-26 09:47:07][354747954477251][3974 ms][DEBUG] END runCmdUntilRes#1 in 3592 ms [2025-08-26 09:47:07][354747954477251][3974 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:48:03][355885145337940][0 ms][INFO] === Request start === [2025-08-26 09:48:03][355885145337940][1 ms][DEBUG] START check_scloud [2025-08-26 09:48:03][355885145337940][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:48:03][355885145337940][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 19161 4968 24485544 219380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:48:03][355885145337940][303 ms][DEBUG] targetPkg: running [2025-08-26 09:48:03][355885145337940][303 ms][DEBUG] END check_scloud in 303 ms [2025-08-26 09:48:03][355885145337940][303 ms][DEBUG] START check_boot_completed [2025-08-26 09:48:03][355885145337940][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:48:03][355885145337940][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 09:48:03][355885145337940][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:48:03][355885145337940][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:48:03][355885145337940][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 09:48:03][355885145337940][381 ms][DEBUG] START check_internet [2025-08-26 09:48:03][355885145337940][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:48:04][355885145337940][663 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=182 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 182.253/182.253/182.253/0.000 ms\n [2025-08-26 09:48:04][355885145337940][663 ms][DEBUG] check_internet: online [2025-08-26 09:48:04][355885145337940][663 ms][DEBUG] END check_internet in 281 ms [2025-08-26 09:48:04][355885145337940][663 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:48:04][355885145337940][663 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355885145337940\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9089\"}'\'' -e'"" [2025-08-26 09:48:04][355885145337940][663 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:48:04][355885145337940][663 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355885145337940\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9089\"}'\'' -e'"" [2025-08-26 09:48:07][355885145337940][4412 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6c3cd177-082a-4356-9333-04a7f1d9c0e7","id":"QR_6c3cd177-082a-4356-9333-04a7f1d9c0e7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:48:08][355885145337940][4568 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-26 09:48:08][355885145337940][4568 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-26 09:48:08][355885145337940][4568 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:48:12][351663701083438][1 ms][INFO] === Request start === [2025-08-26 09:48:12][351663701083438][1 ms][DEBUG] START check_scloud [2025-08-26 09:48:12][351663701083438][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:48:12][351663701083438][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 19161 4968 24630192 231872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:48:12][351663701083438][289 ms][DEBUG] targetPkg: running [2025-08-26 09:48:12][351663701083438][289 ms][DEBUG] END check_scloud in 288 ms [2025-08-26 09:48:12][351663701083438][289 ms][DEBUG] START check_boot_completed [2025-08-26 09:48:12][351663701083438][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:48:12][351663701083438][336 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:48:12][351663701083438][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:48:12][351663701083438][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:48:12][351663701083438][383 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 09:48:12][351663701083438][383 ms][DEBUG] START check_internet [2025-08-26 09:48:12][351663701083438][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:48:12][351663701083438][648 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=165 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 165.739/165.739/165.739/0.000 ms\n [2025-08-26 09:48:12][351663701083438][649 ms][DEBUG] check_internet: online [2025-08-26 09:48:12][351663701083438][649 ms][DEBUG] END check_internet in 266 ms [2025-08-26 09:48:12][351663701083438][649 ms][DEBUG] rawBody.length=1149 [2025-08-26 09:48:12][351663701083438][649 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351663701083438\",\"model\":\"SM-A047M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2391\"}'\'' -e'"" [2025-08-26 09:48:12][351663701083438][649 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:48:12][351663701083438][649 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351663701083438\",\"model\":\"SM-A047M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2391\"}'\'' -e'"" [2025-08-26 09:48:17][351663701083438][5694 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_94da4139-95e7-47a4-bf06-7d09ee702a17","id":"QR_94da4139-95e7-47a4-bf06-7d09ee702a17","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:48:18][351663701083438][5850 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-08-26 09:48:18][351663701083438][5850 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-08-26 09:48:18][351663701083438][5850 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:48:23][357156430215029][0 ms][INFO] === Request start === [2025-08-26 09:48:23][357156430215029][1 ms][DEBUG] START check_scloud [2025-08-26 09:48:23][357156430215029][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:48:23][357156430215029][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 19161 4968 24793108 243836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:48:23][357156430215029][312 ms][DEBUG] targetPkg: running [2025-08-26 09:48:23][357156430215029][312 ms][DEBUG] END check_scloud in 312 ms [2025-08-26 09:48:23][357156430215029][312 ms][DEBUG] START check_boot_completed [2025-08-26 09:48:23][357156430215029][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:48:23][357156430215029][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:48:23][357156430215029][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:48:23][357156430215029][406 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:48:23][357156430215029][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 09:48:23][357156430215029][406 ms][DEBUG] START check_internet [2025-08-26 09:48:23][357156430215029][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:48:23][357156430215029][671 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=155 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 155.069/155.069/155.069/0.000 ms\n [2025-08-26 09:48:23][357156430215029][671 ms][DEBUG] check_internet: online [2025-08-26 09:48:23][357156430215029][672 ms][DEBUG] END check_internet in 266 ms [2025-08-26 09:48:23][357156430215029][672 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:48:23][357156430215029][672 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357156430215029\",\"model\":\"SM-T736B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1502\"}'\'' -e'"" [2025-08-26 09:48:23][357156430215029][672 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:48:23][357156430215029][672 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357156430215029\",\"model\":\"SM-T736B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1502\"}'\'' -e'"" [2025-08-26 09:48:27][357156430215029][4280 ms][DEBUG] proc_open done in 3608 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 09:48:27][357156430215029][4280 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-08-26 09:48:27][357156430215029][4280 ms][WARN] Detected error: Process with pid 19161 either refused to load frida-agent, or terminated during injection [2025-08-26 09:48:27][357156430215029][4280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 09:48:27][357156430215029][4405 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 09:48:27][357156430215029][4405 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 09:48:27][357156430215029][4405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 09:48:27][357156430215029][4545 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 09:48:27][357156430215029][4546 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 09:48:27][357156430215029][4717 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 09:48:29][357156430215029][6732 ms][DEBUG] START check_boot_completed [2025-08-26 09:48:29][357156430215029][6732 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:48:29][357156430215029][6779 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:48:29][357156430215029][6779 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:48:30][357156430215029][6842 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 09:48:30][357156430215029][6842 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 09:48:33][357156430215029][9856 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 09:48:33][357156430215029][9857 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357156430215029\",\"model\":\"SM-T736B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1502\"}'\'' -e'"" [2025-08-26 09:48:36][357156430215029][13590 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a45ec7c-70b5-4e78-a57d-b581cde1f1a0","id":"QR_0a45ec7c-70b5-4e78-a57d-b581cde1f1a0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:48:36][357156430215029][13746 ms][DEBUG] proc_open done in 3890 ms; code=255; res.len=3343 [2025-08-26 09:48:36][357156430215029][13746 ms][DEBUG] END runCmdUntilRes#2 in 3890 ms [2025-08-26 09:48:36][357156430215029][13747 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:49:03][357962507032688][0 ms][INFO] === Request start === [2025-08-26 09:49:03][357962507032688][1 ms][DEBUG] START check_scloud [2025-08-26 09:49:03][357962507032688][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:49:03][357962507032688][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 20583 4968 23441392 127404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:49:03][357962507032688][314 ms][DEBUG] targetPkg: running [2025-08-26 09:49:03][357962507032688][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-26 09:49:03][357962507032688][314 ms][DEBUG] START check_boot_completed [2025-08-26 09:49:03][357962507032688][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:49:03][357962507032688][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 09:49:03][357962507032688][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:49:04][357962507032688][423 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 09:49:04][357962507032688][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 09:49:04][357962507032688][423 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:49:04][357962507032688][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507032688\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6580\"}'\'' -e'"" [2025-08-26 09:49:04][357962507032688][423 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:49:04][357962507032688][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507032688\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6580\"}'\'' -e'"" [2025-08-26 09:49:07][357962507032688][4187 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_55412344-ae88-4b64-b514-99fc3e5a380a","id":"QR_55412344-ae88-4b64-b514-99fc3e5a380a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:49:07][357962507032688][4344 ms][DEBUG] proc_open done in 3921 ms; code=255; res.len=3343 [2025-08-26 09:49:07][357962507032688][4344 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-08-26 09:49:07][357962507032688][4344 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:50:03][356019748512761][0 ms][INFO] === Request start === [2025-08-26 09:50:03][356019748512761][1 ms][DEBUG] START check_scloud [2025-08-26 09:50:03][356019748512761][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:50:04][356019748512761][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 20583 4968 23563476 137984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:50:04][356019748512761][265 ms][DEBUG] targetPkg: running [2025-08-26 09:50:04][356019748512761][265 ms][DEBUG] END check_scloud in 265 ms [2025-08-26 09:50:04][356019748512761][265 ms][DEBUG] START check_boot_completed [2025-08-26 09:50:04][356019748512761][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:50:04][356019748512761][312 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 09:50:04][356019748512761][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:50:04][356019748512761][359 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:50:04][356019748512761][359 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 09:50:04][356019748512761][359 ms][DEBUG] START check_internet [2025-08-26 09:50:04][356019748512761][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:50:04][356019748512761][656 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=99.4 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 99.440/99.440/99.440/0.000 ms\n [2025-08-26 09:50:04][356019748512761][656 ms][DEBUG] check_internet: online [2025-08-26 09:50:04][356019748512761][656 ms][DEBUG] END check_internet in 297 ms [2025-08-26 09:50:04][356019748512761][656 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:50:04][356019748512761][656 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019748512761\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1134\"}'\'' -e'"" [2025-08-26 09:50:04][356019748512761][656 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:50:04][356019748512761][656 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019748512761\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1134\"}'\'' -e'"" [2025-08-26 09:50:08][356019748512761][4592 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_28831a33-467f-45f0-a6a3-2a0040c97310","id":"QR_28831a33-467f-45f0-a6a3-2a0040c97310","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:50:08][356019748512761][4748 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-08-26 09:50:08][356019748512761][4748 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-26 09:50:08][356019748512761][4749 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:51:03][356923587964753][1 ms][INFO] === Request start === [2025-08-26 09:51:03][356923587964753][1 ms][DEBUG] START check_scloud [2025-08-26 09:51:03][356923587964753][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:51:03][356923587964753][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 20583 4968 23693796 150084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:51:03][356923587964753][310 ms][DEBUG] targetPkg: running [2025-08-26 09:51:03][356923587964753][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 09:51:03][356923587964753][310 ms][DEBUG] START check_boot_completed [2025-08-26 09:51:03][356923587964753][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:51:03][356923587964753][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 09:51:03][356923587964753][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:51:03][356923587964753][404 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 09:51:03][356923587964753][405 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 09:51:03][356923587964753][405 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:51:03][356923587964753][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356923587964753\",\"model\":\"SM-A156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8009\"}'\'' -e'"" [2025-08-26 09:51:03][356923587964753][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:51:03][356923587964753][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356923587964753\",\"model\":\"SM-A156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8009\"}'\'' -e'"" [2025-08-26 09:51:07][356923587964753][4090 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1c1bad2d-0780-4a9d-bfb2-a101f836356d","id":"QR_1c1bad2d-0780-4a9d-bfb2-a101f836356d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:51:07][356923587964753][4246 ms][DEBUG] proc_open done in 3841 ms; code=255; res.len=3343 [2025-08-26 09:51:07][356923587964753][4246 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-08-26 09:51:07][356923587964753][4246 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:51:10][350804332218073][0 ms][INFO] === Request start === [2025-08-26 09:51:10][350804332218073][1 ms][DEBUG] START check_scloud [2025-08-26 09:51:10][350804332218073][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:51:10][350804332218073][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 20583 4968 23848556 160828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:51:10][350804332218073][300 ms][DEBUG] targetPkg: running [2025-08-26 09:51:10][350804332218073][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-26 09:51:10][350804332218073][300 ms][DEBUG] START check_boot_completed [2025-08-26 09:51:10][350804332218073][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:51:10][350804332218073][347 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 09:51:10][350804332218073][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:51:10][350804332218073][440 ms][DEBUG] SU: done in 93 ms; out [2025-08-26 09:51:10][350804332218073][440 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 09:51:10][350804332218073][440 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:51:10][350804332218073][440 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350804332218073\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6413\"}'\'' -e'"" [2025-08-26 09:51:10][350804332218073][440 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:51:10][350804332218073][440 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350804332218073\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6413\"}'\'' -e'"" [2025-08-26 09:51:14][350804332218073][4189 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dcd03558-b7d8-4e86-a049-dab501eec025","id":"QR_dcd03558-b7d8-4e86-a049-dab501eec025","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:51:14][350804332218073][4345 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-26 09:51:14][350804332218073][4345 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-26 09:51:14][350804332218073][4345 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:52:03][357674437642730][0 ms][INFO] === Request start === [2025-08-26 09:52:03][357674437642730][1 ms][DEBUG] START check_scloud [2025-08-26 09:52:03][357674437642730][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:52:03][357674437642730][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 20583 4968 23994924 172688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:52:03][357674437642730][309 ms][DEBUG] targetPkg: running [2025-08-26 09:52:03][357674437642730][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 09:52:03][357674437642730][309 ms][DEBUG] START check_boot_completed [2025-08-26 09:52:03][357674437642730][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:52:04][357674437642730][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 09:52:04][357674437642730][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:52:04][357674437642730][388 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 09:52:04][357674437642730][388 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 09:52:04][357674437642730][388 ms][DEBUG] START check_internet [2025-08-26 09:52:04][357674437642730][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:52:04][357674437642730][684 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=176 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 176.709/176.709/176.709/0.000 ms\n [2025-08-26 09:52:04][357674437642730][684 ms][DEBUG] check_internet: online [2025-08-26 09:52:04][357674437642730][684 ms][DEBUG] END check_internet in 296 ms [2025-08-26 09:52:04][357674437642730][684 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:52:04][357674437642730][684 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674437642730\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5719\"}'\'' -e'"" [2025-08-26 09:52:04][357674437642730][684 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:52:04][357674437642730][684 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674437642730\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5719\"}'\'' -e'"" [2025-08-26 09:52:07][357674437642730][4261 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cdc1929c-2c88-4630-a803-529a5ff6d1a2","id":"QR_cdc1929c-2c88-4630-a803-529a5ff6d1a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:52:08][357674437642730][4417 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-08-26 09:52:08][357674437642730][4417 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-08-26 09:52:08][357674437642730][4417 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:52:09][351547440316615][0 ms][INFO] === Request start === [2025-08-26 09:52:09][351547440316615][1 ms][DEBUG] START check_scloud [2025-08-26 09:52:09][351547440316615][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:52:10][351547440316615][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 20583 4968 24180908 183648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:52:10][351547440316615][268 ms][DEBUG] targetPkg: running [2025-08-26 09:52:10][351547440316615][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-26 09:52:10][351547440316615][268 ms][DEBUG] START check_boot_completed [2025-08-26 09:52:10][351547440316615][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:52:10][351547440316615][346 ms][DEBUG] ADB: done in 78 ms; out [2025-08-26 09:52:10][351547440316615][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:52:10][351547440316615][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:52:10][351547440316615][393 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 09:52:10][351547440316615][393 ms][DEBUG] START check_internet [2025-08-26 09:52:10][351547440316615][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:52:10][351547440316615][612 ms][DEBUG] SU: done in 218 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=112 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 112.061/112.061/112.061/0.000 ms\n [2025-08-26 09:52:10][351547440316615][612 ms][DEBUG] check_internet: online [2025-08-26 09:52:10][351547440316615][612 ms][DEBUG] END check_internet in 219 ms [2025-08-26 09:52:10][351547440316615][612 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:52:10][351547440316615][612 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351547440316615\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6053\"}'\'' -e'"" [2025-08-26 09:52:10][351547440316615][612 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:52:10][351547440316615][612 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351547440316615\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6053\"}'\'' -e'"" [2025-08-26 09:52:13][351547440316615][4204 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_df72c66c-5903-4698-9125-103896b901e9","id":"QR_df72c66c-5903-4698-9125-103896b901e9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:52:14][351547440316615][4361 ms][DEBUG] proc_open done in 3748 ms; code=255; res.len=3343 [2025-08-26 09:52:14][351547440316615][4361 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-08-26 09:52:14][351547440316615][4361 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:57:04][351977561880703][1 ms][INFO] === Request start === [2025-08-26 09:57:04][351977561880703][1 ms][DEBUG] START check_scloud [2025-08-26 09:57:04][351977561880703][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:57:04][351977561880703][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 20583 4968 24323464 195260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:57:04][351977561880703][315 ms][DEBUG] targetPkg: running [2025-08-26 09:57:04][351977561880703][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-26 09:57:04][351977561880703][315 ms][DEBUG] START check_boot_completed [2025-08-26 09:57:04][351977561880703][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:57:04][351977561880703][346 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 09:57:04][351977561880703][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:57:04][351977561880703][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:57:04][351977561880703][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 09:57:04][351977561880703][393 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:57:04][351977561880703][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351977561880703\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3910\"}'\'' -e'"" [2025-08-26 09:57:04][351977561880703][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:57:04][351977561880703][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351977561880703\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3910\"}'\'' -e'"" [2025-08-26 09:57:08][351977561880703][4314 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e0df8da4-45a3-4749-b4ce-6912adcf854d","id":"QR_e0df8da4-45a3-4749-b4ce-6912adcf854d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:57:08][351977561880703][4470 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-26 09:57:08][351977561880703][4470 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-26 09:57:08][351977561880703][4470 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 09:58:03][354130543177288][1 ms][INFO] === Request start === [2025-08-26 09:58:03][354130543177288][1 ms][DEBUG] START check_scloud [2025-08-26 09:58:03][354130543177288][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 09:58:03][354130543177288][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 20583 4968 24449516 205508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 09:58:03][354130543177288][299 ms][DEBUG] targetPkg: running [2025-08-26 09:58:03][354130543177288][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-26 09:58:03][354130543177288][299 ms][DEBUG] START check_boot_completed [2025-08-26 09:58:03][354130543177288][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 09:58:03][354130543177288][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 09:58:03][354130543177288][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 09:58:04][354130543177288][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 09:58:04][354130543177288][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 09:58:04][354130543177288][377 ms][DEBUG] START check_internet [2025-08-26 09:58:04][354130543177288][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 09:58:04][354130543177288][814 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=150 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 150.062/150.062/150.062/0.000 ms\n [2025-08-26 09:58:04][354130543177288][815 ms][DEBUG] check_internet: online [2025-08-26 09:58:04][354130543177288][815 ms][DEBUG] END check_internet in 437 ms [2025-08-26 09:58:04][354130543177288][815 ms][DEBUG] rawBody.length=1148 [2025-08-26 09:58:04][354130543177288][815 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130543177288\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6051\"}'\'' -e'"" [2025-08-26 09:58:04][354130543177288][815 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 09:58:04][354130543177288][815 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130543177288\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6051\"}'\'' -e'"" [2025-08-26 09:58:08][354130543177288][4736 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4fca1276-4fe6-487c-afda-d560c8242ab0","id":"QR_4fca1276-4fe6-487c-afda-d560c8242ab0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 09:58:08][354130543177288][4892 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-26 09:58:08][354130543177288][4892 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-26 09:58:08][354130543177288][4892 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:00:04][356919951497065][1 ms][INFO] === Request start === [2025-08-26 10:00:04][356919951497065][1 ms][DEBUG] START check_scloud [2025-08-26 10:00:04][356919951497065][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:00:04][356919951497065][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 20583 4968 24561360 216480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:00:04][356919951497065][292 ms][DEBUG] targetPkg: running [2025-08-26 10:00:04][356919951497065][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-26 10:00:04][356919951497065][292 ms][DEBUG] START check_boot_completed [2025-08-26 10:00:04][356919951497065][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:00:04][356919951497065][339 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 10:00:04][356919951497065][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:00:04][356919951497065][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:00:04][356919951497065][386 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 10:00:04][356919951497065][386 ms][DEBUG] START check_internet [2025-08-26 10:00:04][356919951497065][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:00:04][356919951497065][776 ms][DEBUG] SU: done in 391 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=101 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 101.967/101.967/101.967/0.000 ms\n [2025-08-26 10:00:04][356919951497065][776 ms][DEBUG] check_internet: online [2025-08-26 10:00:04][356919951497065][777 ms][DEBUG] END check_internet in 391 ms [2025-08-26 10:00:04][356919951497065][777 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:00:04][356919951497065][777 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356919951497065\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1022\"}'\'' -e'"" [2025-08-26 10:00:04][356919951497065][777 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:00:04][356919951497065][777 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356919951497065\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1022\"}'\'' -e'"" [2025-08-26 10:00:08][356919951497065][4619 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0a8f8f9-b68f-4174-a158-fb9e10980095","id":"QR_b0a8f8f9-b68f-4174-a158-fb9e10980095","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:00:08][356919951497065][4775 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-08-26 10:00:08][356919951497065][4775 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-26 10:00:08][356919951497065][4775 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:00:11][357674433530236][0 ms][INFO] === Request start === [2025-08-26 10:00:11][357674433530236][1 ms][DEBUG] START check_scloud [2025-08-26 10:00:11][357674433530236][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:00:11][357674433530236][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 20583 4968 24718300 228192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:00:11][357674433530236][286 ms][DEBUG] targetPkg: running [2025-08-26 10:00:11][357674433530236][286 ms][DEBUG] END check_scloud in 286 ms [2025-08-26 10:00:11][357674433530236][286 ms][DEBUG] START check_boot_completed [2025-08-26 10:00:11][357674433530236][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:00:11][357674433530236][331 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 10:00:11][357674433530236][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:00:11][357674433530236][394 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 10:00:11][357674433530236][394 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-26 10:00:11][357674433530236][394 ms][DEBUG] START check_internet [2025-08-26 10:00:11][357674433530236][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:00:12][357674433530236][644 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=122 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 122.248/122.248/122.248/0.000 ms\n [2025-08-26 10:00:12][357674433530236][644 ms][DEBUG] check_internet: online [2025-08-26 10:00:12][357674433530236][644 ms][DEBUG] END check_internet in 250 ms [2025-08-26 10:00:12][357674433530236][644 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:00:12][357674433530236][644 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674433530236\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2853\"}'\'' -e'"" [2025-08-26 10:00:12][357674433530236][644 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:00:12][357674433530236][644 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674433530236\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2853\"}'\'' -e'"" [2025-08-26 10:00:15][357674433530236][4190 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5164f8f0-b2d5-40b1-9a19-2278a1bb1744","id":"QR_5164f8f0-b2d5-40b1-9a19-2278a1bb1744","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:00:15][357674433530236][4346 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-08-26 10:00:15][357674433530236][4346 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-26 10:00:15][357674433530236][4346 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:01:03][352397457544710][0 ms][INFO] === Request start === [2025-08-26 10:01:03][352397457544710][1 ms][DEBUG] START check_scloud [2025-08-26 10:01:03][352397457544710][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:01:03][352397457544710][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 20583 4968 24809628 240160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:01:03][352397457544710][274 ms][DEBUG] targetPkg: running [2025-08-26 10:01:03][352397457544710][274 ms][DEBUG] END check_scloud in 273 ms [2025-08-26 10:01:03][352397457544710][274 ms][DEBUG] START check_boot_completed [2025-08-26 10:01:03][352397457544710][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:01:03][352397457544710][321 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 10:01:03][352397457544710][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:01:03][352397457544710][368 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:01:03][352397457544710][368 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 10:01:03][352397457544710][368 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:01:03][352397457544710][368 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397457544710\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6790\"}'\'' -e'"" [2025-08-26 10:01:03][352397457544710][368 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:01:03][352397457544710][368 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397457544710\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6790\"}'\'' -e'"" [2025-08-26 10:01:07][352397457544710][4273 ms][DEBUG] proc_open done in 3905 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 10:01:07][352397457544710][4273 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-26 10:01:07][352397457544710][4273 ms][WARN] Detected error: Process with pid 20583 either refused to load frida-agent, or terminated during injection [2025-08-26 10:01:07][352397457544710][4273 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 10:01:08][352397457544710][4414 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 10:01:08][352397457544710][4414 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 10:01:08][352397457544710][4414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 10:01:08][352397457544710][4539 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 10:01:08][352397457544710][4539 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 10:01:08][352397457544710][4695 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 10:01:10][352397457544710][6710 ms][DEBUG] START check_boot_completed [2025-08-26 10:01:10][352397457544710][6710 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:01:10][352397457544710][6757 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:01:10][352397457544710][6757 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:01:10][352397457544710][6804 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:01:10][352397457544710][6804 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 10:01:13][352397457544710][9818 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 10:01:13][352397457544710][9818 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397457544710\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6790\"}'\'' -e'"" [2025-08-26 10:01:17][352397457544710][13583 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1817e89d-90af-4e01-b21d-324ad4d5f675","id":"QR_1817e89d-90af-4e01-b21d-324ad4d5f675","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:01:17][352397457544710][13739 ms][DEBUG] proc_open done in 3921 ms; code=255; res.len=3343 [2025-08-26 10:01:17][352397457544710][13739 ms][DEBUG] END runCmdUntilRes#2 in 3921 ms [2025-08-26 10:01:17][352397457544710][13740 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:03:03][353117552495918][1 ms][INFO] === Request start === [2025-08-26 10:03:03][353117552495918][1 ms][DEBUG] START check_scloud [2025-08-26 10:03:03][353117552495918][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:03:03][353117552495918][319 ms][DEBUG] SU: done in 317 ms; outu0_a118 22145 4968 23524308 128068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:03:03][353117552495918][319 ms][DEBUG] targetPkg: running [2025-08-26 10:03:03][353117552495918][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-26 10:03:03][353117552495918][319 ms][DEBUG] START check_boot_completed [2025-08-26 10:03:03][353117552495918][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:03:03][353117552495918][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 10:03:03][353117552495918][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:03:03][353117552495918][412 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:03:03][353117552495918][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 10:03:03][353117552495918][412 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:03:03][353117552495918][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353117552495918\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7586\"}'\'' -e'"" [2025-08-26 10:03:03][353117552495918][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:03:03][353117552495918][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353117552495918\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7586\"}'\'' -e'"" [2025-08-26 10:03:07][353117552495918][3818 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-26 10:03:07][353117552495918][3974 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=115 [2025-08-26 10:03:07][353117552495918][3974 ms][DEBUG] END runCmdUntilRes#1 in 3562 ms [2025-08-26 10:03:07][353117552495918][3974 ms][INFO] SUCCESS response from frida (len=115) [2025-08-26 10:03:07][][0 ms][INFO] === Request start === [2025-08-26 10:03:07][][1 ms][DEBUG] START check_scloud [2025-08-26 10:03:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:03:07][][307 ms][DEBUG] SU: done in 307 ms; outu0_a118 22145 4968 23650460 138760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:03:07][][307 ms][DEBUG] targetPkg: running [2025-08-26 10:03:07][][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-26 10:03:07][][308 ms][DEBUG] START check_boot_completed [2025-08-26 10:03:07][][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:03:07][][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 10:03:07][][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:03:07][][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:03:07][][401 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 10:03:07][][401 ms][DEBUG] rawBody.length=1129 [2025-08-26 10:03:07][][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW325P9QM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5952\"}'\'' -e'"" [2025-08-26 10:03:07][][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:03:07][][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW325P9QM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5952\"}'\'' -e'"" [2025-08-26 10:03:11][][3556 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 10:03:11][][3713 ms][DEBUG] proc_open done in 3311 ms; code=255; res.len=107 [2025-08-26 10:03:11][][3713 ms][DEBUG] END runCmdUntilRes#1 in 3311 ms [2025-08-26 10:03:11][][3713 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 10:03:13][353117552495918][0 ms][INFO] === Request start === [2025-08-26 10:03:13][353117552495918][1 ms][DEBUG] START check_scloud [2025-08-26 10:03:13][353117552495918][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:03:13][353117552495918][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 22145 4968 23789336 150388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:03:13][353117552495918][293 ms][DEBUG] targetPkg: running [2025-08-26 10:03:13][353117552495918][293 ms][DEBUG] END check_scloud in 292 ms [2025-08-26 10:03:13][353117552495918][293 ms][DEBUG] START check_boot_completed [2025-08-26 10:03:13][353117552495918][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:03:13][353117552495918][340 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:03:13][353117552495918][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:03:13][353117552495918][418 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 10:03:13][353117552495918][418 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 10:03:13][353117552495918][418 ms][DEBUG] rawBody.length=1149 [2025-08-26 10:03:13][353117552495918][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353117552495918\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3996\"}'\'' -e'"" [2025-08-26 10:03:13][353117552495918][418 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:03:13][353117552495918][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353117552495918\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3996\"}'\'' -e'"" [2025-08-26 10:03:19][353117552495918][5494 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7126c986-3a29-40ae-9247-96d17004f6a5","id":"QR_7126c986-3a29-40ae-9247-96d17004f6a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:03:19][353117552495918][5651 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3343 [2025-08-26 10:03:19][353117552495918][5651 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-08-26 10:03:19][353117552495918][5651 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:03:23][350498051021741][0 ms][INFO] === Request start === [2025-08-26 10:03:23][350498051021741][1 ms][DEBUG] START check_scloud [2025-08-26 10:03:23][350498051021741][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:03:24][350498051021741][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 22145 4968 23952380 161572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:03:24][350498051021741][318 ms][DEBUG] targetPkg: running [2025-08-26 10:03:24][350498051021741][318 ms][DEBUG] END check_scloud in 318 ms [2025-08-26 10:03:24][350498051021741][318 ms][DEBUG] START check_boot_completed [2025-08-26 10:03:24][350498051021741][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:03:24][350498051021741][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 10:03:24][350498051021741][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:03:24][350498051021741][412 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:03:24][350498051021741][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 10:03:24][350498051021741][412 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:03:24][350498051021741][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350498051021741\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9600\"}'\'' -e'"" [2025-08-26 10:03:24][350498051021741][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:03:24][350498051021741][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350498051021741\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9600\"}'\'' -e'"" [2025-08-26 10:03:28][350498051021741][4129 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ad4e9c39-e4b5-41c5-ab2a-9fe2a5e4692f","id":"QR_ad4e9c39-e4b5-41c5-ab2a-9fe2a5e4692f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:03:28][350498051021741][4286 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-08-26 10:03:28][350498051021741][4286 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-26 10:03:28][350498051021741][4286 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:05:03][352978602460884][0 ms][INFO] === Request start === [2025-08-26 10:05:03][352978602460884][1 ms][DEBUG] START check_scloud [2025-08-26 10:05:03][352978602460884][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:05:03][352978602460884][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 22145 4968 24078488 173412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:05:03][352978602460884][316 ms][DEBUG] targetPkg: running [2025-08-26 10:05:03][352978602460884][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-26 10:05:03][352978602460884][316 ms][DEBUG] START check_boot_completed [2025-08-26 10:05:03][352978602460884][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:05:03][352978602460884][363 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 10:05:03][352978602460884][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:05:03][352978602460884][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:05:03][352978602460884][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 10:05:03][352978602460884][409 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:05:03][352978602460884][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978602460884\",\"model\":\"SM-M326B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7915\"}'\'' -e'"" [2025-08-26 10:05:03][352978602460884][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:05:03][352978602460884][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978602460884\",\"model\":\"SM-M326B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7915\"}'\'' -e'"" [2025-08-26 10:05:07][352978602460884][4268 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_99f7a06a-2de3-46ac-9589-a0f0304910ad","id":"QR_99f7a06a-2de3-46ac-9589-a0f0304910ad","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:05:07][352978602460884][4424 ms][DEBUG] proc_open done in 4015 ms; code=255; res.len=3343 [2025-08-26 10:05:07][352978602460884][4424 ms][DEBUG] END runCmdUntilRes#1 in 4015 ms [2025-08-26 10:05:07][352978602460884][4424 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:05:10][356080125024481][1 ms][INFO] === Request start === [2025-08-26 10:05:10][356080125024481][1 ms][DEBUG] START check_scloud [2025-08-26 10:05:10][356080125024481][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:05:10][356080125024481][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 22145 4968 24224992 183984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:05:10][356080125024481][285 ms][DEBUG] targetPkg: running [2025-08-26 10:05:10][356080125024481][285 ms][DEBUG] END check_scloud in 284 ms [2025-08-26 10:05:10][356080125024481][286 ms][DEBUG] START check_boot_completed [2025-08-26 10:05:10][356080125024481][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:05:10][356080125024481][332 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:05:10][356080125024481][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:05:10][356080125024481][410 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 10:05:10][356080125024481][410 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 10:05:10][356080125024481][410 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:05:10][356080125024481][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356080125024481\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4389\"}'\'' -e'"" [2025-08-26 10:05:10][356080125024481][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:05:10][356080125024481][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356080125024481\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4389\"}'\'' -e'"" [2025-08-26 10:05:14][356080125024481][3909 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa7b9fef-7305-4dfb-98f7-68c5d8e287d5","id":"QR_fa7b9fef-7305-4dfb-98f7-68c5d8e287d5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:05:14][356080125024481][4065 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=3343 [2025-08-26 10:05:14][356080125024481][4066 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-26 10:05:14][356080125024481][4066 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:08:03][352485225812590][1 ms][INFO] === Request start === [2025-08-26 10:08:03][352485225812590][1 ms][DEBUG] START check_scloud [2025-08-26 10:08:03][352485225812590][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:08:04][352485225812590][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 22145 4968 24374716 196380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:08:04][352485225812590][306 ms][DEBUG] targetPkg: running [2025-08-26 10:08:04][352485225812590][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-26 10:08:04][352485225812590][306 ms][DEBUG] START check_boot_completed [2025-08-26 10:08:04][352485225812590][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:08:04][352485225812590][337 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 10:08:04][352485225812590][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:08:04][352485225812590][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:08:04][352485225812590][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 10:08:04][352485225812590][384 ms][DEBUG] START check_internet [2025-08-26 10:08:04][352485225812590][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:08:04][352485225812590][728 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=98.1 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 98.122/98.122/98.122/0.000 ms\n [2025-08-26 10:08:04][352485225812590][728 ms][DEBUG] check_internet: online [2025-08-26 10:08:04][352485225812590][728 ms][DEBUG] END check_internet in 344 ms [2025-08-26 10:08:04][352485225812590][728 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:08:04][352485225812590][728 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352485225812590\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7380\"}'\'' -e'"" [2025-08-26 10:08:04][352485225812590][728 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:08:04][352485225812590][728 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352485225812590\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7380\"}'\'' -e'"" [2025-08-26 10:08:08][352485225812590][4586 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3c1f3800-e585-4fdc-b834-2b853b0bfc3e","id":"QR_3c1f3800-e585-4fdc-b834-2b853b0bfc3e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:08:08][352485225812590][4743 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-26 10:08:08][352485225812590][4743 ms][DEBUG] END runCmdUntilRes#1 in 4015 ms [2025-08-26 10:08:08][352485225812590][4743 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:09:03][355255117023607][0 ms][INFO] === Request start === [2025-08-26 10:09:03][355255117023607][1 ms][DEBUG] START check_scloud [2025-08-26 10:09:03][355255117023607][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:09:03][355255117023607][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 22145 4968 24530712 207672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:09:03][355255117023607][317 ms][DEBUG] targetPkg: running [2025-08-26 10:09:03][355255117023607][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-26 10:09:03][355255117023607][317 ms][DEBUG] START check_boot_completed [2025-08-26 10:09:03][355255117023607][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:09:03][355255117023607][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:09:03][355255117023607][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:09:03][355255117023607][426 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 10:09:03][355255117023607][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 10:09:03][355255117023607][426 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:09:03][355255117023607][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355255117023607\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4743\"}'\'' -e'"" [2025-08-26 10:09:03][355255117023607][426 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:09:03][355255117023607][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355255117023607\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4743\"}'\'' -e'"" [2025-08-26 10:09:07][355255117023607][4112 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_586098d3-7c54-4ebe-8a33-8f85750370c2","id":"QR_586098d3-7c54-4ebe-8a33-8f85750370c2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:09:07][355255117023607][4269 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3343 [2025-08-26 10:09:07][355255117023607][4269 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-08-26 10:09:07][355255117023607][4269 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:12:03][354068195110928][1 ms][INFO] === Request start === [2025-08-26 10:12:03][354068195110928][1 ms][DEBUG] START check_scloud [2025-08-26 10:12:03][354068195110928][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:12:04][354068195110928][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 22145 4968 24646652 218548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:12:04][354068195110928][305 ms][DEBUG] targetPkg: running [2025-08-26 10:12:04][354068195110928][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 10:12:04][354068195110928][305 ms][DEBUG] START check_boot_completed [2025-08-26 10:12:04][354068195110928][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:12:04][354068195110928][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 10:12:04][354068195110928][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:12:04][354068195110928][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:12:04][354068195110928][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 10:12:04][354068195110928][383 ms][DEBUG] START check_internet [2025-08-26 10:12:04][354068195110928][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:12:04][354068195110928][727 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=98.6 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 98.616/98.616/98.616/0.000 ms\n [2025-08-26 10:12:04][354068195110928][727 ms][DEBUG] check_internet: online [2025-08-26 10:12:04][354068195110928][727 ms][DEBUG] END check_internet in 344 ms [2025-08-26 10:12:04][354068195110928][727 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:12:04][354068195110928][727 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195110928\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2540\"}'\'' -e'"" [2025-08-26 10:12:04][354068195110928][727 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:12:04][354068195110928][727 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195110928\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2540\"}'\'' -e'"" [2025-08-26 10:12:08][354068195110928][4820 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_80d67dae-c994-463a-b03f-3398fe029f69","id":"QR_80d67dae-c994-463a-b03f-3398fe029f69","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:12:08][354068195110928][4976 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-08-26 10:12:08][354068195110928][4976 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-26 10:12:08][354068195110928][4976 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:12:11][357962505427583][0 ms][INFO] === Request start === [2025-08-26 10:12:11][357962505427583][1 ms][DEBUG] START check_scloud [2025-08-26 10:12:11][357962505427583][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:12:11][357962505427583][279 ms][DEBUG] SU: done in 279 ms; outu0_a118 22145 4968 24786180 230428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:12:11][357962505427583][280 ms][DEBUG] targetPkg: running [2025-08-26 10:12:11][357962505427583][280 ms][DEBUG] END check_scloud in 279 ms [2025-08-26 10:12:11][357962505427583][280 ms][DEBUG] START check_boot_completed [2025-08-26 10:12:11][357962505427583][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:12:11][357962505427583][326 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 10:12:11][357962505427583][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:12:11][357962505427583][389 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 10:12:11][357962505427583][389 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 10:12:11][357962505427583][389 ms][DEBUG] START check_internet [2025-08-26 10:12:11][357962505427583][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:12:12][357962505427583][654 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=104 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 104.950/104.950/104.950/0.000 ms\n [2025-08-26 10:12:12][357962505427583][655 ms][DEBUG] check_internet: online [2025-08-26 10:12:12][357962505427583][655 ms][DEBUG] END check_internet in 266 ms [2025-08-26 10:12:12][357962505427583][655 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:12:12][357962505427583][655 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505427583\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5587\"}'\'' -e'"" [2025-08-26 10:12:12][357962505427583][655 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:12:12][357962505427583][655 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962505427583\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5587\"}'\'' -e'"" [2025-08-26 10:12:15][357962505427583][4466 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2231a7d5-da17-470f-8945-bb3840d46f53","id":"QR_2231a7d5-da17-470f-8945-bb3840d46f53","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:12:16][357962505427583][4622 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-26 10:12:16][357962505427583][4622 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-26 10:12:16][357962505427583][4622 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:13:03][351708814963354][0 ms][INFO] === Request start === [2025-08-26 10:13:03][351708814963354][1 ms][DEBUG] START check_scloud [2025-08-26 10:13:03][351708814963354][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:13:03][351708814963354][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 22145 4968 24881412 239076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:13:03][351708814963354][328 ms][DEBUG] targetPkg: running [2025-08-26 10:13:03][351708814963354][328 ms][DEBUG] END check_scloud in 327 ms [2025-08-26 10:13:03][351708814963354][328 ms][DEBUG] START check_boot_completed [2025-08-26 10:13:03][351708814963354][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:13:03][351708814963354][375 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:13:03][351708814963354][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:13:03][351708814963354][437 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 10:13:03][351708814963354][437 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 10:13:03][351708814963354][437 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:13:03][351708814963354][437 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351708814963354\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2308\"}'\'' -e'"" [2025-08-26 10:13:03][351708814963354][437 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:13:03][351708814963354][437 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351708814963354\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2308\"}'\'' -e'"" [2025-08-26 10:13:07][351708814963354][4202 ms][DEBUG] proc_open done in 3764 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 10:13:07][351708814963354][4202 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-08-26 10:13:07][351708814963354][4202 ms][WARN] Detected error: Process with pid 22145 either refused to load frida-agent, or terminated during injection [2025-08-26 10:13:07][351708814963354][4202 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 10:13:07][351708814963354][4342 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 10:13:07][351708814963354][4343 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 10:13:07][351708814963354][4343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 10:13:07][351708814963354][4483 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 10:13:07][351708814963354][4483 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 10:13:07][351708814963354][4702 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 10:13:09][351708814963354][6717 ms][DEBUG] START check_boot_completed [2025-08-26 10:13:09][351708814963354][6717 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:13:09][351708814963354][6764 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:13:09][351708814963354][6764 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:13:09][351708814963354][6826 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 10:13:09][351708814963354][6826 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 10:13:12][351708814963354][9841 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 10:13:12][351708814963354][9841 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351708814963354\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2308\"}'\'' -e'"" [2025-08-26 10:13:16][351708814963354][13528 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eec9d9a4-c89b-4db7-8cd8-7cf9a8b88de2","id":"QR_eec9d9a4-c89b-4db7-8cd8-7cf9a8b88de2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:13:16][351708814963354][13684 ms][DEBUG] proc_open done in 3843 ms; code=255; res.len=3343 [2025-08-26 10:13:16][351708814963354][13684 ms][DEBUG] END runCmdUntilRes#2 in 3843 ms [2025-08-26 10:13:16][351708814963354][13684 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:14:03][350013883200544][0 ms][INFO] === Request start === [2025-08-26 10:14:03][350013883200544][1 ms][DEBUG] START check_scloud [2025-08-26 10:14:03][350013883200544][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:14:03][350013883200544][323 ms][DEBUG] SU: done in 323 ms; outu0_a118 24330 4968 23509972 128224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:14:03][350013883200544][323 ms][DEBUG] targetPkg: running [2025-08-26 10:14:03][350013883200544][323 ms][DEBUG] END check_scloud in 323 ms [2025-08-26 10:14:03][350013883200544][324 ms][DEBUG] START check_boot_completed [2025-08-26 10:14:03][350013883200544][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:14:04][350013883200544][370 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:14:04][350013883200544][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:14:04][350013883200544][464 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 10:14:04][350013883200544][464 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-26 10:14:04][350013883200544][464 ms][DEBUG] START check_internet [2025-08-26 10:14:04][350013883200544][464 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:14:04][350013883200544][839 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=99.7 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 99.716/99.716/99.716/0.000 ms\n [2025-08-26 10:14:04][350013883200544][839 ms][DEBUG] check_internet: online [2025-08-26 10:14:04][350013883200544][839 ms][DEBUG] END check_internet in 375 ms [2025-08-26 10:14:04][350013883200544][839 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:14:04][350013883200544][839 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883200544\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5832\"}'\'' -e'"" [2025-08-26 10:14:04][350013883200544][839 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:14:04][350013883200544][839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883200544\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5832\"}'\'' -e'"" [2025-08-26 10:14:08][350013883200544][4650 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_66db5bfa-95f0-4fa8-b9c0-e9586817de85","id":"QR_66db5bfa-95f0-4fa8-b9c0-e9586817de85","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:14:08][350013883200544][4806 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-26 10:14:08][350013883200544][4807 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-26 10:14:08][350013883200544][4807 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:15:04][358818740845642][1 ms][INFO] === Request start === [2025-08-26 10:15:04][358818740845642][1 ms][DEBUG] START check_scloud [2025-08-26 10:15:04][358818740845642][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:15:04][358818740845642][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 24330 4968 23657492 138484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:15:04][358818740845642][260 ms][DEBUG] targetPkg: running [2025-08-26 10:15:04][358818740845642][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-26 10:15:04][358818740845642][260 ms][DEBUG] START check_boot_completed [2025-08-26 10:15:04][358818740845642][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:15:04][358818740845642][307 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:15:04][358818740845642][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:15:04][358818740845642][369 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 10:15:04][358818740845642][369 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 10:15:04][358818740845642][369 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:15:04][358818740845642][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358818740845642\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1638\"}'\'' -e'"" [2025-08-26 10:15:04][358818740845642][370 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:15:04][358818740845642][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358818740845642\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1638\"}'\'' -e'"" [2025-08-26 10:15:08][358818740845642][4134 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_096eb1b0-83fb-492f-a590-14cbed295d28","id":"QR_096eb1b0-83fb-492f-a590-14cbed295d28","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:15:08][358818740845642][4290 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-08-26 10:15:08][358818740845642][4290 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-08-26 10:15:08][358818740845642][4290 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:15:14][350938280148807][0 ms][INFO] === Request start === [2025-08-26 10:15:14][350938280148807][1 ms][DEBUG] START check_scloud [2025-08-26 10:15:14][350938280148807][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:15:14][350938280148807][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 24330 4968 23791632 149492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:15:14][350938280148807][288 ms][DEBUG] targetPkg: running [2025-08-26 10:15:14][350938280148807][288 ms][DEBUG] END check_scloud in 287 ms [2025-08-26 10:15:14][350938280148807][288 ms][DEBUG] START check_boot_completed [2025-08-26 10:15:14][350938280148807][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:15:15][350938280148807][333 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 10:15:15][350938280148807][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:15:15][350938280148807][380 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:15:15][350938280148807][380 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-26 10:15:15][350938280148807][380 ms][DEBUG] rawBody.length=1149 [2025-08-26 10:15:15][350938280148807][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938280148807\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7513\"}'\'' -e'"" [2025-08-26 10:15:15][350938280148807][380 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:15:15][350938280148807][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938280148807\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7513\"}'\'' -e'"" [2025-08-26 10:15:20][350938280148807][5691 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_73fdb315-341f-44c6-905d-2641770c9b21","id":"QR_73fdb315-341f-44c6-905d-2641770c9b21","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:15:20][350938280148807][5847 ms][DEBUG] proc_open done in 5467 ms; code=255; res.len=3343 [2025-08-26 10:15:20][350938280148807][5848 ms][DEBUG] END runCmdUntilRes#1 in 5467 ms [2025-08-26 10:15:20][350938280148807][5848 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:17:03][352838656362123][1 ms][INFO] === Request start === [2025-08-26 10:17:03][352838656362123][1 ms][DEBUG] START check_scloud [2025-08-26 10:17:03][352838656362123][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:17:03][352838656362123][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 24330 4968 23893072 160344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:17:03][352838656362123][313 ms][DEBUG] targetPkg: running [2025-08-26 10:17:03][352838656362123][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-26 10:17:03][352838656362123][313 ms][DEBUG] START check_boot_completed [2025-08-26 10:17:03][352838656362123][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:17:03][352838656362123][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 10:17:03][352838656362123][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:17:03][352838656362123][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:17:03][352838656362123][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 10:17:03][352838656362123][407 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:17:03][352838656362123][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838656362123\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4663\"}'\'' -e'"" [2025-08-26 10:17:03][352838656362123][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:17:03][352838656362123][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838656362123\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4663\"}'\'' -e'"" [2025-08-26 10:17:07][352838656362123][4249 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4eefe164-1ff5-4ca9-b3e6-27dab317a539","id":"QR_4eefe164-1ff5-4ca9-b3e6-27dab317a539","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:17:07][352838656362123][4406 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=3343 [2025-08-26 10:17:07][352838656362123][4406 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-26 10:17:07][352838656362123][4406 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:17:10][354916446371287][1 ms][INFO] === Request start === [2025-08-26 10:17:10][354916446371287][1 ms][DEBUG] START check_scloud [2025-08-26 10:17:10][354916446371287][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:17:10][354916446371287][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 24330 4968 24051992 171016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:17:10][354916446371287][304 ms][DEBUG] targetPkg: running [2025-08-26 10:17:10][354916446371287][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-26 10:17:10][354916446371287][304 ms][DEBUG] START check_boot_completed [2025-08-26 10:17:10][354916446371287][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:17:10][354916446371287][350 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:17:10][354916446371287][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:17:10][354916446371287][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:17:10][354916446371287][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 10:17:10][354916446371287][397 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:17:10][354916446371287][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916446371287\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5522\"}'\'' -e'"" [2025-08-26 10:17:10][354916446371287][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:17:10][354916446371287][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916446371287\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5522\"}'\'' -e'"" [2025-08-26 10:17:14][354916446371287][3943 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_919f011f-d016-4d1e-a7ad-89566053c009","id":"QR_919f011f-d016-4d1e-a7ad-89566053c009","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:17:14][354916446371287][4099 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-08-26 10:17:14][354916446371287][4099 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-26 10:17:14][354916446371287][4099 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:18:04][350121673291845][0 ms][INFO] === Request start === [2025-08-26 10:18:04][350121673291845][1 ms][DEBUG] START check_scloud [2025-08-26 10:18:04][350121673291845][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:18:05][350121673291845][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 24330 4968 24149144 182788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:18:05][350121673291845][295 ms][DEBUG] targetPkg: running [2025-08-26 10:18:05][350121673291845][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-26 10:18:05][350121673291845][295 ms][DEBUG] START check_boot_completed [2025-08-26 10:18:05][350121673291845][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:18:05][350121673291845][341 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 10:18:05][350121673291845][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:18:05][350121673291845][388 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:18:05][350121673291845][388 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 10:18:05][350121673291845][388 ms][DEBUG] START check_internet [2025-08-26 10:18:05][350121673291845][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:18:05][350121673291845][592 ms][DEBUG] SU: done in 204 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=113 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 113.431/113.431/113.431/0.000 ms\n [2025-08-26 10:18:05][350121673291845][593 ms][DEBUG] check_internet: online [2025-08-26 10:18:05][350121673291845][593 ms][DEBUG] END check_internet in 205 ms [2025-08-26 10:18:05][350121673291845][593 ms][DEBUG] rawBody.length=1158 [2025-08-26 10:18:05][350121673291845][593 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350121673291845\",\"model\":\"SM-X110\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R83WC0EVPTY\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8972\"}'\'' -e'"" [2025-08-26 10:18:05][350121673291845][593 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:18:05][350121673291845][593 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350121673291845\",\"model\":\"SM-X110\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R83WC0EVPTY\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8972\"}'\'' -e'"" [2025-08-26 10:18:08][350121673291845][4215 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2258a395-3550-45f4-bf24-ff5b75f96304","id":"QR_2258a395-3550-45f4-bf24-ff5b75f96304","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:18:09][350121673291845][4371 ms][DEBUG] proc_open done in 3778 ms; code=255; res.len=3343 [2025-08-26 10:18:09][350121673291845][4371 ms][DEBUG] END runCmdUntilRes#1 in 3779 ms [2025-08-26 10:18:09][350121673291845][4372 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:18:11][351781753369891][0 ms][INFO] === Request start === [2025-08-26 10:18:11][351781753369891][1 ms][DEBUG] START check_scloud [2025-08-26 10:18:11][351781753369891][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:18:11][351781753369891][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 24330 4968 24301856 193572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:18:11][351781753369891][310 ms][DEBUG] targetPkg: running [2025-08-26 10:18:11][351781753369891][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 10:18:11][351781753369891][310 ms][DEBUG] START check_boot_completed [2025-08-26 10:18:11][351781753369891][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:18:11][351781753369891][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 10:18:11][351781753369891][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:18:11][351781753369891][404 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 10:18:11][351781753369891][404 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 10:18:11][351781753369891][404 ms][DEBUG] START check_internet [2025-08-26 10:18:11][351781753369891][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:18:12][351781753369891][622 ms][DEBUG] SU: done in 218 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=85.1 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 85.104/85.104/85.104/0.000 ms\n [2025-08-26 10:18:12][351781753369891][622 ms][DEBUG] check_internet: online [2025-08-26 10:18:12][351781753369891][622 ms][DEBUG] END check_internet in 218 ms [2025-08-26 10:18:12][351781753369891][622 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:18:12][351781753369891][623 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351781753369891\",\"model\":\"SM-A253J\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KDI\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8493\"}'\'' -e'"" [2025-08-26 10:18:12][351781753369891][623 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:18:12][351781753369891][623 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351781753369891\",\"model\":\"SM-A253J\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KDI\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8493\"}'\'' -e'"" [2025-08-26 10:18:15][351781753369891][4043 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0e8d4318-2622-4c10-91fd-36d6b31674f6","id":"QR_0e8d4318-2622-4c10-91fd-36d6b31674f6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:18:15][351781753369891][4199 ms][DEBUG] proc_open done in 3576 ms; code=255; res.len=3343 [2025-08-26 10:18:15][351781753369891][4199 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-08-26 10:18:15][351781753369891][4200 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:18:18][350244314683160][0 ms][INFO] === Request start === [2025-08-26 10:18:18][350244314683160][1 ms][DEBUG] START check_scloud [2025-08-26 10:18:18][350244314683160][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:18:18][350244314683160][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 24330 4968 24430120 205468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:18:18][350244314683160][304 ms][DEBUG] targetPkg: running [2025-08-26 10:18:18][350244314683160][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-26 10:18:18][350244314683160][304 ms][DEBUG] START check_boot_completed [2025-08-26 10:18:18][350244314683160][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:18:18][350244314683160][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 10:18:18][350244314683160][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:18:18][350244314683160][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:18:18][350244314683160][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 10:18:18][350244314683160][381 ms][DEBUG] START check_internet [2025-08-26 10:18:18][350244314683160][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:18:19][350244314683160][678 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=186 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 186.571/186.571/186.571/0.000 ms\n [2025-08-26 10:18:19][350244314683160][678 ms][DEBUG] check_internet: online [2025-08-26 10:18:19][350244314683160][679 ms][DEBUG] END check_internet in 297 ms [2025-08-26 10:18:19][350244314683160][679 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:18:19][350244314683160][679 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350244314683160\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2660\"}'\'' -e'"" [2025-08-26 10:18:19][350244314683160][679 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:18:19][350244314683160][679 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350244314683160\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2660\"}'\'' -e'"" [2025-08-26 10:18:22][350244314683160][3912 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-26 10:18:22][350244314683160][4068 ms][DEBUG] proc_open done in 3389 ms; code=255; res.len=101 [2025-08-26 10:18:22][350244314683160][4068 ms][DEBUG] END runCmdUntilRes#1 in 3389 ms [2025-08-26 10:18:22][350244314683160][4068 ms][INFO] SUCCESS response from frida (len=101) [2025-08-26 10:18:22][][0 ms][INFO] === Request start === [2025-08-26 10:18:22][][1 ms][DEBUG] START check_scloud [2025-08-26 10:18:22][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:18:23][][297 ms][DEBUG] SU: done in 297 ms; outu0_a118 24330 4968 24578864 216384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:18:23][][297 ms][DEBUG] targetPkg: running [2025-08-26 10:18:23][][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-26 10:18:23][][298 ms][DEBUG] START check_boot_completed [2025-08-26 10:18:23][][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:18:23][][343 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 10:18:23][][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:18:23][][405 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 10:18:23][][405 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-26 10:18:23][][405 ms][DEBUG] START check_internet [2025-08-26 10:18:23][][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:18:23][][593 ms][DEBUG] SU: done in 187 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=84.1 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 84.163/84.163/84.163/0.000 ms\n [2025-08-26 10:18:23][][593 ms][DEBUG] check_internet: online [2025-08-26 10:18:23][][593 ms][DEBUG] END check_internet in 187 ms [2025-08-26 10:18:23][][593 ms][DEBUG] rawBody.length=1129 [2025-08-26 10:18:23][][593 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8XA036RTK\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7812\"}'\'' -e'"" [2025-08-26 10:18:23][][593 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:18:23][][593 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8XA036RTK\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7812\"}'\'' -e'"" [2025-08-26 10:18:26][][3748 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-26 10:18:26][][3904 ms][DEBUG] proc_open done in 3312 ms; code=255; res.len=101 [2025-08-26 10:18:26][][3904 ms][DEBUG] END runCmdUntilRes#1 in 3312 ms [2025-08-26 10:18:26][][3904 ms][INFO] SUCCESS response from frida (len=101) [2025-08-26 10:18:28][350244314683160][0 ms][INFO] === Request start === [2025-08-26 10:18:28][350244314683160][1 ms][DEBUG] START check_scloud [2025-08-26 10:18:28][350244314683160][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:18:28][350244314683160][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 24330 4968 24716692 227812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:18:28][350244314683160][309 ms][DEBUG] targetPkg: running [2025-08-26 10:18:28][350244314683160][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 10:18:28][350244314683160][310 ms][DEBUG] START check_boot_completed [2025-08-26 10:18:28][350244314683160][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:18:28][350244314683160][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 10:18:28][350244314683160][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:18:28][350244314683160][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 10:18:28][350244314683160][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 10:18:28][350244314683160][419 ms][DEBUG] START check_internet [2025-08-26 10:18:28][350244314683160][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:18:29][350244314683160][622 ms][DEBUG] SU: done in 203 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=78.1 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 78.144/78.144/78.144/0.000 ms\n [2025-08-26 10:18:29][350244314683160][622 ms][DEBUG] check_internet: online [2025-08-26 10:18:29][350244314683160][622 ms][DEBUG] END check_internet in 203 ms [2025-08-26 10:18:29][350244314683160][622 ms][DEBUG] rawBody.length=1149 [2025-08-26 10:18:29][350244314683160][622 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350244314683160\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2976\"}'\'' -e'"" [2025-08-26 10:18:29][350244314683160][622 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:18:29][350244314683160][622 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350244314683160\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2976\"}'\'' -e'"" [2025-08-26 10:18:34][350244314683160][5683 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77e9fa14-4154-42b9-996b-5921659ab85e","id":"QR_77e9fa14-4154-42b9-996b-5921659ab85e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:18:34][350244314683160][5839 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-08-26 10:18:34][350244314683160][5839 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-08-26 10:18:34][350244314683160][5839 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:19:02][353235522648224][0 ms][INFO] === Request start === [2025-08-26 10:19:02][353235522648224][1 ms][DEBUG] START check_scloud [2025-08-26 10:19:02][353235522648224][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:19:03][353235522648224][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 24330 4968 24811920 240036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:19:03][353235522648224][316 ms][DEBUG] targetPkg: running [2025-08-26 10:19:03][353235522648224][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-26 10:19:03][353235522648224][316 ms][DEBUG] START check_boot_completed [2025-08-26 10:19:03][353235522648224][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:19:03][353235522648224][363 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 10:19:03][353235522648224][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:19:03][353235522648224][410 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:19:03][353235522648224][410 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 10:19:03][353235522648224][410 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:19:03][353235522648224][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353235522648224\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7001\"}'\'' -e'"" [2025-08-26 10:19:03][353235522648224][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:19:03][353235522648224][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353235522648224\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7001\"}'\'' -e'"" [2025-08-26 10:19:06][353235522648224][4034 ms][DEBUG] proc_open done in 3623 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 10:19:06][353235522648224][4034 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-08-26 10:19:06][353235522648224][4034 ms][WARN] Detected error: Process with pid 24330 either refused to load frida-agent, or terminated during injection [2025-08-26 10:19:06][353235522648224][4034 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 10:19:07][353235522648224][4159 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 10:19:07][353235522648224][4159 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 10:19:07][353235522648224][4159 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 10:19:07][353235522648224][4299 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 10:19:07][353235522648224][4299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 10:19:07][353235522648224][4471 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 10:19:09][353235522648224][6486 ms][DEBUG] START check_boot_completed [2025-08-26 10:19:09][353235522648224][6486 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:19:09][353235522648224][6533 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:19:09][353235522648224][6533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:19:09][353235522648224][6580 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:19:09][353235522648224][6580 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 10:19:12][353235522648224][9595 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 10:19:12][353235522648224][9595 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353235522648224\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7001\"}'\'' -e'"" [2025-08-26 10:19:16][353235522648224][13578 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_785c9281-ce11-4a09-856e-221bfeadc15e","id":"QR_785c9281-ce11-4a09-856e-221bfeadc15e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:19:16][353235522648224][13734 ms][DEBUG] proc_open done in 4140 ms; code=255; res.len=3343 [2025-08-26 10:19:16][353235522648224][13735 ms][DEBUG] END runCmdUntilRes#2 in 4140 ms [2025-08-26 10:19:16][353235522648224][13735 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:20:03][354626224840110][1 ms][INFO] === Request start === [2025-08-26 10:20:03][354626224840110][1 ms][DEBUG] START check_scloud [2025-08-26 10:20:03][354626224840110][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:20:04][354626224840110][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 25608 4968 23503636 127484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:20:04][354626224840110][288 ms][DEBUG] targetPkg: running [2025-08-26 10:20:04][354626224840110][288 ms][DEBUG] END check_scloud in 287 ms [2025-08-26 10:20:04][354626224840110][288 ms][DEBUG] START check_boot_completed [2025-08-26 10:20:04][354626224840110][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:20:04][354626224840110][333 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 10:20:04][354626224840110][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:20:04][354626224840110][413 ms][DEBUG] SU: done in 80 ms; out [2025-08-26 10:20:04][354626224840110][414 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 10:20:04][354626224840110][414 ms][DEBUG] START check_internet [2025-08-26 10:20:04][354626224840110][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:20:04][354626224840110][802 ms][DEBUG] SU: done in 388 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=101 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 101.913/101.913/101.913/0.000 ms\n [2025-08-26 10:20:04][354626224840110][802 ms][DEBUG] check_internet: online [2025-08-26 10:20:04][354626224840110][802 ms][DEBUG] END check_internet in 388 ms [2025-08-26 10:20:04][354626224840110][802 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:20:04][354626224840110][802 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626224840110\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7527\"}'\'' -e'"" [2025-08-26 10:20:04][354626224840110][802 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:20:04][354626224840110][802 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626224840110\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7527\"}'\'' -e'"" [2025-08-26 10:20:08][354626224840110][4723 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_958ce30f-7f38-4c6c-a70c-7c76764f680b","id":"QR_958ce30f-7f38-4c6c-a70c-7c76764f680b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:20:08][354626224840110][4879 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-26 10:20:08][354626224840110][4879 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-26 10:20:08][354626224840110][4879 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:20:11][353079702076560][0 ms][INFO] === Request start === [2025-08-26 10:20:11][353079702076560][1 ms][DEBUG] START check_scloud [2025-08-26 10:20:11][353079702076560][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:20:11][353079702076560][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 25608 4968 23639836 137316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:20:11][353079702076560][295 ms][DEBUG] targetPkg: running [2025-08-26 10:20:11][353079702076560][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-26 10:20:11][353079702076560][295 ms][DEBUG] START check_boot_completed [2025-08-26 10:20:11][353079702076560][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:20:11][353079702076560][342 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:20:11][353079702076560][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:20:11][353079702076560][404 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 10:20:11][353079702076560][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 10:20:11][353079702076560][404 ms][DEBUG] START check_internet [2025-08-26 10:20:11][353079702076560][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:20:11][353079702076560][717 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=205 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 205.142/205.142/205.142/0.000 ms\n [2025-08-26 10:20:11][353079702076560][717 ms][DEBUG] check_internet: online [2025-08-26 10:20:11][353079702076560][717 ms][DEBUG] END check_internet in 313 ms [2025-08-26 10:20:11][353079702076560][717 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:20:11][353079702076560][717 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353079702076560\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8611\"}'\'' -e'"" [2025-08-26 10:20:11][353079702076560][717 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:20:11][353079702076560][717 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353079702076560\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8611\"}'\'' -e'"" [2025-08-26 10:20:15][353079702076560][4434 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a4681b4f-3c76-40bf-8da0-9f93c5528c20","id":"QR_a4681b4f-3c76-40bf-8da0-9f93c5528c20","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:20:15][353079702076560][4590 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-08-26 10:20:15][353079702076560][4590 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-26 10:20:15][353079702076560][4590 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:21:05][352546730248115][0 ms][INFO] === Request start === [2025-08-26 10:21:05][352546730248115][0 ms][DEBUG] START check_scloud [2025-08-26 10:21:05][352546730248115][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:21:05][352546730248115][294 ms][DEBUG] SU: done in 294 ms; outu0_a118 25608 4968 23767772 149200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:21:05][352546730248115][294 ms][DEBUG] targetPkg: running [2025-08-26 10:21:05][352546730248115][294 ms][DEBUG] END check_scloud in 294 ms [2025-08-26 10:21:05][352546730248115][294 ms][DEBUG] START check_boot_completed [2025-08-26 10:21:05][352546730248115][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:21:05][352546730248115][325 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 10:21:05][352546730248115][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:21:05][352546730248115][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:21:05][352546730248115][372 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 10:21:05][352546730248115][372 ms][DEBUG] rawBody.length=1150 [2025-08-26 10:21:05][352546730248115][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352546730248115\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6367\"}'\'' -e'"" [2025-08-26 10:21:05][352546730248115][372 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:21:05][352546730248115][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352546730248115\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6367\"}'\'' -e'"" [2025-08-26 10:21:10][352546730248115][5512 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e2b60470-616a-466d-a563-0d537e50c5dc","id":"QR_e2b60470-616a-466d-a563-0d537e50c5dc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:21:10][352546730248115][5668 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-08-26 10:21:10][352546730248115][5668 ms][DEBUG] END runCmdUntilRes#1 in 5296 ms [2025-08-26 10:21:10][352546730248115][5668 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:23:03][355221173963722][1 ms][INFO] === Request start === [2025-08-26 10:23:03][355221173963722][1 ms][DEBUG] START check_scloud [2025-08-26 10:23:03][355221173963722][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:23:03][355221173963722][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 25608 4968 23902188 160644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:23:03][355221173963722][305 ms][DEBUG] targetPkg: running [2025-08-26 10:23:03][355221173963722][305 ms][DEBUG] END check_scloud in 303 ms [2025-08-26 10:23:03][355221173963722][305 ms][DEBUG] START check_boot_completed [2025-08-26 10:23:03][355221173963722][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:23:03][355221173963722][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:23:03][355221173963722][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:23:03][355221173963722][429 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 10:23:03][355221173963722][429 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 10:23:03][355221173963722][430 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:23:03][355221173963722][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355221173963722\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1894\"}'\'' -e'"" [2025-08-26 10:23:03][355221173963722][430 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:23:03][355221173963722][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355221173963722\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1894\"}'\'' -e'"" [2025-08-26 10:23:07][355221173963722][4553 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dacde0fd-f134-4f82-8683-89decb69caa5","id":"QR_dacde0fd-f134-4f82-8683-89decb69caa5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:23:08][355221173963722][4709 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-26 10:23:08][355221173963722][4709 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-26 10:23:08][355221173963722][4709 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:27:03][351351026773541][1 ms][INFO] === Request start === [2025-08-26 10:27:03][351351026773541][1 ms][DEBUG] START check_scloud [2025-08-26 10:27:03][351351026773541][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:27:03][351351026773541][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 25608 4968 24025296 171916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:27:03][351351026773541][307 ms][DEBUG] targetPkg: running [2025-08-26 10:27:03][351351026773541][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 10:27:03][351351026773541][307 ms][DEBUG] START check_boot_completed [2025-08-26 10:27:03][351351026773541][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:27:03][351351026773541][338 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 10:27:03][351351026773541][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:27:03][351351026773541][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:27:03][351351026773541][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 10:27:03][351351026773541][385 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:27:03][351351026773541][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351026773541\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6268\"}'\'' -e'"" [2025-08-26 10:27:03][351351026773541][385 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:27:03][351351026773541][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351026773541\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6268\"}'\'' -e'"" [2025-08-26 10:27:07][351351026773541][4087 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_360de595-9a9c-4631-b6c7-50a62b7cff60","id":"QR_360de595-9a9c-4631-b6c7-50a62b7cff60","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:27:07][351351026773541][4243 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-26 10:27:07][351351026773541][4243 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-26 10:27:07][351351026773541][4243 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:30:03][353204339256415][1 ms][INFO] === Request start === [2025-08-26 10:30:03][353204339256415][1 ms][DEBUG] START check_scloud [2025-08-26 10:30:03][353204339256415][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:30:04][353204339256415][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 25608 4968 24153524 184288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:30:04][353204339256415][297 ms][DEBUG] targetPkg: running [2025-08-26 10:30:04][353204339256415][297 ms][DEBUG] END check_scloud in 295 ms [2025-08-26 10:30:04][353204339256415][297 ms][DEBUG] START check_boot_completed [2025-08-26 10:30:04][353204339256415][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:30:04][353204339256415][328 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 10:30:04][353204339256415][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:30:04][353204339256415][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:30:04][353204339256415][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 10:30:04][353204339256415][375 ms][DEBUG] START check_internet [2025-08-26 10:30:04][353204339256415][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:30:04][353204339256415][843 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=99.5 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 99.509/99.509/99.509/0.000 ms\n [2025-08-26 10:30:04][353204339256415][844 ms][DEBUG] check_internet: online [2025-08-26 10:30:04][353204339256415][844 ms][DEBUG] END check_internet in 469 ms [2025-08-26 10:30:04][353204339256415][844 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:30:04][353204339256415][844 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204339256415\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6273\"}'\'' -e'"" [2025-08-26 10:30:04][353204339256415][844 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:30:04][353204339256415][844 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204339256415\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6273\"}'\'' -e'"" [2025-08-26 10:30:08][353204339256415][4702 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_13013cea-134a-4a32-a897-a8e68bcad826","id":"QR_13013cea-134a-4a32-a897-a8e68bcad826","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:30:08][353204339256415][4858 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-26 10:30:08][353204339256415][4858 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-26 10:30:08][353204339256415][4858 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:30:11][357301906136297][0 ms][INFO] === Request start === [2025-08-26 10:30:11][357301906136297][1 ms][DEBUG] START check_scloud [2025-08-26 10:30:11][357301906136297][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:30:11][357301906136297][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 25608 4968 24322748 195456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:30:11][357301906136297][270 ms][DEBUG] targetPkg: running [2025-08-26 10:30:11][357301906136297][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-26 10:30:11][357301906136297][270 ms][DEBUG] START check_boot_completed [2025-08-26 10:30:11][357301906136297][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:30:11][357301906136297][316 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 10:30:11][357301906136297][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:30:11][357301906136297][365 ms][DEBUG] SU: done in 49 ms; out [2025-08-26 10:30:11][357301906136297][365 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 10:30:11][357301906136297][365 ms][DEBUG] START check_internet [2025-08-26 10:30:11][357301906136297][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:30:11][357301906136297][598 ms][DEBUG] SU: done in 232 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=115 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 115.850/115.850/115.850/0.000 ms\n [2025-08-26 10:30:11][357301906136297][598 ms][DEBUG] check_internet: online [2025-08-26 10:30:11][357301906136297][598 ms][DEBUG] END check_internet in 233 ms [2025-08-26 10:30:11][357301906136297][598 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:30:11][357301906136297][598 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357301906136297\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9836\"}'\'' -e'"" [2025-08-26 10:30:11][357301906136297][598 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:30:11][357301906136297][598 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357301906136297\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9836\"}'\'' -e'"" [2025-08-26 10:30:15][357301906136297][4097 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae90e025-e076-4d22-81cb-96796a3b5798","id":"QR_ae90e025-e076-4d22-81cb-96796a3b5798","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:30:15][357301906136297][4253 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=3343 [2025-08-26 10:30:15][357301906136297][4253 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-26 10:30:15][357301906136297][4253 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:31:03][353917750383059][0 ms][INFO] === Request start === [2025-08-26 10:31:03][353917750383059][1 ms][DEBUG] START check_scloud [2025-08-26 10:31:03][353917750383059][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:31:03][353917750383059][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 25608 4968 24467196 207428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:31:03][353917750383059][309 ms][DEBUG] targetPkg: running [2025-08-26 10:31:03][353917750383059][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 10:31:03][353917750383059][309 ms][DEBUG] START check_boot_completed [2025-08-26 10:31:03][353917750383059][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:31:03][353917750383059][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:31:03][353917750383059][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:31:03][353917750383059][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:31:03][353917750383059][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 10:31:03][353917750383059][402 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:31:03][353917750383059][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353917750383059\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8241\"}'\'' -e'"" [2025-08-26 10:31:03][353917750383059][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:31:03][353917750383059][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353917750383059\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8241\"}'\'' -e'"" [2025-08-26 10:31:06][353917750383059][3590 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-26 10:31:06][353917750383059][3746 ms][DEBUG] proc_open done in 3343 ms; code=255; res.len=101 [2025-08-26 10:31:06][353917750383059][3746 ms][DEBUG] END runCmdUntilRes#1 in 3343 ms [2025-08-26 10:31:06][353917750383059][3746 ms][INFO] SUCCESS response from frida (len=101) [2025-08-26 10:31:07][][0 ms][INFO] === Request start === [2025-08-26 10:31:07][][0 ms][DEBUG] START check_scloud [2025-08-26 10:31:07][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:31:07][][267 ms][DEBUG] SU: done in 267 ms; outu0_a118 25608 4968 24648452 218076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:31:07][][267 ms][DEBUG] targetPkg: running [2025-08-26 10:31:07][][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-26 10:31:07][][268 ms][DEBUG] START check_boot_completed [2025-08-26 10:31:07][][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:31:07][][314 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:31:07][][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:31:07][][377 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 10:31:07][][377 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 10:31:07][][377 ms][DEBUG] rawBody.length=1129 [2025-08-26 10:31:07][][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T5104JGJ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2381\"}'\'' -e'"" [2025-08-26 10:31:07][][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:31:07][][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T5104JGJ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2381\"}'\'' -e'"" [2025-08-26 10:31:11][][3783 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-26 10:31:11][][3939 ms][DEBUG] proc_open done in 3562 ms; code=255; res.len=101 [2025-08-26 10:31:11][][3939 ms][DEBUG] END runCmdUntilRes#1 in 3562 ms [2025-08-26 10:31:11][][3939 ms][INFO] SUCCESS response from frida (len=101) [2025-08-26 10:31:13][353917750383059][0 ms][INFO] === Request start === [2025-08-26 10:31:13][353917750383059][1 ms][DEBUG] START check_scloud [2025-08-26 10:31:13][353917750383059][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:31:13][353917750383059][237 ms][DEBUG] SU: done in 236 ms; outu0_a118 25608 4968 24829964 230244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:31:13][353917750383059][237 ms][DEBUG] targetPkg: running [2025-08-26 10:31:13][353917750383059][237 ms][DEBUG] END check_scloud in 236 ms [2025-08-26 10:31:13][353917750383059][237 ms][DEBUG] START check_boot_completed [2025-08-26 10:31:13][353917750383059][237 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:31:13][353917750383059][284 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:31:13][353917750383059][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:31:13][353917750383059][346 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 10:31:13][353917750383059][346 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 10:31:13][353917750383059][346 ms][DEBUG] rawBody.length=1149 [2025-08-26 10:31:13][353917750383059][346 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353917750383059\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8273\"}'\'' -e'"" [2025-08-26 10:31:13][353917750383059][347 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:31:13][353917750383059][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353917750383059\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8273\"}'\'' -e'"" [2025-08-26 10:31:18][353917750383059][5392 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ec15f2f7-e55c-4cc7-942a-ee89d8f18a2c","id":"QR_ec15f2f7-e55c-4cc7-942a-ee89d8f18a2c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:31:19][353917750383059][5548 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-08-26 10:31:19][353917750383059][5548 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-08-26 10:31:19][353917750383059][5548 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:31:25][358212584990492][0 ms][INFO] === Request start === [2025-08-26 10:31:25][358212584990492][1 ms][DEBUG] START check_scloud [2025-08-26 10:31:25][358212584990492][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:31:25][358212584990492][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 25608 4968 24970480 241120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:31:25][358212584990492][311 ms][DEBUG] targetPkg: running [2025-08-26 10:31:25][358212584990492][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 10:31:25][358212584990492][311 ms][DEBUG] START check_boot_completed [2025-08-26 10:31:25][358212584990492][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:31:25][358212584990492][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 10:31:25][358212584990492][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:31:25][358212584990492][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:31:25][358212584990492][404 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 10:31:25][358212584990492][404 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:31:25][358212584990492][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212584990492\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SEK\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8656\"}'\'' -e'"" [2025-08-26 10:31:25][358212584990492][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:31:25][358212584990492][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212584990492\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SEK\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8656\"}'\'' -e'"" [2025-08-26 10:31:29][358212584990492][4107 ms][DEBUG] proc_open done in 3702 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 10:31:29][358212584990492][4107 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-26 10:31:29][358212584990492][4107 ms][WARN] Detected error: Process with pid 25608 either refused to load frida-agent, or terminated during injection [2025-08-26 10:31:29][358212584990492][4107 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 10:31:29][358212584990492][4263 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 10:31:29][358212584990492][4263 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 10:31:29][358212584990492][4263 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 10:31:29][358212584990492][4388 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 10:31:29][358212584990492][4388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 10:31:29][358212584990492][4528 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 10:31:31][358212584990492][6543 ms][DEBUG] START check_boot_completed [2025-08-26 10:31:31][358212584990492][6543 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:31:31][358212584990492][6590 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:31:31][358212584990492][6591 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:31:31][358212584990492][6653 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 10:31:31][358212584990492][6653 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 10:31:34][358212584990492][9668 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 10:31:34][358212584990492][9668 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212584990492\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SEK\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8656\"}'\'' -e'"" [2025-08-26 10:31:38][358212584990492][13354 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c3bb5efc-5cd9-4cdd-8260-08efb8da7078","id":"QR_c3bb5efc-5cd9-4cdd-8260-08efb8da7078","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:31:38][358212584990492][13510 ms][DEBUG] proc_open done in 3843 ms; code=255; res.len=3343 [2025-08-26 10:31:38][358212584990492][13511 ms][DEBUG] END runCmdUntilRes#2 in 3843 ms [2025-08-26 10:31:38][358212584990492][13511 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:36:03][350832441777341][1 ms][INFO] === Request start === [2025-08-26 10:36:03][350832441777341][1 ms][DEBUG] START check_scloud [2025-08-26 10:36:03][350832441777341][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:36:03][350832441777341][298 ms][DEBUG] SU: done in 296 ms; outu0_a118 26951 4968 23507876 127544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:36:03][350832441777341][298 ms][DEBUG] targetPkg: running [2025-08-26 10:36:03][350832441777341][298 ms][DEBUG] END check_scloud in 296 ms [2025-08-26 10:36:03][350832441777341][298 ms][DEBUG] START check_boot_completed [2025-08-26 10:36:03][350832441777341][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:36:03][350832441777341][329 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 10:36:03][350832441777341][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:36:04][350832441777341][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:36:04][350832441777341][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 10:36:04][350832441777341][375 ms][DEBUG] START check_internet [2025-08-26 10:36:04][350832441777341][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:36:04][350832441777341][688 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=100 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 100.501/100.501/100.501/0.000 ms\n [2025-08-26 10:36:04][350832441777341][688 ms][DEBUG] check_internet: online [2025-08-26 10:36:04][350832441777341][689 ms][DEBUG] END check_internet in 313 ms [2025-08-26 10:36:04][350832441777341][689 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:36:04][350832441777341][689 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832441777341\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7781\"}'\'' -e'"" [2025-08-26 10:36:04][350832441777341][689 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:36:04][350832441777341][689 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832441777341\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7781\"}'\'' -e'"" [2025-08-26 10:36:08][350832441777341][4484 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0f358ac6-7313-4196-a91c-29e4427a8926","id":"QR_0f358ac6-7313-4196-a91c-29e4427a8926","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:36:08][350832441777341][4640 ms][DEBUG] proc_open done in 3951 ms; code=255; res.len=3343 [2025-08-26 10:36:08][350832441777341][4640 ms][DEBUG] END runCmdUntilRes#1 in 3951 ms [2025-08-26 10:36:08][350832441777341][4640 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:38:03][356280231745462][0 ms][INFO] === Request start === [2025-08-26 10:38:03][356280231745462][0 ms][DEBUG] START check_scloud [2025-08-26 10:38:03][356280231745462][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:38:04][356280231745462][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 26951 4968 23679460 138700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:38:04][356280231745462][292 ms][DEBUG] targetPkg: running [2025-08-26 10:38:04][356280231745462][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-26 10:38:04][356280231745462][292 ms][DEBUG] START check_boot_completed [2025-08-26 10:38:04][356280231745462][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:38:04][356280231745462][323 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 10:38:04][356280231745462][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:38:04][356280231745462][370 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:38:04][356280231745462][370 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 10:38:04][356280231745462][370 ms][DEBUG] START check_internet [2025-08-26 10:38:04][356280231745462][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:38:04][356280231745462][604 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=130 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 130.842/130.842/130.842/0.000 ms\n [2025-08-26 10:38:04][356280231745462][604 ms][DEBUG] check_internet: online [2025-08-26 10:38:04][356280231745462][604 ms][DEBUG] END check_internet in 234 ms [2025-08-26 10:38:04][356280231745462][604 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:38:04][356280231745462][604 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356280231745462\",\"model\":\"SM-A725F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1066\"}'\'' -e'"" [2025-08-26 10:38:04][356280231745462][604 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:38:04][356280231745462][604 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356280231745462\",\"model\":\"SM-A725F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1066\"}'\'' -e'"" [2025-08-26 10:38:08][356280231745462][4509 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4608e7ea-2c6d-4bc5-a4a3-b367f7e193b5","id":"QR_4608e7ea-2c6d-4bc5-a4a3-b367f7e193b5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:38:08][356280231745462][4666 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-08-26 10:38:08][356280231745462][4666 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-26 10:38:08][356280231745462][4666 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:38:11][357262970074899][0 ms][INFO] === Request start === [2025-08-26 10:38:11][357262970074899][0 ms][DEBUG] START check_scloud [2025-08-26 10:38:11][357262970074899][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:38:11][357262970074899][246 ms][DEBUG] SU: done in 246 ms; outu0_a118 26951 4968 23832300 150628 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:38:11][357262970074899][246 ms][DEBUG] targetPkg: running [2025-08-26 10:38:11][357262970074899][246 ms][DEBUG] END check_scloud in 246 ms [2025-08-26 10:38:11][357262970074899][246 ms][DEBUG] START check_boot_completed [2025-08-26 10:38:11][357262970074899][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:38:11][357262970074899][277 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 10:38:11][357262970074899][277 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:38:11][357262970074899][324 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:38:11][357262970074899][324 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 10:38:11][357262970074899][324 ms][DEBUG] START check_internet [2025-08-26 10:38:11][357262970074899][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:38:11][357262970074899][574 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=149 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 149.364/149.364/149.364/0.000 ms\n [2025-08-26 10:38:11][357262970074899][574 ms][DEBUG] check_internet: online [2025-08-26 10:38:11][357262970074899][574 ms][DEBUG] END check_internet in 250 ms [2025-08-26 10:38:11][357262970074899][574 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:38:11][357262970074899][574 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357262970074899\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5445\"}'\'' -e'"" [2025-08-26 10:38:11][357262970074899][574 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:38:11][357262970074899][574 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357262970074899\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5445\"}'\'' -e'"" [2025-08-26 10:38:15][357262970074899][4089 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f763633e-7f6e-4c82-9066-a1891460d08b","id":"QR_f763633e-7f6e-4c82-9066-a1891460d08b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:38:15][357262970074899][4245 ms][DEBUG] proc_open done in 3671 ms; code=255; res.len=3343 [2025-08-26 10:38:15][357262970074899][4245 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-26 10:38:15][357262970074899][4245 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:40:04][352419255269579][0 ms][INFO] === Request start === [2025-08-26 10:40:04][352419255269579][1 ms][DEBUG] START check_scloud [2025-08-26 10:40:04][352419255269579][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:40:04][352419255269579][327 ms][DEBUG] SU: done in 326 ms; outu0_a118 26951 4968 23941868 161756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:40:04][352419255269579][327 ms][DEBUG] targetPkg: running [2025-08-26 10:40:04][352419255269579][327 ms][DEBUG] END check_scloud in 326 ms [2025-08-26 10:40:04][352419255269579][327 ms][DEBUG] START check_boot_completed [2025-08-26 10:40:04][352419255269579][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:40:04][352419255269579][373 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:40:04][352419255269579][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:40:04][352419255269579][436 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 10:40:04][352419255269579][436 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 10:40:04][352419255269579][436 ms][DEBUG] START check_internet [2025-08-26 10:40:04][352419255269579][436 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:40:05][352419255269579][748 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=99.7 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 99.778/99.778/99.778/0.000 ms\n [2025-08-26 10:40:05][352419255269579][748 ms][DEBUG] check_internet: online [2025-08-26 10:40:05][352419255269579][748 ms][DEBUG] END check_internet in 312 ms [2025-08-26 10:40:05][352419255269579][749 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:40:05][352419255269579][749 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352419255269579\",\"model\":\"SM-G525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5146\"}'\'' -e'"" [2025-08-26 10:40:05][352419255269579][749 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:40:05][352419255269579][749 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352419255269579\",\"model\":\"SM-G525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5146\"}'\'' -e'"" [2025-08-26 10:40:08][352419255269579][4544 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0f8d9f8e-cf15-465b-b831-897ed59ff9b8","id":"QR_0f8d9f8e-cf15-465b-b831-897ed59ff9b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:40:09][352419255269579][4700 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-08-26 10:40:09][352419255269579][4701 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-26 10:40:09][352419255269579][4701 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:40:11][352501912094100][0 ms][INFO] === Request start === [2025-08-26 10:40:11][352501912094100][1 ms][DEBUG] START check_scloud [2025-08-26 10:40:11][352501912094100][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:40:11][352501912094100][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 26951 4968 24111092 161696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:40:11][352501912094100][306 ms][DEBUG] targetPkg: running [2025-08-26 10:40:11][352501912094100][306 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 10:40:11][352501912094100][306 ms][DEBUG] START check_boot_completed [2025-08-26 10:40:11][352501912094100][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:40:11][352501912094100][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 10:40:11][352501912094100][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:40:12][352501912094100][415 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 10:40:12][352501912094100][415 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 10:40:12][352501912094100][415 ms][DEBUG] START check_internet [2025-08-26 10:40:12][352501912094100][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:40:12][352501912094100][603 ms][DEBUG] SU: done in 188 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=85.8 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 85.883/85.883/85.883/0.000 ms\n [2025-08-26 10:40:12][352501912094100][603 ms][DEBUG] check_internet: online [2025-08-26 10:40:12][352501912094100][603 ms][DEBUG] END check_internet in 188 ms [2025-08-26 10:40:12][352501912094100][603 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:40:12][352501912094100][603 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501912094100\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3504\"}'\'' -e'"" [2025-08-26 10:40:12][352501912094100][603 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:40:12][352501912094100][603 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501912094100\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3504\"}'\'' -e'"" [2025-08-26 10:40:15][352501912094100][4117 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6f7409ee-a467-421e-af31-627740ad5682","id":"QR_6f7409ee-a467-421e-af31-627740ad5682","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:40:15][352501912094100][4274 ms][DEBUG] proc_open done in 3670 ms; code=255; res.len=3343 [2025-08-26 10:40:15][352501912094100][4274 ms][DEBUG] END runCmdUntilRes#1 in 3670 ms [2025-08-26 10:40:15][352501912094100][4274 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:42:03][350517923694250][1 ms][INFO] === Request start === [2025-08-26 10:42:03][350517923694250][1 ms][DEBUG] START check_scloud [2025-08-26 10:42:03][350517923694250][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:42:04][350517923694250][309 ms][DEBUG] SU: done in 307 ms; outu0_a118 26951 4968 24212532 173752 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:42:04][350517923694250][309 ms][DEBUG] targetPkg: running [2025-08-26 10:42:04][350517923694250][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 10:42:04][350517923694250][309 ms][DEBUG] START check_boot_completed [2025-08-26 10:42:04][350517923694250][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:42:04][350517923694250][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:42:04][350517923694250][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:42:04][350517923694250][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:42:04][350517923694250][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 10:42:04][350517923694250][402 ms][DEBUG] START check_internet [2025-08-26 10:42:04][350517923694250][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:42:04][350517923694250][637 ms][DEBUG] SU: done in 235 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=144 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 144.271/144.271/144.271/0.000 ms\n [2025-08-26 10:42:04][350517923694250][638 ms][DEBUG] check_internet: online [2025-08-26 10:42:04][350517923694250][638 ms][DEBUG] END check_internet in 236 ms [2025-08-26 10:42:04][350517923694250][638 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:42:04][350517923694250][638 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350517923694250\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1478\"}'\'' -e'"" [2025-08-26 10:42:04][350517923694250][638 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:42:04][350517923694250][638 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350517923694250\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1478\"}'\'' -e'"" [2025-08-26 10:42:08][350517923694250][4761 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_616fd694-97ed-45fd-9bb4-3b98bd75feb0","id":"QR_616fd694-97ed-45fd-9bb4-3b98bd75feb0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:42:08][350517923694250][4917 ms][DEBUG] proc_open done in 4279 ms; code=255; res.len=3343 [2025-08-26 10:42:08][350517923694250][4917 ms][DEBUG] END runCmdUntilRes#1 in 4279 ms [2025-08-26 10:42:08][350517923694250][4917 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:42:11][350019153225467][0 ms][INFO] === Request start === [2025-08-26 10:42:11][350019153225467][1 ms][DEBUG] START check_scloud [2025-08-26 10:42:11][350019153225467][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:42:11][350019153225467][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 26951 4968 24365244 184868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:42:11][350019153225467][322 ms][DEBUG] targetPkg: running [2025-08-26 10:42:11][350019153225467][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-26 10:42:11][350019153225467][322 ms][DEBUG] START check_boot_completed [2025-08-26 10:42:11][350019153225467][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:42:11][350019153225467][369 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:42:11][350019153225467][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:42:11][350019153225467][431 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 10:42:11][350019153225467][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 10:42:11][350019153225467][431 ms][DEBUG] START check_internet [2025-08-26 10:42:11][350019153225467][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:42:12][350019153225467][712 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=175 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 175.170/175.170/175.170/0.000 ms\n [2025-08-26 10:42:12][350019153225467][712 ms][DEBUG] check_internet: online [2025-08-26 10:42:12][350019153225467][712 ms][DEBUG] END check_internet in 281 ms [2025-08-26 10:42:12][350019153225467][712 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:42:12][350019153225467][712 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350019153225467\",\"model\":\"SM-A528B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9056\"}'\'' -e'"" [2025-08-26 10:42:12][350019153225467][712 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:42:12][350019153225467][712 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350019153225467\",\"model\":\"SM-A528B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9056\"}'\'' -e'"" [2025-08-26 10:42:15][350019153225467][4633 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5836c8ad-43b9-4297-a68f-0e5e1a2f85a9","id":"QR_5836c8ad-43b9-4297-a68f-0e5e1a2f85a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:42:16][350019153225467][4789 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-26 10:42:16][350019153225467][4789 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-26 10:42:16][350019153225467][4789 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:42:18][351240641579294][0 ms][INFO] === Request start === [2025-08-26 10:42:18][351240641579294][1 ms][DEBUG] START check_scloud [2025-08-26 10:42:18][351240641579294][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:42:18][351240641579294][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 26951 4968 24499460 196552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:42:18][351240641579294][311 ms][DEBUG] targetPkg: running [2025-08-26 10:42:18][351240641579294][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 10:42:18][351240641579294][311 ms][DEBUG] START check_boot_completed [2025-08-26 10:42:18][351240641579294][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:42:18][351240641579294][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:42:18][351240641579294][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:42:19][351240641579294][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:42:19][351240641579294][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 10:42:19][351240641579294][405 ms][DEBUG] START check_internet [2025-08-26 10:42:19][351240641579294][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:42:19][351240641579294][608 ms][DEBUG] SU: done in 203 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=120 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 120.556/120.556/120.556/0.000 ms\n [2025-08-26 10:42:19][351240641579294][608 ms][DEBUG] check_internet: online [2025-08-26 10:42:19][351240641579294][608 ms][DEBUG] END check_internet in 203 ms [2025-08-26 10:42:19][351240641579294][608 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:42:19][351240641579294][608 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641579294\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2685\"}'\'' -e'"" [2025-08-26 10:42:19][351240641579294][608 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:42:19][351240641579294][608 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641579294\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2685\"}'\'' -e'"" [2025-08-26 10:42:22][351240641579294][4122 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1fb8d37d-a62d-4f5a-8589-5e8ef1994315","id":"QR_1fb8d37d-a62d-4f5a-8589-5e8ef1994315","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:42:22][351240641579294][4279 ms][DEBUG] proc_open done in 3671 ms; code=255; res.len=3343 [2025-08-26 10:42:22][351240641579294][4279 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-26 10:42:22][351240641579294][4279 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:42:25][355360452955122][0 ms][INFO] === Request start === [2025-08-26 10:42:25][355360452955122][1 ms][DEBUG] START check_scloud [2025-08-26 10:42:25][355360452955122][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:42:25][355360452955122][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 26951 4968 24625512 207308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:42:25][355360452955122][301 ms][DEBUG] targetPkg: running [2025-08-26 10:42:25][355360452955122][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 10:42:25][355360452955122][301 ms][DEBUG] START check_boot_completed [2025-08-26 10:42:25][355360452955122][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:42:25][355360452955122][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 10:42:25][355360452955122][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:42:25][355360452955122][396 ms][DEBUG] SU: done in 49 ms; out [2025-08-26 10:42:25][355360452955122][396 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 10:42:25][355360452955122][396 ms][DEBUG] START check_internet [2025-08-26 10:42:25][355360452955122][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:42:25][355360452955122][660 ms][DEBUG] SU: done in 264 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=159 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 159.266/159.266/159.266/0.000 ms\n [2025-08-26 10:42:25][355360452955122][660 ms][DEBUG] check_internet: online [2025-08-26 10:42:25][355360452955122][660 ms][DEBUG] END check_internet in 264 ms [2025-08-26 10:42:25][355360452955122][660 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:42:25][355360452955122][660 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355360452955122\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7867\"}'\'' -e'"" [2025-08-26 10:42:25][355360452955122][660 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:42:25][355360452955122][660 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355360452955122\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7867\"}'\'' -e'"" [2025-08-26 10:42:29][355360452955122][4378 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_18770678-d178-41a5-ba9a-59664bf9494b","id":"QR_18770678-d178-41a5-ba9a-59664bf9494b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:42:29][355360452955122][4534 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-08-26 10:42:29][355360452955122][4534 ms][DEBUG] END runCmdUntilRes#1 in 3873 ms [2025-08-26 10:42:29][355360452955122][4534 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:43:03][350330055779638][0 ms][INFO] === Request start === [2025-08-26 10:43:03][350330055779638][1 ms][DEBUG] START check_scloud [2025-08-26 10:43:03][350330055779638][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:43:03][350330055779638][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 26951 4968 24700420 216424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:43:03][350330055779638][307 ms][DEBUG] targetPkg: running [2025-08-26 10:43:03][350330055779638][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 10:43:03][350330055779638][307 ms][DEBUG] START check_boot_completed [2025-08-26 10:43:03][350330055779638][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:43:03][350330055779638][338 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 10:43:03][350330055779638][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:43:04][350330055779638][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:43:04][350330055779638][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 10:43:04][350330055779638][385 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:43:04][350330055779638][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350330055779638\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7103\"}'\'' -e'"" [2025-08-26 10:43:04][350330055779638][385 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:43:04][350330055779638][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350330055779638\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7103\"}'\'' -e'"" [2025-08-26 10:43:07][350330055779638][4118 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c6702992-6bb4-42fb-8889-adf59988fa31","id":"QR_c6702992-6bb4-42fb-8889-adf59988fa31","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:43:07][350330055779638][4274 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-08-26 10:43:07][350330055779638][4274 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-26 10:43:07][350330055779638][4274 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:44:04][350091124527891][0 ms][INFO] === Request start === [2025-08-26 10:44:04][350091124527891][0 ms][DEBUG] START check_scloud [2025-08-26 10:44:04][350091124527891][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:44:05][350091124527891][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 26951 4968 24822376 226796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:44:05][350091124527891][308 ms][DEBUG] targetPkg: running [2025-08-26 10:44:05][350091124527891][308 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 10:44:05][350091124527891][308 ms][DEBUG] START check_boot_completed [2025-08-26 10:44:05][350091124527891][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:44:05][350091124527891][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:44:05][350091124527891][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:44:05][350091124527891][417 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 10:44:05][350091124527891][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 10:44:05][350091124527891][417 ms][DEBUG] START check_internet [2025-08-26 10:44:05][350091124527891][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:44:05][350091124527891][823 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=100 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 100.167/100.167/100.167/0.000 ms\n [2025-08-26 10:44:05][350091124527891][823 ms][DEBUG] check_internet: online [2025-08-26 10:44:05][350091124527891][823 ms][DEBUG] END check_internet in 406 ms [2025-08-26 10:44:05][350091124527891][823 ms][DEBUG] rawBody.length=1158 [2025-08-26 10:44:05][350091124527891][823 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350091124527891\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52TA03445X\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3655\"}'\'' -e'"" [2025-08-26 10:44:05][350091124527891][823 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:44:05][350091124527891][823 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350091124527891\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52TA03445X\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3655\"}'\'' -e'"" [2025-08-26 10:44:09][350091124527891][4760 ms][DEBUG] proc_open done in 3936 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 10:44:09][350091124527891][4760 ms][DEBUG] END runCmdUntilRes#1 in 3937 ms [2025-08-26 10:44:09][350091124527891][4760 ms][WARN] Detected error: Process with pid 26951 either refused to load frida-agent, or terminated during injection [2025-08-26 10:44:09][350091124527891][4760 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 10:44:09][350091124527891][4900 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 10:44:09][350091124527891][4901 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 10:44:09][350091124527891][4901 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 10:44:09][350091124527891][5041 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 10:44:09][350091124527891][5041 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 10:44:10][350091124527891][5228 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 10:44:12][350091124527891][7243 ms][DEBUG] START check_boot_completed [2025-08-26 10:44:12][350091124527891][7243 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:44:12][350091124527891][7290 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:44:12][350091124527891][7290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:44:12][350091124527891][7337 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:44:12][350091124527891][7337 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 10:44:15][350091124527891][10352 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 10:44:15][350091124527891][10352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350091124527891\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52TA03445X\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3655\"}'\'' -e'"" [2025-08-26 10:44:18][350091124527891][14007 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dabc2717-0658-4104-b525-a5fa43f43015","id":"QR_dabc2717-0658-4104-b525-a5fa43f43015","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:44:18][350091124527891][14164 ms][DEBUG] proc_open done in 3812 ms; code=255; res.len=3343 [2025-08-26 10:44:18][350091124527891][14164 ms][DEBUG] END runCmdUntilRes#2 in 3812 ms [2025-08-26 10:44:18][350091124527891][14164 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:44:21][357629886161616][0 ms][INFO] === Request start === [2025-08-26 10:44:21][357629886161616][1 ms][DEBUG] START check_scloud [2025-08-26 10:44:21][357629886161616][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:44:21][357629886161616][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 29658 4968 23551196 124028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:44:21][357629886161616][284 ms][DEBUG] targetPkg: running [2025-08-26 10:44:21][357629886161616][284 ms][DEBUG] END check_scloud in 283 ms [2025-08-26 10:44:21][357629886161616][284 ms][DEBUG] START check_boot_completed [2025-08-26 10:44:21][357629886161616][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:44:21][357629886161616][331 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 10:44:21][357629886161616][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:44:21][357629886161616][393 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 10:44:21][357629886161616][393 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 10:44:21][357629886161616][393 ms][DEBUG] START check_internet [2025-08-26 10:44:21][357629886161616][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:44:22][357629886161616][658 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=130 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 130.032/130.032/130.032/0.000 ms\n [2025-08-26 10:44:22][357629886161616][659 ms][DEBUG] check_internet: online [2025-08-26 10:44:22][357629886161616][659 ms][DEBUG] END check_internet in 265 ms [2025-08-26 10:44:22][357629886161616][659 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:44:22][357629886161616][659 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357629886161616\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2404\"}'\'' -e'"" [2025-08-26 10:44:22][357629886161616][659 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:44:22][357629886161616][659 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357629886161616\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2404\"}'\'' -e'"" [2025-08-26 10:44:26][357629886161616][5032 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f399d71b-f830-409a-81ed-af618a7096b2","id":"QR_f399d71b-f830-409a-81ed-af618a7096b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:44:26][357629886161616][5189 ms][DEBUG] proc_open done in 4530 ms; code=255; res.len=3343 [2025-08-26 10:44:26][357629886161616][5189 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-08-26 10:44:26][357629886161616][5189 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:47:03][350287317869203][1 ms][INFO] === Request start === [2025-08-26 10:47:03][350287317869203][1 ms][DEBUG] START check_scloud [2025-08-26 10:47:03][350287317869203][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:47:03][350287317869203][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 29658 4968 23597192 137684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:47:03][350287317869203][293 ms][DEBUG] targetPkg: running [2025-08-26 10:47:03][350287317869203][293 ms][DEBUG] END check_scloud in 292 ms [2025-08-26 10:47:03][350287317869203][293 ms][DEBUG] START check_boot_completed [2025-08-26 10:47:03][350287317869203][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:47:03][350287317869203][339 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 10:47:03][350287317869203][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:47:03][350287317869203][386 ms][DEBUG] SU: done in 46 ms; out [2025-08-26 10:47:03][350287317869203][386 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 10:47:03][350287317869203][386 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:47:03][350287317869203][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287317869203\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7355\"}'\'' -e'"" [2025-08-26 10:47:03][350287317869203][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:47:03][350287317869203][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287317869203\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7355\"}'\'' -e'"" [2025-08-26 10:47:07][350287317869203][4182 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c44d5fd6-002e-4ddb-be14-0dcb89f4d6be","id":"QR_c44d5fd6-002e-4ddb-be14-0dcb89f4d6be","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:47:07][350287317869203][4338 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-08-26 10:47:07][350287317869203][4338 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-26 10:47:07][350287317869203][4338 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:48:03][351505630505777][0 ms][INFO] === Request start === [2025-08-26 10:48:03][351505630505777][1 ms][DEBUG] START check_scloud [2025-08-26 10:48:03][351505630505777][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:48:04][351505630505777][289 ms][DEBUG] SU: done in 289 ms; outu0_a118 29658 4968 23707948 149836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:48:04][351505630505777][290 ms][DEBUG] targetPkg: running [2025-08-26 10:48:04][351505630505777][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-26 10:48:04][351505630505777][290 ms][DEBUG] START check_boot_completed [2025-08-26 10:48:04][351505630505777][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:48:04][351505630505777][335 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 10:48:04][351505630505777][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:48:04][351505630505777][397 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 10:48:04][351505630505777][397 ms][DEBUG] END check_boot_completed in 107 ms [2025-08-26 10:48:04][351505630505777][397 ms][DEBUG] START check_internet [2025-08-26 10:48:04][351505630505777][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:48:04][351505630505777][710 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.391/198.391/198.391/0.000 ms\n [2025-08-26 10:48:04][351505630505777][710 ms][DEBUG] check_internet: online [2025-08-26 10:48:04][351505630505777][710 ms][DEBUG] END check_internet in 313 ms [2025-08-26 10:48:04][351505630505777][710 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:48:04][351505630505777][710 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351505630505777\",\"model\":\"SM-N980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1995\"}'\'' -e'"" [2025-08-26 10:48:04][351505630505777][711 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:48:04][351505630505777][711 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351505630505777\",\"model\":\"SM-N980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1995\"}'\'' -e'"" [2025-08-26 10:48:08][351505630505777][4740 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_93db5702-abc3-4d8a-a144-9cb69866da52","id":"QR_93db5702-abc3-4d8a-a144-9cb69866da52","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:48:08][351505630505777][4896 ms][DEBUG] proc_open done in 4185 ms; code=255; res.len=3343 [2025-08-26 10:48:08][351505630505777][4896 ms][DEBUG] END runCmdUntilRes#1 in 4185 ms [2025-08-26 10:48:08][351505630505777][4896 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:50:05][352682504582734][1 ms][INFO] === Request start === [2025-08-26 10:50:05][352682504582734][1 ms][DEBUG] START check_scloud [2025-08-26 10:50:05][352682504582734][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:50:05][352682504582734][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 29658 4968 23856464 160740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:50:05][352682504582734][309 ms][DEBUG] targetPkg: running [2025-08-26 10:50:05][352682504582734][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 10:50:05][352682504582734][309 ms][DEBUG] START check_boot_completed [2025-08-26 10:50:05][352682504582734][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:50:05][352682504582734][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 10:50:05][352682504582734][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:50:05][352682504582734][404 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 10:50:05][352682504582734][404 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 10:50:05][352682504582734][404 ms][DEBUG] START check_internet [2025-08-26 10:50:05][352682504582734][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:50:06][352682504582734][748 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=99.9 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 99.942/99.942/99.942/0.000 ms\n [2025-08-26 10:50:06][352682504582734][748 ms][DEBUG] check_internet: online [2025-08-26 10:50:06][352682504582734][748 ms][DEBUG] END check_internet in 344 ms [2025-08-26 10:50:06][352682504582734][748 ms][DEBUG] rawBody.length=1149 [2025-08-26 10:50:06][352682504582734][749 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682504582734\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9309\"}'\'' -e'"" [2025-08-26 10:50:06][352682504582734][749 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:50:06][352682504582734][749 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682504582734\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9309\"}'\'' -e'"" [2025-08-26 10:50:11][352682504582734][5698 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_40cb59bb-487e-4fe8-9eb8-215909c069ce","id":"QR_40cb59bb-487e-4fe8-9eb8-215909c069ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:50:11][352682504582734][5855 ms][DEBUG] proc_open done in 5106 ms; code=255; res.len=3343 [2025-08-26 10:50:11][352682504582734][5855 ms][DEBUG] END runCmdUntilRes#1 in 5106 ms [2025-08-26 10:50:11][352682504582734][5855 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:50:16][358141434110573][0 ms][INFO] === Request start === [2025-08-26 10:50:16][358141434110573][1 ms][DEBUG] START check_scloud [2025-08-26 10:50:16][358141434110573][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:50:16][358141434110573][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 29658 4968 23982680 172016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:50:16][358141434110573][291 ms][DEBUG] targetPkg: running [2025-08-26 10:50:16][358141434110573][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-26 10:50:16][358141434110573][291 ms][DEBUG] START check_boot_completed [2025-08-26 10:50:16][358141434110573][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:50:16][358141434110573][338 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:50:16][358141434110573][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:50:16][358141434110573][400 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 10:50:16][358141434110573][400 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 10:50:16][358141434110573][400 ms][DEBUG] START check_internet [2025-08-26 10:50:16][358141434110573][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:50:16][358141434110573][650 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=126 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 126.891/126.891/126.891/0.000 ms\n [2025-08-26 10:50:16][358141434110573][650 ms][DEBUG] check_internet: online [2025-08-26 10:50:16][358141434110573][650 ms][DEBUG] END check_internet in 250 ms [2025-08-26 10:50:16][358141434110573][650 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:50:16][358141434110573][650 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141434110573\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7466\"}'\'' -e'"" [2025-08-26 10:50:16][358141434110573][651 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:50:16][358141434110573][651 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141434110573\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7466\"}'\'' -e'"" [2025-08-26 10:50:20][358141434110573][4383 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_737be067-a97d-46f1-a930-4bc85fb2c360","id":"QR_737be067-a97d-46f1-a930-4bc85fb2c360","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:50:20][358141434110573][4540 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-08-26 10:50:20][358141434110573][4540 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-26 10:50:20][358141434110573][4540 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:52:03][357962504537630][0 ms][INFO] === Request start === [2025-08-26 10:52:03][357962504537630][1 ms][DEBUG] START check_scloud [2025-08-26 10:52:03][357962504537630][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:52:03][357962504537630][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 29658 4968 24078104 184104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:52:03][357962504537630][309 ms][DEBUG] targetPkg: running [2025-08-26 10:52:03][357962504537630][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 10:52:03][357962504537630][309 ms][DEBUG] START check_boot_completed [2025-08-26 10:52:03][357962504537630][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:52:03][357962504537630][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 10:52:03][357962504537630][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:52:03][357962504537630][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:52:03][357962504537630][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 10:52:03][357962504537630][402 ms][DEBUG] START check_internet [2025-08-26 10:52:03][357962504537630][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:52:04][357962504537630][638 ms][DEBUG] SU: done in 235 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=145 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 145.077/145.077/145.077/0.000 ms\n [2025-08-26 10:52:04][357962504537630][638 ms][DEBUG] check_internet: online [2025-08-26 10:52:04][357962504537630][638 ms][DEBUG] END check_internet in 236 ms [2025-08-26 10:52:04][357962504537630][638 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:52:04][357962504537630][638 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962504537630\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9402\"}'\'' -e'"" [2025-08-26 10:52:04][357962504537630][638 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:52:04][357962504537630][638 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962504537630\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9402\"}'\'' -e'"" [2025-08-26 10:52:07][357962504537630][4308 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_405d13ce-a318-49c0-8139-35ddf369a2d8","id":"QR_405d13ce-a318-49c0-8139-35ddf369a2d8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:52:07][357962504537630][4464 ms][DEBUG] proc_open done in 3826 ms; code=255; res.len=3343 [2025-08-26 10:52:07][357962504537630][4464 ms][DEBUG] END runCmdUntilRes#1 in 3826 ms [2025-08-26 10:52:07][357962504537630][4464 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:53:03][352660830327347][1 ms][INFO] === Request start === [2025-08-26 10:53:03][352660830327347][1 ms][DEBUG] START check_scloud [2025-08-26 10:53:03][352660830327347][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:53:03][352660830327347][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 29658 4968 24212348 195104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:53:03][352660830327347][282 ms][DEBUG] targetPkg: running [2025-08-26 10:53:03][352660830327347][283 ms][DEBUG] END check_scloud in 281 ms [2025-08-26 10:53:03][352660830327347][283 ms][DEBUG] START check_boot_completed [2025-08-26 10:53:03][352660830327347][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:53:03][352660830327347][314 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 10:53:03][352660830327347][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:53:03][352660830327347][376 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 10:53:03][352660830327347][376 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 10:53:03][352660830327347][376 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:53:03][352660830327347][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352660830327347\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8781\"}'\'' -e'"" [2025-08-26 10:53:03][352660830327347][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:53:03][352660830327347][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352660830327347\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8781\"}'\'' -e'"" [2025-08-26 10:53:07][352660830327347][4203 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8c0abbd-a891-45e3-8c02-91cd7718e2de","id":"QR_e8c0abbd-a891-45e3-8c02-91cd7718e2de","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:53:07][352660830327347][4360 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-26 10:53:07][352660830327347][4360 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-26 10:53:07][352660830327347][4360 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:53:10][351642481440653][0 ms][INFO] === Request start === [2025-08-26 10:53:10][351642481440653][1 ms][DEBUG] START check_scloud [2025-08-26 10:53:10][351642481440653][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:53:10][351642481440653][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 29658 4968 24346756 206976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:53:10][351642481440653][293 ms][DEBUG] targetPkg: running [2025-08-26 10:53:10][351642481440653][293 ms][DEBUG] END check_scloud in 293 ms [2025-08-26 10:53:10][351642481440653][293 ms][DEBUG] START check_boot_completed [2025-08-26 10:53:10][351642481440653][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:53:10][351642481440653][340 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 10:53:10][351642481440653][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:53:10][351642481440653][403 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 10:53:10][351642481440653][403 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 10:53:10][351642481440653][403 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:53:10][351642481440653][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642481440653\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1977\"}'\'' -e'"" [2025-08-26 10:53:10][351642481440653][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:53:10][351642481440653][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642481440653\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1977\"}'\'' -e'"" [2025-08-26 10:53:14][351642481440653][4355 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_099e0543-b343-413b-bd29-dde554c82fca","id":"QR_099e0543-b343-413b-bd29-dde554c82fca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:53:14][351642481440653][4511 ms][DEBUG] proc_open done in 4107 ms; code=255; res.len=3343 [2025-08-26 10:53:14][351642481440653][4511 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-26 10:53:14][351642481440653][4511 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:53:18][350109210457896][0 ms][INFO] === Request start === [2025-08-26 10:53:18][350109210457896][1 ms][DEBUG] START check_scloud [2025-08-26 10:53:18][350109210457896][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:53:19][350109210457896][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 29658 4968 24468684 218728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:53:19][350109210457896][304 ms][DEBUG] targetPkg: running [2025-08-26 10:53:19][350109210457896][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-26 10:53:19][350109210457896][304 ms][DEBUG] START check_boot_completed [2025-08-26 10:53:19][350109210457896][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:53:19][350109210457896][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 10:53:19][350109210457896][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:53:19][350109210457896][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 10:53:19][350109210457896][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 10:53:19][350109210457896][413 ms][DEBUG] rawBody.length=1149 [2025-08-26 10:53:19][350109210457896][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350109210457896\",\"model\":\"SM-A166W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1435\"}'\'' -e'"" [2025-08-26 10:53:19][350109210457896][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:53:19][350109210457896][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350109210457896\",\"model\":\"SM-A166W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1435\"}'\'' -e'"" [2025-08-26 10:53:24][350109210457896][5381 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_82053112-32ac-4811-8283-b56edb6bd053","id":"QR_82053112-32ac-4811-8283-b56edb6bd053","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:53:24][350109210457896][5537 ms][DEBUG] proc_open done in 5123 ms; code=255; res.len=3343 [2025-08-26 10:53:24][350109210457896][5537 ms][DEBUG] END runCmdUntilRes#1 in 5123 ms [2025-08-26 10:53:24][350109210457896][5537 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:58:03][353243885542547][1 ms][INFO] === Request start === [2025-08-26 10:58:03][353243885542547][1 ms][DEBUG] START check_scloud [2025-08-26 10:58:03][353243885542547][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:58:04][353243885542547][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 29658 4968 24573800 231012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:58:04][353243885542547][306 ms][DEBUG] targetPkg: running [2025-08-26 10:58:04][353243885542547][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-26 10:58:04][353243885542547][306 ms][DEBUG] START check_boot_completed [2025-08-26 10:58:04][353243885542547][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:58:04][353243885542547][337 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 10:58:04][353243885542547][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:58:04][353243885542547][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:58:04][353243885542547][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 10:58:04][353243885542547][385 ms][DEBUG] START check_internet [2025-08-26 10:58:04][353243885542547][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:58:04][353243885542547][697 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=99.5 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 99.554/99.554/99.554/0.000 ms\n [2025-08-26 10:58:04][353243885542547][697 ms][DEBUG] check_internet: online [2025-08-26 10:58:04][353243885542547][697 ms][DEBUG] END check_internet in 313 ms [2025-08-26 10:58:04][353243885542547][697 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:58:04][353243885542547][697 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243885542547\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4839\"}'\'' -e'"" [2025-08-26 10:58:04][353243885542547][697 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:58:04][353243885542547][698 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243885542547\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4839\"}'\'' -e'"" [2025-08-26 10:58:08][353243885542547][4821 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa2be069-8352-4b0b-b6fe-895952ef57ee","id":"QR_fa2be069-8352-4b0b-b6fe-895952ef57ee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:58:08][353243885542547][4977 ms][DEBUG] proc_open done in 4279 ms; code=255; res.len=3343 [2025-08-26 10:58:08][353243885542547][4977 ms][DEBUG] END runCmdUntilRes#1 in 4279 ms [2025-08-26 10:58:08][353243885542547][4977 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:58:13][357435840750662][0 ms][INFO] === Request start === [2025-08-26 10:58:13][357435840750662][1 ms][DEBUG] START check_scloud [2025-08-26 10:58:13][357435840750662][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:58:13][357435840750662][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 29658 4968 24706160 242656 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:58:13][357435840750662][311 ms][DEBUG] targetPkg: running [2025-08-26 10:58:13][357435840750662][311 ms][DEBUG] END check_scloud in 311 ms [2025-08-26 10:58:13][357435840750662][311 ms][DEBUG] START check_boot_completed [2025-08-26 10:58:13][357435840750662][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:58:13][357435840750662][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:58:13][357435840750662][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:58:13][357435840750662][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 10:58:13][357435840750662][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 10:58:13][357435840750662][421 ms][DEBUG] START check_internet [2025-08-26 10:58:13][357435840750662][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:58:13][357435840750662][702 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=162 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 162.964/162.964/162.964/0.000 ms\n [2025-08-26 10:58:13][357435840750662][702 ms][DEBUG] check_internet: online [2025-08-26 10:58:13][357435840750662][702 ms][DEBUG] END check_internet in 281 ms [2025-08-26 10:58:13][357435840750662][702 ms][DEBUG] rawBody.length=1149 [2025-08-26 10:58:13][357435840750662][702 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840750662\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7529\"}'\'' -e'"" [2025-08-26 10:58:13][357435840750662][702 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:58:13][357435840750662][702 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840750662\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7529\"}'\'' -e'"" [2025-08-26 10:58:17][357435840750662][4404 ms][DEBUG] proc_open done in 3701 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 10:58:17][357435840750662][4404 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-26 10:58:17][357435840750662][4404 ms][WARN] Detected error: Process with pid 29658 either refused to load frida-agent, or terminated during injection [2025-08-26 10:58:17][357435840750662][4404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 10:58:17][357435840750662][4544 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 10:58:17][357435840750662][4545 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 10:58:17][357435840750662][4545 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 10:58:17][357435840750662][4685 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 10:58:17][357435840750662][4685 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 10:58:17][357435840750662][4843 ms][DEBUG] SU: done in 158 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 10:58:19][357435840750662][6856 ms][DEBUG] START check_boot_completed [2025-08-26 10:58:19][357435840750662][6856 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:58:19][357435840750662][6903 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:58:19][357435840750662][6903 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:58:19][357435840750662][6950 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:58:19][357435840750662][6950 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 10:58:22][357435840750662][9965 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 10:58:22][357435840750662][9965 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840750662\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7529\"}'\'' -e'"" [2025-08-26 10:58:26][357435840750662][13745 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-26 10:58:26][357435840750662][13901 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=115 [2025-08-26 10:58:26][357435840750662][13901 ms][DEBUG] END runCmdUntilRes#2 in 3937 ms [2025-08-26 10:58:26][357435840750662][13901 ms][INFO] SUCCESS response from frida (len=115) [2025-08-26 10:58:27][][0 ms][INFO] === Request start === [2025-08-26 10:58:27][][1 ms][DEBUG] START check_scloud [2025-08-26 10:58:27][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:58:27][][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 31224 4968 23513308 125080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:58:27][][260 ms][DEBUG] targetPkg: running [2025-08-26 10:58:27][][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-26 10:58:27][][260 ms][DEBUG] START check_boot_completed [2025-08-26 10:58:27][][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:58:27][][307 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 10:58:27][][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:58:27][][353 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:58:27][][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 10:58:27][][354 ms][DEBUG] START check_internet [2025-08-26 10:58:27][][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:58:27][][541 ms][DEBUG] SU: done in 187 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=84.9 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 84.932/84.932/84.932/0.000 ms\n [2025-08-26 10:58:27][][541 ms][DEBUG] check_internet: online [2025-08-26 10:58:27][][541 ms][DEBUG] END check_internet in 187 ms [2025-08-26 10:58:27][][541 ms][DEBUG] rawBody.length=1130 [2025-08-26 10:58:27][][541 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCX3029RBE\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5196\"}'\'' -e'"" [2025-08-26 10:58:27][][541 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:58:27][][541 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCX3029RBE\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5196\"}'\'' -e'"" [2025-08-26 10:58:31][][4071 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 10:58:31][][4228 ms][DEBUG] proc_open done in 3687 ms; code=255; res.len=107 [2025-08-26 10:58:31][][4228 ms][DEBUG] END runCmdUntilRes#1 in 3687 ms [2025-08-26 10:58:31][][4228 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 10:58:32][357435840750662][0 ms][INFO] === Request start === [2025-08-26 10:58:32][357435840750662][1 ms][DEBUG] START check_scloud [2025-08-26 10:58:32][357435840750662][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:58:32][357435840750662][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 31224 4968 23678436 136300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:58:32][357435840750662][246 ms][DEBUG] targetPkg: running [2025-08-26 10:58:32][357435840750662][246 ms][DEBUG] END check_scloud in 245 ms [2025-08-26 10:58:32][357435840750662][246 ms][DEBUG] START check_boot_completed [2025-08-26 10:58:32][357435840750662][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:58:32][357435840750662][293 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:58:32][357435840750662][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:58:32][357435840750662][340 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 10:58:32][357435840750662][340 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 10:58:32][357435840750662][340 ms][DEBUG] START check_internet [2025-08-26 10:58:32][357435840750662][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 10:58:32][357435840750662][511 ms][DEBUG] SU: done in 172 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=84.9 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 84.998/84.998/84.998/0.000 ms\n [2025-08-26 10:58:32][357435840750662][511 ms][DEBUG] check_internet: online [2025-08-26 10:58:32][357435840750662][511 ms][DEBUG] END check_internet in 172 ms [2025-08-26 10:58:32][357435840750662][511 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:58:32][357435840750662][511 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840750662\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6432\"}'\'' -e'"" [2025-08-26 10:58:32][357435840750662][511 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:58:32][357435840750662][511 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840750662\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6432\"}'\'' -e'"" [2025-08-26 10:58:36][357435840750662][4089 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f2ea9b40-a776-4fd3-8d77-48f4267862a9","id":"QR_f2ea9b40-a776-4fd3-8d77-48f4267862a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:58:36][357435840750662][4245 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-08-26 10:58:36][357435840750662][4245 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-08-26 10:58:36][357435840750662][4245 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:59:03][357358511849813][0 ms][INFO] === Request start === [2025-08-26 10:59:03][357358511849813][1 ms][DEBUG] START check_scloud [2025-08-26 10:59:03][357358511849813][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:59:03][357358511849813][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 31224 4968 23711004 151564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:59:03][357358511849813][307 ms][DEBUG] targetPkg: running [2025-08-26 10:59:03][357358511849813][307 ms][DEBUG] END check_scloud in 307 ms [2025-08-26 10:59:03][357358511849813][307 ms][DEBUG] START check_boot_completed [2025-08-26 10:59:03][357358511849813][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:59:03][357358511849813][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 10:59:03][357358511849813][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:59:03][357358511849813][417 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 10:59:03][357358511849813][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 10:59:03][357358511849813][417 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:59:03][357358511849813][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357358511849813\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SEK\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5608\"}'\'' -e'"" [2025-08-26 10:59:03][357358511849813][417 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:59:03][357358511849813][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357358511849813\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SEK\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5608\"}'\'' -e'"" [2025-08-26 10:59:06][357358511849813][3947 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe369974-0b74-4d6a-8628-8108530150ac","id":"QR_fe369974-0b74-4d6a-8628-8108530150ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:59:07][357358511849813][4103 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=3343 [2025-08-26 10:59:07][357358511849813][4103 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-08-26 10:59:07][357358511849813][4103 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 10:59:09][357042147762372][0 ms][INFO] === Request start === [2025-08-26 10:59:09][357042147762372][1 ms][DEBUG] START check_scloud [2025-08-26 10:59:09][357042147762372][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 10:59:09][357042147762372][295 ms][DEBUG] SU: done in 295 ms; outu0_a118 31224 4968 23849316 162448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 10:59:09][357042147762372][295 ms][DEBUG] targetPkg: running [2025-08-26 10:59:09][357042147762372][295 ms][DEBUG] END check_scloud in 295 ms [2025-08-26 10:59:09][357042147762372][295 ms][DEBUG] START check_boot_completed [2025-08-26 10:59:09][357042147762372][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 10:59:09][357042147762372][327 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 10:59:09][357042147762372][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 10:59:10][357042147762372][374 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 10:59:10][357042147762372][374 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 10:59:10][357042147762372][374 ms][DEBUG] rawBody.length=1148 [2025-08-26 10:59:10][357042147762372][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042147762372\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7590\"}'\'' -e'"" [2025-08-26 10:59:10][357042147762372][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 10:59:10][357042147762372][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042147762372\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7590\"}'\'' -e'"" [2025-08-26 10:59:13][357042147762372][4279 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0b7ca342-a84e-420d-9b3d-6c37aa30ac18","id":"QR_0b7ca342-a84e-420d-9b3d-6c37aa30ac18","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 10:59:14][357042147762372][4435 ms][DEBUG] proc_open done in 4060 ms; code=255; res.len=3343 [2025-08-26 10:59:14][357042147762372][4435 ms][DEBUG] END runCmdUntilRes#1 in 4060 ms [2025-08-26 10:59:14][357042147762372][4435 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:00:04][351681592274379][1 ms][INFO] === Request start === [2025-08-26 11:00:04][351681592274379][1 ms][DEBUG] START check_scloud [2025-08-26 11:00:04][351681592274379][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:00:04][351681592274379][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 31224 4968 23960612 172584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:00:04][351681592274379][301 ms][DEBUG] targetPkg: running [2025-08-26 11:00:04][351681592274379][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 11:00:04][351681592274379][301 ms][DEBUG] START check_boot_completed [2025-08-26 11:00:04][351681592274379][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:00:04][351681592274379][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:00:04][351681592274379][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:00:04][351681592274379][410 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 11:00:04][351681592274379][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 11:00:04][351681592274379][410 ms][DEBUG] START check_internet [2025-08-26 11:00:04][351681592274379][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:00:04][351681592274379][785 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=100 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 100.244/100.244/100.244/0.000 ms\n [2025-08-26 11:00:04][351681592274379][785 ms][DEBUG] check_internet: online [2025-08-26 11:00:04][351681592274379][785 ms][DEBUG] END check_internet in 375 ms [2025-08-26 11:00:04][351681592274379][785 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:00:04][351681592274379][785 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681592274379\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2661\"}'\'' -e'"" [2025-08-26 11:00:04][351681592274379][785 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:00:04][351681592274379][785 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681592274379\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2661\"}'\'' -e'"" [2025-08-26 11:00:08][351681592274379][4503 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_867ff49d-b66d-4e70-b4e4-a5a84191eb91","id":"QR_867ff49d-b66d-4e70-b4e4-a5a84191eb91","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:00:08][351681592274379][4659 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-08-26 11:00:08][351681592274379][4659 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-26 11:00:08][351681592274379][4659 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:03:29][352053267227117][1 ms][INFO] === Request start === [2025-08-26 11:03:29][352053267227117][1 ms][DEBUG] START check_scloud [2025-08-26 11:03:29][352053267227117][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:03:30][352053267227117][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 31224 4968 24064152 184576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:03:30][352053267227117][279 ms][DEBUG] targetPkg: running [2025-08-26 11:03:30][352053267227117][279 ms][DEBUG] END check_scloud in 278 ms [2025-08-26 11:03:30][352053267227117][280 ms][DEBUG] START check_boot_completed [2025-08-26 11:03:30][352053267227117][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:03:30][352053267227117][325 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 11:03:30][352053267227117][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:03:30][352053267227117][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:03:30][352053267227117][372 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-26 11:03:30][352053267227117][372 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:03:30][352053267227117][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053267227117\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7241\"}'\'' -e'"" [2025-08-26 11:03:30][352053267227117][372 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:03:30][352053267227117][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053267227117\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7241\"}'\'' -e'"" [2025-08-26 11:03:33][352053267227117][3886 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 11:03:33][352053267227117][4042 ms][DEBUG] proc_open done in 3670 ms; code=255; res.len=107 [2025-08-26 11:03:33][352053267227117][4042 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-26 11:03:33][352053267227117][4042 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 11:03:34][][0 ms][INFO] === Request start === [2025-08-26 11:03:34][][1 ms][DEBUG] START check_scloud [2025-08-26 11:03:34][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:03:34][][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 31224 4968 24229280 195432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:03:34][][312 ms][DEBUG] targetPkg: running [2025-08-26 11:03:34][][312 ms][DEBUG] END check_scloud in 312 ms [2025-08-26 11:03:34][][312 ms][DEBUG] START check_boot_completed [2025-08-26 11:03:34][][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:03:34][][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:03:34][][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:03:34][][406 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:03:34][][406 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 11:03:34][][406 ms][DEBUG] rawBody.length=1129 [2025-08-26 11:03:34][][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX71CRKXM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2652\"}'\'' -e'"" [2025-08-26 11:03:34][][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:03:34][][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX71CRKXM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2652\"}'\'' -e'"" [2025-08-26 11:03:37][][3608 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 11:03:38][][3764 ms][DEBUG] proc_open done in 3358 ms; code=255; res.len=107 [2025-08-26 11:03:38][][3764 ms][DEBUG] END runCmdUntilRes#1 in 3358 ms [2025-08-26 11:03:38][][3764 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 11:03:40][352053267227117][0 ms][INFO] === Request start === [2025-08-26 11:03:40][352053267227117][1 ms][DEBUG] START check_scloud [2025-08-26 11:03:40][352053267227117][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:03:40][352053267227117][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 31224 4968 24368808 207292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:03:40][352053267227117][290 ms][DEBUG] targetPkg: running [2025-08-26 11:03:40][352053267227117][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-26 11:03:40][352053267227117][290 ms][DEBUG] START check_boot_completed [2025-08-26 11:03:40][352053267227117][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:03:40][352053267227117][336 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:03:40][352053267227117][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:03:40][352053267227117][398 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 11:03:40][352053267227117][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 11:03:40][352053267227117][399 ms][DEBUG] rawBody.length=1149 [2025-08-26 11:03:40][352053267227117][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053267227117\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7138\"}'\'' -e'"" [2025-08-26 11:03:40][352053267227117][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:03:40][352053267227117][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053267227117\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7138\"}'\'' -e'"" [2025-08-26 11:03:45][352053267227117][5303 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a7ad625c-5f47-4aa2-a49b-7415f70ca2ea","id":"QR_a7ad625c-5f47-4aa2-a49b-7415f70ca2ea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:03:45][352053267227117][5460 ms][DEBUG] proc_open done in 5061 ms; code=255; res.len=3343 [2025-08-26 11:03:45][352053267227117][5460 ms][DEBUG] END runCmdUntilRes#1 in 5061 ms [2025-08-26 11:03:45][352053267227117][5460 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:04:03][358799694751426][0 ms][INFO] === Request start === [2025-08-26 11:04:03][358799694751426][1 ms][DEBUG] START check_scloud [2025-08-26 11:04:03][358799694751426][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:04:03][358799694751426][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 31224 4968 24447812 218316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:04:03][358799694751426][295 ms][DEBUG] targetPkg: running [2025-08-26 11:04:03][358799694751426][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-26 11:04:03][358799694751426][295 ms][DEBUG] START check_boot_completed [2025-08-26 11:04:03][358799694751426][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:04:03][358799694751426][326 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 11:04:03][358799694751426][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:04:03][358799694751426][374 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 11:04:03][358799694751426][374 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 11:04:03][358799694751426][374 ms][DEBUG] START check_internet [2025-08-26 11:04:03][358799694751426][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:04:03][358799694751426][654 ms][DEBUG] SU: done in 280 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=133 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 133.258/133.258/133.258/0.000 ms\n [2025-08-26 11:04:03][358799694751426][655 ms][DEBUG] check_internet: online [2025-08-26 11:04:03][358799694751426][655 ms][DEBUG] END check_internet in 280 ms [2025-08-26 11:04:03][358799694751426][655 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:04:03][358799694751426][655 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799694751426\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9783\"}'\'' -e'"" [2025-08-26 11:04:03][358799694751426][655 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:04:03][358799694751426][655 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799694751426\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9783\"}'\'' -e'"" [2025-08-26 11:04:07][358799694751426][4435 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5b8beba5-5dc0-4cb4-b1f1-d6c4fe410a63","id":"QR_5b8beba5-5dc0-4cb4-b1f1-d6c4fe410a63","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:04:07][358799694751426][4591 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-26 11:04:07][358799694751426][4591 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-26 11:04:07][358799694751426][4591 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:04:11][351380440513811][0 ms][INFO] === Request start === [2025-08-26 11:04:11][351380440513811][1 ms][DEBUG] START check_scloud [2025-08-26 11:04:11][351380440513811][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:04:11][351380440513811][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 31224 4968 24595652 230416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:04:11][351380440513811][265 ms][DEBUG] targetPkg: running [2025-08-26 11:04:11][351380440513811][265 ms][DEBUG] END check_scloud in 264 ms [2025-08-26 11:04:11][351380440513811][265 ms][DEBUG] START check_boot_completed [2025-08-26 11:04:11][351380440513811][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:04:11][351380440513811][311 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:04:11][351380440513811][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:04:11][351380440513811][358 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:04:11][351380440513811][358 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 11:04:11][351380440513811][358 ms][DEBUG] START check_internet [2025-08-26 11:04:11][351380440513811][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:04:12][351380440513811][624 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=167 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 167.254/167.254/167.254/0.000 ms\n [2025-08-26 11:04:12][351380440513811][624 ms][DEBUG] check_internet: online [2025-08-26 11:04:12][351380440513811][624 ms][DEBUG] END check_internet in 266 ms [2025-08-26 11:04:12][351380440513811][624 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:04:12][351380440513811][624 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351380440513811\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5370\"}'\'' -e'"" [2025-08-26 11:04:12][351380440513811][624 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:04:12][351380440513811][624 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351380440513811\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5370\"}'\'' -e'"" [2025-08-26 11:04:15][351380440513811][3764 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 11:04:15][351380440513811][3920 ms][DEBUG] proc_open done in 3295 ms; code=255; res.len=107 [2025-08-26 11:04:15][351380440513811][3920 ms][DEBUG] END runCmdUntilRes#1 in 3296 ms [2025-08-26 11:04:15][351380440513811][3920 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 11:04:15][][0 ms][INFO] === Request start === [2025-08-26 11:04:15][][1 ms][DEBUG] START check_scloud [2025-08-26 11:04:15][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:04:16][][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 31224 4968 24721740 242188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:04:16][][307 ms][DEBUG] targetPkg: running [2025-08-26 11:04:16][][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 11:04:16][][307 ms][DEBUG] START check_boot_completed [2025-08-26 11:04:16][][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:04:16][][337 ms][DEBUG] ADB: done in 30 ms; out [2025-08-26 11:04:16][][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:04:16][][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:04:16][][383 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-26 11:04:16][][383 ms][DEBUG] START check_internet [2025-08-26 11:04:16][][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:04:16][][555 ms][DEBUG] SU: done in 172 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=83.8 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 83.894/83.894/83.894/0.000 ms\n [2025-08-26 11:04:16][][556 ms][DEBUG] check_internet: online [2025-08-26 11:04:16][][556 ms][DEBUG] END check_internet in 172 ms [2025-08-26 11:04:16][][556 ms][DEBUG] rawBody.length=1129 [2025-08-26 11:04:16][][556 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX722T78L\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2054\"}'\'' -e'"" [2025-08-26 11:04:16][][556 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:04:16][][556 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX722T78L\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2054\"}'\'' -e'"" [2025-08-26 11:04:19][][4180 ms][DEBUG] proc_open done in 3624 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 11:04:19][][4180 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-08-26 11:04:19][][4180 ms][WARN] Detected error: Process with pid 31224 either refused to load frida-agent, or terminated during injection [2025-08-26 11:04:19][][4180 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 11:04:20][][4320 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 11:04:20][][4320 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 11:04:20][][4320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 11:04:20][][4461 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 11:04:20][][4461 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 11:04:20][][4617 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 11:04:22][][6632 ms][DEBUG] START check_boot_completed [2025-08-26 11:04:22][][6632 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:04:22][][6679 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:04:22][][6679 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:04:22][][6726 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:04:22][][6726 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 11:04:25][][9741 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 11:04:25][][9741 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX722T78L\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2054\"}'\'' -e'"" [2025-08-26 11:04:28][][12959 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 11:04:28][][13115 ms][DEBUG] proc_open done in 3374 ms; code=255; res.len=107 [2025-08-26 11:04:28][][13115 ms][DEBUG] END runCmdUntilRes#2 in 3374 ms [2025-08-26 11:04:28][][13115 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 11:04:30][351380440513811][0 ms][INFO] === Request start === [2025-08-26 11:04:30][351380440513811][1 ms][DEBUG] START check_scloud [2025-08-26 11:04:30][351380440513811][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:04:31][351380440513811][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 32508 4968 23538808 124232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:04:31][351380440513811][246 ms][DEBUG] targetPkg: running [2025-08-26 11:04:31][351380440513811][246 ms][DEBUG] END check_scloud in 246 ms [2025-08-26 11:04:31][351380440513811][246 ms][DEBUG] START check_boot_completed [2025-08-26 11:04:31][351380440513811][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:04:31][351380440513811][292 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 11:04:31][351380440513811][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:04:31][351380440513811][370 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 11:04:31][351380440513811][370 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-26 11:04:31][351380440513811][370 ms][DEBUG] START check_internet [2025-08-26 11:04:31][351380440513811][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:04:31][351380440513811][589 ms][DEBUG] SU: done in 219 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=126 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 126.201/126.201/126.201/0.000 ms\n [2025-08-26 11:04:31][351380440513811][589 ms][DEBUG] check_internet: online [2025-08-26 11:04:31][351380440513811][589 ms][DEBUG] END check_internet in 219 ms [2025-08-26 11:04:31][351380440513811][589 ms][DEBUG] rawBody.length=1149 [2025-08-26 11:04:31][351380440513811][589 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351380440513811\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4203\"}'\'' -e'"" [2025-08-26 11:04:31][351380440513811][589 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:04:31][351380440513811][589 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351380440513811\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4203\"}'\'' -e'"" [2025-08-26 11:04:36][351380440513811][5837 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cfa6261c-8177-40cc-abb6-6d85f2bdec44","id":"QR_cfa6261c-8177-40cc-abb6-6d85f2bdec44","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:04:36][351380440513811][5993 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-08-26 11:04:36][351380440513811][5994 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-08-26 11:04:36][351380440513811][5994 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:06:03][353310804573091][1 ms][INFO] === Request start === [2025-08-26 11:06:03][353310804573091][1 ms][DEBUG] START check_scloud [2025-08-26 11:06:03][353310804573091][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:06:03][353310804573091][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 32508 4968 23630868 137952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:06:03][353310804573091][252 ms][DEBUG] targetPkg: running [2025-08-26 11:06:03][353310804573091][252 ms][DEBUG] END check_scloud in 251 ms [2025-08-26 11:06:03][353310804573091][252 ms][DEBUG] START check_boot_completed [2025-08-26 11:06:03][353310804573091][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:06:04][353310804573091][298 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:06:04][353310804573091][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:06:04][353310804573091][361 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 11:06:04][353310804573091][361 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 11:06:04][353310804573091][361 ms][DEBUG] START check_internet [2025-08-26 11:06:04][353310804573091][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:06:04][353310804573091][611 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=125 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 125.530/125.530/125.530/0.000 ms\n [2025-08-26 11:06:04][353310804573091][611 ms][DEBUG] check_internet: online [2025-08-26 11:06:04][353310804573091][611 ms][DEBUG] END check_internet in 250 ms [2025-08-26 11:06:04][353310804573091][611 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:06:04][353310804573091][611 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804573091\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3178\"}'\'' -e'"" [2025-08-26 11:06:04][353310804573091][611 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:06:04][353310804573091][611 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353310804573091\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3178\"}'\'' -e'"" [2025-08-26 11:06:07][353310804573091][4266 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a0ad3a90-a613-4aac-af77-357dcc71759f","id":"QR_a0ad3a90-a613-4aac-af77-357dcc71759f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:06:08][353310804573091][4422 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-26 11:06:08][353310804573091][4422 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-26 11:06:08][353310804573091][4422 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:06:10][352842934716670][0 ms][INFO] === Request start === [2025-08-26 11:06:10][352842934716670][1 ms][DEBUG] START check_scloud [2025-08-26 11:06:10][352842934716670][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:06:10][352842934716670][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 32508 4968 23756956 149608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:06:10][352842934716670][297 ms][DEBUG] targetPkg: running [2025-08-26 11:06:10][352842934716670][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-26 11:06:10][352842934716670][297 ms][DEBUG] START check_boot_completed [2025-08-26 11:06:10][352842934716670][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:06:11][352842934716670][344 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:06:11][352842934716670][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:06:11][352842934716670][406 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 11:06:11][352842934716670][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 11:06:11][352842934716670][406 ms][DEBUG] START check_internet [2025-08-26 11:06:11][352842934716670][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:06:11][352842934716670][640 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=116 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 116.028/116.028/116.028/0.000 ms\n [2025-08-26 11:06:11][352842934716670][640 ms][DEBUG] check_internet: online [2025-08-26 11:06:11][352842934716670][640 ms][DEBUG] END check_internet in 235 ms [2025-08-26 11:06:11][352842934716670][641 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:06:11][352842934716670][641 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352842934716670\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2144\"}'\'' -e'"" [2025-08-26 11:06:11][352842934716670][641 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:06:11][352842934716670][641 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352842934716670\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2144\"}'\'' -e'"" [2025-08-26 11:06:15][352842934716670][4358 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ed3b96f0-5ebb-4b8b-9e35-be9c2fd3b611","id":"QR_ed3b96f0-5ebb-4b8b-9e35-be9c2fd3b611","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:06:15][352842934716670][4514 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-08-26 11:06:15][352842934716670][4514 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-26 11:06:15][352842934716670][4514 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:09:05][351675645869599][1 ms][INFO] === Request start === [2025-08-26 11:09:05][351675645869599][1 ms][DEBUG] START check_scloud [2025-08-26 11:09:05][351675645869599][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:09:05][351675645869599][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 32508 4968 23830672 160968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:09:05][351675645869599][280 ms][DEBUG] targetPkg: running [2025-08-26 11:09:05][351675645869599][281 ms][DEBUG] END check_scloud in 280 ms [2025-08-26 11:09:05][351675645869599][281 ms][DEBUG] START check_boot_completed [2025-08-26 11:09:05][351675645869599][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:09:05][351675645869599][327 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:09:05][351675645869599][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:09:05][351675645869599][390 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 11:09:05][351675645869599][390 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 11:09:05][351675645869599][390 ms][DEBUG] rawBody.length=1149 [2025-08-26 11:09:05][351675645869599][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351675645869599\",\"model\":\"SM-G781U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1438\"}'\'' -e'"" [2025-08-26 11:09:05][351675645869599][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:09:05][351675645869599][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351675645869599\",\"model\":\"SM-G781U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1438\"}'\'' -e'"" [2025-08-26 11:09:10][351675645869599][5670 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3541fae2-2ec6-4693-942e-033578de8eda","id":"QR_3541fae2-2ec6-4693-942e-033578de8eda","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:09:10][351675645869599][5826 ms][DEBUG] proc_open done in 5436 ms; code=255; res.len=3343 [2025-08-26 11:09:10][351675645869599][5826 ms][DEBUG] END runCmdUntilRes#1 in 5436 ms [2025-08-26 11:09:10][351675645869599][5826 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:12:03][350832442587574][1 ms][INFO] === Request start === [2025-08-26 11:12:03][350832442587574][1 ms][DEBUG] START check_scloud [2025-08-26 11:12:03][350832442587574][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:12:03][350832442587574][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 32508 4968 23977332 172500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:12:03][350832442587574][298 ms][DEBUG] targetPkg: running [2025-08-26 11:12:03][350832442587574][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-26 11:12:03][350832442587574][298 ms][DEBUG] START check_boot_completed [2025-08-26 11:12:03][350832442587574][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:12:03][350832442587574][328 ms][DEBUG] ADB: done in 30 ms; out [2025-08-26 11:12:03][350832442587574][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:12:03][350832442587574][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:12:03][350832442587574][375 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-26 11:12:03][350832442587574][375 ms][DEBUG] START check_internet [2025-08-26 11:12:03][350832442587574][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:12:04][350832442587574][719 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=99.9 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 99.962/99.962/99.962/0.000 ms\n [2025-08-26 11:12:04][350832442587574][719 ms][DEBUG] check_internet: online [2025-08-26 11:12:04][350832442587574][719 ms][DEBUG] END check_internet in 344 ms [2025-08-26 11:12:04][350832442587574][719 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:12:04][350832442587574][719 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442587574\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2574\"}'\'' -e'"" [2025-08-26 11:12:04][350832442587574][719 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:12:04][350832442587574][720 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832442587574\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2574\"}'\'' -e'"" [2025-08-26 11:12:08][350832442587574][4562 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_759b03e2-0233-4108-846c-89dc024a0e9a","id":"QR_759b03e2-0233-4108-846c-89dc024a0e9a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:12:08][350832442587574][4718 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-08-26 11:12:08][350832442587574][4718 ms][DEBUG] END runCmdUntilRes#1 in 3998 ms [2025-08-26 11:12:08][350832442587574][4718 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:12:10][352677531565793][0 ms][INFO] === Request start === [2025-08-26 11:12:10][352677531565793][1 ms][DEBUG] START check_scloud [2025-08-26 11:12:10][352677531565793][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:12:10][352677531565793][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 32508 4968 24156796 184388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:12:10][352677531565793][258 ms][DEBUG] targetPkg: running [2025-08-26 11:12:10][352677531565793][258 ms][DEBUG] END check_scloud in 258 ms [2025-08-26 11:12:10][352677531565793][258 ms][DEBUG] START check_boot_completed [2025-08-26 11:12:10][352677531565793][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:12:11][352677531565793][305 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:12:11][352677531565793][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:12:11][352677531565793][352 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:12:11][352677531565793][352 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 11:12:11][352677531565793][353 ms][DEBUG] START check_internet [2025-08-26 11:12:11][352677531565793][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:12:11][352677531565793][602 ms][DEBUG] SU: done in 249 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=109 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 109.196/109.196/109.196/0.000 ms\n [2025-08-26 11:12:11][352677531565793][602 ms][DEBUG] check_internet: online [2025-08-26 11:12:11][352677531565793][602 ms][DEBUG] END check_internet in 250 ms [2025-08-26 11:12:11][352677531565793][602 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:12:11][352677531565793][602 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531565793\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7443\"}'\'' -e'"" [2025-08-26 11:12:11][352677531565793][602 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:12:11][352677531565793][602 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531565793\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7443\"}'\'' -e'"" [2025-08-26 11:12:15][352677531565793][4382 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_830620da-fc12-4344-82d4-45d7a1218ab5","id":"QR_830620da-fc12-4344-82d4-45d7a1218ab5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:12:15][352677531565793][4538 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-26 11:12:15][352677531565793][4538 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-26 11:12:15][352677531565793][4539 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:13:02][350731011403520][0 ms][INFO] === Request start === [2025-08-26 11:13:02][350731011403520][0 ms][DEBUG] START check_scloud [2025-08-26 11:13:02][350731011403520][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:13:03][350731011403520][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 32508 4968 24247612 195060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:13:03][350731011403520][307 ms][DEBUG] targetPkg: running [2025-08-26 11:13:03][350731011403520][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 11:13:03][350731011403520][307 ms][DEBUG] START check_boot_completed [2025-08-26 11:13:03][350731011403520][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:13:03][350731011403520][338 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 11:13:03][350731011403520][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:13:03][350731011403520][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:13:03][350731011403520][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 11:13:03][350731011403520][385 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:13:03][350731011403520][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731011403520\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4269\"}'\'' -e'"" [2025-08-26 11:13:03][350731011403520][385 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:13:03][350731011403520][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731011403520\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4269\"}'\'' -e'"" [2025-08-26 11:13:07][350731011403520][4071 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_09667cf0-e0ad-4eac-a4c8-5453f0d2db0b","id":"QR_09667cf0-e0ad-4eac-a4c8-5453f0d2db0b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:13:07][350731011403520][4228 ms][DEBUG] proc_open done in 3843 ms; code=255; res.len=3343 [2025-08-26 11:13:07][350731011403520][4228 ms][DEBUG] END runCmdUntilRes#1 in 3843 ms [2025-08-26 11:13:07][350731011403520][4228 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:14:03][354274110277517][0 ms][INFO] === Request start === [2025-08-26 11:14:03][354274110277517][1 ms][DEBUG] START check_scloud [2025-08-26 11:14:03][354274110277517][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:14:04][354274110277517][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 32508 4968 24356384 206992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:14:04][354274110277517][310 ms][DEBUG] targetPkg: running [2025-08-26 11:14:04][354274110277517][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 11:14:04][354274110277517][310 ms][DEBUG] START check_boot_completed [2025-08-26 11:14:04][354274110277517][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:14:04][354274110277517][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 11:14:04][354274110277517][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:14:04][354274110277517][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:14:04][354274110277517][389 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 11:14:04][354274110277517][389 ms][DEBUG] START check_internet [2025-08-26 11:14:04][354274110277517][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:14:04][354274110277517][763 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=100 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 100.857/100.857/100.857/0.000 ms\n [2025-08-26 11:14:04][354274110277517][763 ms][DEBUG] check_internet: online [2025-08-26 11:14:04][354274110277517][763 ms][DEBUG] END check_internet in 375 ms [2025-08-26 11:14:04][354274110277517][764 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:14:04][354274110277517][764 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354274110277517\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7819\"}'\'' -e'"" [2025-08-26 11:14:04][354274110277517][764 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:14:04][354274110277517][764 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354274110277517\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SER\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7819\"}'\'' -e'"" [2025-08-26 11:14:08][354274110277517][4637 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_642d8bb2-c2d8-42c9-bbd2-f0ca04c3a299","id":"QR_642d8bb2-c2d8-42c9-bbd2-f0ca04c3a299","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:14:08][354274110277517][4793 ms][DEBUG] proc_open done in 4029 ms; code=255; res.len=3343 [2025-08-26 11:14:08][354274110277517][4793 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-26 11:14:08][354274110277517][4793 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:15:03][355382707922525][1 ms][INFO] === Request start === [2025-08-26 11:15:03][355382707922525][1 ms][DEBUG] START check_scloud [2025-08-26 11:15:03][355382707922525][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:15:03][355382707922525][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 32508 4968 24496900 218500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:15:03][355382707922525][304 ms][DEBUG] targetPkg: running [2025-08-26 11:15:03][355382707922525][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-26 11:15:03][355382707922525][304 ms][DEBUG] START check_boot_completed [2025-08-26 11:15:03][355382707922525][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:15:03][355382707922525][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:15:03][355382707922525][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:15:04][355382707922525][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 11:15:04][355382707922525][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 11:15:04][355382707922525][413 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:15:04][355382707922525][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382707922525\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4214\"}'\'' -e'"" [2025-08-26 11:15:04][355382707922525][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:15:04][355382707922525][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382707922525\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4214\"}'\'' -e'"" [2025-08-26 11:15:07][355382707922525][4022 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e5005582-799c-430d-b35d-c41571e69420","id":"QR_e5005582-799c-430d-b35d-c41571e69420","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:15:07][355382707922525][4178 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-08-26 11:15:07][355382707922525][4178 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-08-26 11:15:07][355382707922525][4178 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:17:03][350536251230396][0 ms][INFO] === Request start === [2025-08-26 11:17:03][350536251230396][1 ms][DEBUG] START check_scloud [2025-08-26 11:17:03][350536251230396][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:17:04][350536251230396][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 32508 4968 24606568 229940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:17:04][350536251230396][321 ms][DEBUG] targetPkg: running [2025-08-26 11:17:04][350536251230396][321 ms][DEBUG] END check_scloud in 321 ms [2025-08-26 11:17:04][350536251230396][321 ms][DEBUG] START check_boot_completed [2025-08-26 11:17:04][350536251230396][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:17:04][350536251230396][368 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:17:04][350536251230396][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:17:04][350536251230396][431 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 11:17:04][350536251230396][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 11:17:04][350536251230396][431 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:17:04][350536251230396][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536251230396\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5478\"}'\'' -e'"" [2025-08-26 11:17:04][350536251230396][431 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:17:04][350536251230396][431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536251230396\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5478\"}'\'' -e'"" [2025-08-26 11:17:08][350536251230396][4586 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_25c01511-f1ca-417d-a0bf-9607918e24d3","id":"QR_25c01511-f1ca-417d-a0bf-9607918e24d3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:17:08][350536251230396][4742 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-26 11:17:08][350536251230396][4742 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-26 11:17:08][350536251230396][4742 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:19:05][353600811647007][1 ms][INFO] === Request start === [2025-08-26 11:19:05][353600811647007][1 ms][DEBUG] START check_scloud [2025-08-26 11:19:05][353600811647007][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:19:05][353600811647007][259 ms][DEBUG] SU: done in 257 ms; outu0_a118 32508 4968 24732748 240980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:19:05][353600811647007][259 ms][DEBUG] targetPkg: running [2025-08-26 11:19:05][353600811647007][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-26 11:19:05][353600811647007][259 ms][DEBUG] START check_boot_completed [2025-08-26 11:19:05][353600811647007][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:19:05][353600811647007][290 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 11:19:05][353600811647007][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:19:05][353600811647007][337 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:19:05][353600811647007][337 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 11:19:05][353600811647007][337 ms][DEBUG] rawBody.length=1149 [2025-08-26 11:19:05][353600811647007][337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600811647007\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2243\"}'\'' -e'"" [2025-08-26 11:19:05][353600811647007][337 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:19:05][353600811647007][337 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600811647007\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2243\"}'\'' -e'"" [2025-08-26 11:19:09][353600811647007][3992 ms][DEBUG] proc_open done in 3655 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 11:19:09][353600811647007][3992 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-26 11:19:09][353600811647007][3992 ms][WARN] Detected error: Process with pid 32508 either refused to load frida-agent, or terminated during injection [2025-08-26 11:19:09][353600811647007][3992 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 11:19:09][353600811647007][4148 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 11:19:09][353600811647007][4148 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 11:19:09][353600811647007][4148 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 11:19:09][353600811647007][4260 ms][DEBUG] SU: done in 111 ms; out [2025-08-26 11:19:09][353600811647007][4260 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 11:19:09][353600811647007][4414 ms][DEBUG] SU: done in 154 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 11:19:11][353600811647007][6429 ms][DEBUG] START check_boot_completed [2025-08-26 11:19:11][353600811647007][6429 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:19:11][353600811647007][6476 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:19:11][353600811647007][6476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:19:11][353600811647007][6523 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:19:11][353600811647007][6523 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 11:19:14][353600811647007][9538 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 11:19:14][353600811647007][9538 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600811647007\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2243\"}'\'' -e'"" [2025-08-26 11:19:19][353600811647007][14458 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2aa34e30-b2b4-41d4-bdc4-3513634371af","id":"QR_2aa34e30-b2b4-41d4-bdc4-3513634371af","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:19:20][353600811647007][14615 ms][DEBUG] proc_open done in 5077 ms; code=255; res.len=3343 [2025-08-26 11:19:20][353600811647007][14615 ms][DEBUG] END runCmdUntilRes#2 in 5077 ms [2025-08-26 11:19:20][353600811647007][14615 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:20:03][351917371217449][0 ms][INFO] === Request start === [2025-08-26 11:20:03][351917371217449][1 ms][DEBUG] START check_scloud [2025-08-26 11:20:03][351917371217449][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:20:03][351917371217449][263 ms][DEBUG] SU: done in 263 ms; outu0_a118 1932 4968 23514068 129004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:20:03][351917371217449][263 ms][DEBUG] targetPkg: running [2025-08-26 11:20:03][351917371217449][263 ms][DEBUG] END check_scloud in 263 ms [2025-08-26 11:20:03][351917371217449][264 ms][DEBUG] START check_boot_completed [2025-08-26 11:20:03][351917371217449][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:20:04][351917371217449][326 ms][DEBUG] ADB: done in 62 ms; out [2025-08-26 11:20:04][351917371217449][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:20:04][351917371217449][373 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:20:04][351917371217449][373 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 11:20:04][351917371217449][373 ms][DEBUG] START check_internet [2025-08-26 11:20:04][351917371217449][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:20:04][351917371217449][701 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=98.9 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 98.992/98.992/98.992/0.000 ms\n [2025-08-26 11:20:04][351917371217449][701 ms][DEBUG] check_internet: online [2025-08-26 11:20:04][351917371217449][701 ms][DEBUG] END check_internet in 328 ms [2025-08-26 11:20:04][351917371217449][701 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:20:04][351917371217449][701 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351917371217449\",\"model\":\"SM-S721N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5665\"}'\'' -e'"" [2025-08-26 11:20:04][351917371217449][701 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:20:04][351917371217449][701 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351917371217449\",\"model\":\"SM-S721N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5665\"}'\'' -e'"" [2025-08-26 11:20:08][351917371217449][4575 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_820b841b-84b8-42a0-958d-1818a90fb420","id":"QR_820b841b-84b8-42a0-958d-1818a90fb420","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:20:08][351917371217449][4731 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-26 11:20:08][351917371217449][4731 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-26 11:20:08][351917371217449][4731 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:21:03][352590526301472][0 ms][INFO] === Request start === [2025-08-26 11:21:03][352590526301472][1 ms][DEBUG] START check_scloud [2025-08-26 11:21:03][352590526301472][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:21:04][352590526301472][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 1932 4968 23620472 138872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:21:04][352590526301472][305 ms][DEBUG] targetPkg: running [2025-08-26 11:21:04][352590526301472][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 11:21:04][352590526301472][305 ms][DEBUG] START check_boot_completed [2025-08-26 11:21:04][352590526301472][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:21:04][352590526301472][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:21:04][352590526301472][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:21:04][352590526301472][430 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 11:21:04][352590526301472][430 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 11:21:04][352590526301472][430 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:21:04][352590526301472][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590526301472\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4510\"}'\'' -e'"" [2025-08-26 11:21:04][352590526301472][430 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:21:04][352590526301472][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590526301472\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4510\"}'\'' -e'"" [2025-08-26 11:21:08][352590526301472][4226 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_35604e6e-7b9a-418e-a4af-70ddb126c733","id":"QR_35604e6e-7b9a-418e-a4af-70ddb126c733","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:21:08][352590526301472][4382 ms][DEBUG] proc_open done in 3951 ms; code=255; res.len=3343 [2025-08-26 11:21:08][352590526301472][4382 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-26 11:21:08][352590526301472][4382 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:22:03][354791648181317][1 ms][INFO] === Request start === [2025-08-26 11:22:03][354791648181317][1 ms][DEBUG] START check_scloud [2025-08-26 11:22:03][354791648181317][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:22:03][354791648181317][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 1932 4968 23742508 151076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:22:03][354791648181317][270 ms][DEBUG] targetPkg: running [2025-08-26 11:22:03][354791648181317][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-26 11:22:03][354791648181317][270 ms][DEBUG] START check_boot_completed [2025-08-26 11:22:03][354791648181317][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:22:03][354791648181317][316 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:22:03][354791648181317][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:22:03][354791648181317][364 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 11:22:03][354791648181317][364 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 11:22:03][354791648181317][364 ms][DEBUG] START check_internet [2025-08-26 11:22:03][354791648181317][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:22:03][354791648181317][660 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=182 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 182.254/182.254/182.254/0.000 ms\n [2025-08-26 11:22:03][354791648181317][660 ms][DEBUG] check_internet: online [2025-08-26 11:22:03][354791648181317][660 ms][DEBUG] END check_internet in 296 ms [2025-08-26 11:22:03][354791648181317][660 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:22:03][354791648181317][660 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354791648181317\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5029\"}'\'' -e'"" [2025-08-26 11:22:03][354791648181317][660 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:22:03][354791648181317][660 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354791648181317\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5029\"}'\'' -e'"" [2025-08-26 11:22:07][354791648181317][4471 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5c73215c-0478-4c9d-bca3-82f8805d3612","id":"QR_5c73215c-0478-4c9d-bca3-82f8805d3612","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:22:07][354791648181317][4628 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-26 11:22:07][354791648181317][4628 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-26 11:22:07][354791648181317][4628 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:23:03][357576778304871][0 ms][INFO] === Request start === [2025-08-26 11:23:03][357576778304871][1 ms][DEBUG] START check_scloud [2025-08-26 11:23:03][357576778304871][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:23:03][357576778304871][293 ms][DEBUG] SU: done in 293 ms; outu0_a118 1932 4968 23849160 162200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:23:03][357576778304871][293 ms][DEBUG] targetPkg: running [2025-08-26 11:23:03][357576778304871][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-26 11:23:03][357576778304871][294 ms][DEBUG] START check_boot_completed [2025-08-26 11:23:03][357576778304871][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:23:03][357576778304871][340 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:23:03][357576778304871][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:23:03][357576778304871][450 ms][DEBUG] SU: done in 109 ms; out [2025-08-26 11:23:03][357576778304871][450 ms][DEBUG] END check_boot_completed in 156 ms [2025-08-26 11:23:03][357576778304871][450 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:23:03][357576778304871][450 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576778304871\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6335\"}'\'' -e'"" [2025-08-26 11:23:03][357576778304871][450 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:23:03][357576778304871][450 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576778304871\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6335\"}'\'' -e'"" [2025-08-26 11:23:07][357576778304871][4402 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1cad040a-11c6-46e3-8eb4-ee0973133b07","id":"QR_1cad040a-11c6-46e3-8eb4-ee0973133b07","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:23:07][357576778304871][4558 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-26 11:23:07][357576778304871][4558 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-26 11:23:07][357576778304871][4558 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:23:10][350013881692643][0 ms][INFO] === Request start === [2025-08-26 11:23:10][350013881692643][1 ms][DEBUG] START check_scloud [2025-08-26 11:23:10][350013881692643][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:23:10][350013881692643][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 1932 4968 23985616 173160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:23:10][350013881692643][317 ms][DEBUG] targetPkg: running [2025-08-26 11:23:10][350013881692643][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-26 11:23:10][350013881692643][317 ms][DEBUG] START check_boot_completed [2025-08-26 11:23:10][350013881692643][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:23:10][350013881692643][363 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:23:10][350013881692643][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:23:10][350013881692643][412 ms][DEBUG] SU: done in 49 ms; out [2025-08-26 11:23:10][350013881692643][412 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 11:23:10][350013881692643][412 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:23:10][350013881692643][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881692643\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1308\"}'\'' -e'"" [2025-08-26 11:23:10][350013881692643][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:23:10][350013881692643][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881692643\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1308\"}'\'' -e'"" [2025-08-26 11:23:14][350013881692643][4300 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_68d5be45-d862-4645-afe8-b47b0e963576","id":"QR_68d5be45-d862-4645-afe8-b47b0e963576","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:23:14][350013881692643][4456 ms][DEBUG] proc_open done in 4044 ms; code=255; res.len=3343 [2025-08-26 11:23:14][350013881692643][4456 ms][DEBUG] END runCmdUntilRes#1 in 4044 ms [2025-08-26 11:23:14][350013881692643][4456 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:23:17][354529382290252][0 ms][INFO] === Request start === [2025-08-26 11:23:17][354529382290252][1 ms][DEBUG] START check_scloud [2025-08-26 11:23:17][354529382290252][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:23:17][354529382290252][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 1932 4968 24162776 184660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:23:17][354529382290252][264 ms][DEBUG] targetPkg: running [2025-08-26 11:23:17][354529382290252][264 ms][DEBUG] END check_scloud in 264 ms [2025-08-26 11:23:17][354529382290252][264 ms][DEBUG] START check_boot_completed [2025-08-26 11:23:17][354529382290252][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:23:17][354529382290252][311 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:23:17][354529382290252][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:23:17][354529382290252][373 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 11:23:17][354529382290252][373 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 11:23:17][354529382290252][373 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:23:17][354529382290252][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529382290252\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8812\"}'\'' -e'"" [2025-08-26 11:23:17][354529382290252][374 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:23:17][354529382290252][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529382290252\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8812\"}'\'' -e'"" [2025-08-26 11:23:21][354529382290252][3716 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-26 11:23:21][354529382290252][3872 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=115 [2025-08-26 11:23:21][354529382290252][3872 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-08-26 11:23:21][354529382290252][3872 ms][INFO] SUCCESS response from frida (len=115) [2025-08-26 11:23:21][][0 ms][INFO] === Request start === [2025-08-26 11:23:21][][1 ms][DEBUG] START check_scloud [2025-08-26 11:23:21][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:23:21][][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 1932 4968 24317664 195616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:23:21][][259 ms][DEBUG] targetPkg: running [2025-08-26 11:23:21][][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-26 11:23:21][][259 ms][DEBUG] START check_boot_completed [2025-08-26 11:23:21][][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:23:21][][306 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:23:21][][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:23:21][][352 ms][DEBUG] SU: done in 46 ms; out [2025-08-26 11:23:21][][352 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 11:23:21][][352 ms][DEBUG] rawBody.length=1129 [2025-08-26 11:23:21][][352 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8TA02Y2NF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9711\"}'\'' -e'"" [2025-08-26 11:23:21][][352 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:23:21][][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8TA02Y2NF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9711\"}'\'' -e'"" [2025-08-26 11:23:25][][3602 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 11:23:25][][3758 ms][DEBUG] proc_open done in 3405 ms; code=255; res.len=107 [2025-08-26 11:23:25][][3758 ms][DEBUG] END runCmdUntilRes#1 in 3406 ms [2025-08-26 11:23:25][][3758 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 11:23:27][354529382290252][0 ms][INFO] === Request start === [2025-08-26 11:23:27][354529382290252][1 ms][DEBUG] START check_scloud [2025-08-26 11:23:27][354529382290252][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:23:27][354529382290252][288 ms][DEBUG] SU: done in 288 ms; outu0_a118 1932 4968 24472388 207500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:23:27][354529382290252][288 ms][DEBUG] targetPkg: running [2025-08-26 11:23:27][354529382290252][289 ms][DEBUG] END check_scloud in 288 ms [2025-08-26 11:23:27][354529382290252][289 ms][DEBUG] START check_boot_completed [2025-08-26 11:23:27][354529382290252][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:23:27][354529382290252][335 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:23:27][354529382290252][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:23:28][354529382290252][413 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 11:23:28][354529382290252][413 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 11:23:28][354529382290252][414 ms][DEBUG] rawBody.length=1149 [2025-08-26 11:23:28][354529382290252][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529382290252\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1212\"}'\'' -e'"" [2025-08-26 11:23:28][354529382290252][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:23:28][354529382290252][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529382290252\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1212\"}'\'' -e'"" [2025-08-26 11:23:33][354529382290252][5490 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_46921d68-2102-4717-b623-659bb93a3999","id":"QR_46921d68-2102-4717-b623-659bb93a3999","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:23:33][354529382290252][5646 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3343 [2025-08-26 11:23:33][354529382290252][5646 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-08-26 11:23:33][354529382290252][5647 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:26:04][354291423161576][1 ms][INFO] === Request start === [2025-08-26 11:26:04][354291423161576][1 ms][DEBUG] START check_scloud [2025-08-26 11:26:04][354291423161576][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:26:04][354291423161576][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 1932 4968 24549180 218792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:26:04][354291423161576][274 ms][DEBUG] targetPkg: running [2025-08-26 11:26:04][354291423161576][274 ms][DEBUG] END check_scloud in 273 ms [2025-08-26 11:26:04][354291423161576][274 ms][DEBUG] START check_boot_completed [2025-08-26 11:26:04][354291423161576][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:26:04][354291423161576][321 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:26:04][354291423161576][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:26:04][354291423161576][399 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 11:26:04][354291423161576][399 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 11:26:04][354291423161576][399 ms][DEBUG] START check_internet [2025-08-26 11:26:04][354291423161576][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:26:05][354291423161576][836 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=100 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 100.606/100.606/100.606/0.000 ms\n [2025-08-26 11:26:05][354291423161576][836 ms][DEBUG] check_internet: online [2025-08-26 11:26:05][354291423161576][836 ms][DEBUG] END check_internet in 437 ms [2025-08-26 11:26:05][354291423161576][836 ms][DEBUG] rawBody.length=1149 [2025-08-26 11:26:05][354291423161576][837 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291423161576\",\"model\":\"SM-A127M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9998\"}'\'' -e'"" [2025-08-26 11:26:05][354291423161576][837 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:26:05][354291423161576][837 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291423161576\",\"model\":\"SM-A127M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9998\"}'\'' -e'"" [2025-08-26 11:26:10][354291423161576][5975 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb4f19b8-5d26-4a51-bbbb-966e12d73cc9","id":"QR_eb4f19b8-5d26-4a51-bbbb-966e12d73cc9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:26:10][354291423161576][6132 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-08-26 11:26:10][354291423161576][6132 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-08-26 11:26:10][354291423161576][6132 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:28:03][357789866077289][0 ms][INFO] === Request start === [2025-08-26 11:28:03][357789866077289][1 ms][DEBUG] START check_scloud [2025-08-26 11:28:03][357789866077289][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:28:03][357789866077289][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 1932 4968 24671264 230864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:28:03][357789866077289][288 ms][DEBUG] targetPkg: running [2025-08-26 11:28:03][357789866077289][288 ms][DEBUG] END check_scloud in 287 ms [2025-08-26 11:28:03][357789866077289][288 ms][DEBUG] START check_boot_completed [2025-08-26 11:28:03][357789866077289][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:28:03][357789866077289][334 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:28:03][357789866077289][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:28:03][357789866077289][397 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 11:28:03][357789866077289][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 11:28:03][357789866077289][397 ms][DEBUG] START check_internet [2025-08-26 11:28:03][357789866077289][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:28:03][357789866077289][694 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=153 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 153.023/153.023/153.023/0.000 ms\n [2025-08-26 11:28:03][357789866077289][694 ms][DEBUG] check_internet: online [2025-08-26 11:28:03][357789866077289][694 ms][DEBUG] END check_internet in 297 ms [2025-08-26 11:28:03][357789866077289][694 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:28:03][357789866077289][694 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357789866077289\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8313\"}'\'' -e'"" [2025-08-26 11:28:03][357789866077289][694 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:28:03][357789866077289][694 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357789866077289\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8313\"}'\'' -e'"" [2025-08-26 11:28:07][357789866077289][4505 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_586ca241-d254-4149-881c-0dfcb9427359","id":"QR_586ca241-d254-4149-881c-0dfcb9427359","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:28:07][357789866077289][4661 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-26 11:28:07][357789866077289][4661 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-26 11:28:07][357789866077289][4661 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:28:10][350178736649252][1 ms][INFO] === Request start === [2025-08-26 11:28:10][350178736649252][1 ms][DEBUG] START check_scloud [2025-08-26 11:28:10][350178736649252][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:28:10][350178736649252][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 1932 4968 24819944 241696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:28:10][350178736649252][301 ms][DEBUG] targetPkg: running [2025-08-26 11:28:10][350178736649252][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 11:28:10][350178736649252][301 ms][DEBUG] START check_boot_completed [2025-08-26 11:28:10][350178736649252][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:28:10][350178736649252][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:28:10][350178736649252][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:28:10][350178736649252][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:28:10][350178736649252][394 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 11:28:10][350178736649252][394 ms][DEBUG] START check_internet [2025-08-26 11:28:10][350178736649252][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:28:10][350178736649252][597 ms][DEBUG] SU: done in 203 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=85.0 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 85.041/85.041/85.041/0.000 ms\n [2025-08-26 11:28:10][350178736649252][597 ms][DEBUG] check_internet: online [2025-08-26 11:28:10][350178736649252][597 ms][DEBUG] END check_internet in 203 ms [2025-08-26 11:28:10][350178736649252][597 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:28:10][350178736649252][598 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178736649252\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1214\"}'\'' -e'"" [2025-08-26 11:28:10][350178736649252][598 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:28:10][350178736649252][598 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178736649252\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1214\"}'\'' -e'"" [2025-08-26 11:28:14][350178736649252][4268 ms][DEBUG] proc_open done in 3670 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-26 11:28:14][350178736649252][4268 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-26 11:28:14][350178736649252][4268 ms][WARN] Detected error: Process with pid 1932 either refused to load frida-agent, or terminated during injection [2025-08-26 11:28:14][350178736649252][4268 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 11:28:14][350178736649252][4409 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 11:28:14][350178736649252][4409 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 11:28:14][350178736649252][4409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 11:28:14][350178736649252][4550 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 11:28:14][350178736649252][4550 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 11:28:14][350178736649252][4723 ms][DEBUG] SU: done in 173 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 11:28:16][350178736649252][6736 ms][DEBUG] START check_boot_completed [2025-08-26 11:28:16][350178736649252][6736 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:28:17][350178736649252][6783 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:28:17][350178736649252][6783 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:28:17][350178736649252][6830 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:28:17][350178736649252][6830 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 11:28:20][350178736649252][9845 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 11:28:20][350178736649252][9845 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178736649252\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1214\"}'\'' -e'"" [2025-08-26 11:28:23][350178736649252][13594 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2239aa8b-997e-4056-8271-0f6b87dea3c2","id":"QR_2239aa8b-997e-4056-8271-0f6b87dea3c2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:28:23][350178736649252][13750 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-26 11:28:23][350178736649252][13750 ms][DEBUG] END runCmdUntilRes#2 in 3905 ms [2025-08-26 11:28:23][350178736649252][13750 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:30:03][351234169392149][0 ms][INFO] === Request start === [2025-08-26 11:30:03][351234169392149][1 ms][DEBUG] START check_scloud [2025-08-26 11:30:03][351234169392149][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:30:04][351234169392149][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 3423 4968 23486196 127032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:30:04][351234169392149][312 ms][DEBUG] targetPkg: running [2025-08-26 11:30:04][351234169392149][312 ms][DEBUG] END check_scloud in 312 ms [2025-08-26 11:30:04][351234169392149][312 ms][DEBUG] START check_boot_completed [2025-08-26 11:30:04][351234169392149][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:30:04][351234169392149][343 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 11:30:04][351234169392149][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:30:04][351234169392149][392 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 11:30:04][351234169392149][392 ms][DEBUG] END check_boot_completed in 80 ms [2025-08-26 11:30:04][351234169392149][392 ms][DEBUG] START check_internet [2025-08-26 11:30:04][351234169392149][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:30:04][351234169392149][765 ms][DEBUG] SU: done in 373 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=99.1 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 99.154/99.154/99.154/0.000 ms\n [2025-08-26 11:30:04][351234169392149][765 ms][DEBUG] check_internet: online [2025-08-26 11:30:04][351234169392149][765 ms][DEBUG] END check_internet in 374 ms [2025-08-26 11:30:04][351234169392149][766 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:30:04][351234169392149][766 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234169392149\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4353\"}'\'' -e'"" [2025-08-26 11:30:04][351234169392149][766 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:30:04][351234169392149][766 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234169392149\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4353\"}'\'' -e'"" [2025-08-26 11:30:08][351234169392149][4592 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3dc45a3f-1ebb-4a80-b07a-38c18c056b58","id":"QR_3dc45a3f-1ebb-4a80-b07a-38c18c056b58","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:30:08][351234169392149][4749 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-26 11:30:08][351234169392149][4749 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-26 11:30:08][351234169392149][4749 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:31:03][350699188425560][1 ms][INFO] === Request start === [2025-08-26 11:31:03][350699188425560][1 ms][DEBUG] START check_scloud [2025-08-26 11:31:03][350699188425560][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:31:03][350699188425560][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 3423 4968 23646952 137828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:31:03][350699188425560][300 ms][DEBUG] targetPkg: running [2025-08-26 11:31:03][350699188425560][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-26 11:31:03][350699188425560][300 ms][DEBUG] START check_boot_completed [2025-08-26 11:31:03][350699188425560][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:31:03][350699188425560][345 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 11:31:03][350699188425560][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:31:03][350699188425560][393 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 11:31:03][350699188425560][393 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 11:31:03][350699188425560][394 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:31:03][350699188425560][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350699188425560\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8259\"}'\'' -e'"" [2025-08-26 11:31:03][350699188425560][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:31:03][350699188425560][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350699188425560\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8259\"}'\'' -e'"" [2025-08-26 11:31:06][350699188425560][3985 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ad738cdc-b646-4c3f-8e2d-f8d6dd6fce0f","id":"QR_ad738cdc-b646-4c3f-8e2d-f8d6dd6fce0f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:31:07][350699188425560][4141 ms][DEBUG] proc_open done in 3747 ms; code=255; res.len=3343 [2025-08-26 11:31:07][350699188425560][4141 ms][DEBUG] END runCmdUntilRes#1 in 3747 ms [2025-08-26 11:31:07][350699188425560][4141 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:31:09][354721982810650][0 ms][INFO] === Request start === [2025-08-26 11:31:09][354721982810650][1 ms][DEBUG] START check_scloud [2025-08-26 11:31:09][354721982810650][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:31:09][354721982810650][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 3423 4968 23803888 149424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:31:09][354721982810650][318 ms][DEBUG] targetPkg: running [2025-08-26 11:31:09][354721982810650][318 ms][DEBUG] END check_scloud in 318 ms [2025-08-26 11:31:09][354721982810650][318 ms][DEBUG] START check_boot_completed [2025-08-26 11:31:09][354721982810650][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:31:09][354721982810650][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:31:09][354721982810650][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:31:10][354721982810650][412 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:31:10][354721982810650][412 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 11:31:10][354721982810650][412 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:31:10][354721982810650][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354721982810650\",\"model\":\"SM-G781B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6148\"}'\'' -e'"" [2025-08-26 11:31:10][354721982810650][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:31:10][354721982810650][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354721982810650\",\"model\":\"SM-G781B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6148\"}'\'' -e'"" [2025-08-26 11:31:13][354721982810650][4067 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a3a79e04-a032-4f17-9c8a-20ecbb62aab9","id":"QR_a3a79e04-a032-4f17-9c8a-20ecbb62aab9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:31:13][354721982810650][4223 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-26 11:31:13][354721982810650][4223 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-26 11:31:13][354721982810650][4223 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:31:16][356413251321910][0 ms][INFO] === Request start === [2025-08-26 11:31:16][356413251321910][1 ms][DEBUG] START check_scloud [2025-08-26 11:31:16][356413251321910][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:31:16][356413251321910][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 3423 4968 23998548 160476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:31:16][356413251321910][317 ms][DEBUG] targetPkg: running [2025-08-26 11:31:16][356413251321910][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-26 11:31:16][356413251321910][317 ms][DEBUG] START check_boot_completed [2025-08-26 11:31:16][356413251321910][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:31:16][356413251321910][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:31:16][356413251321910][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:31:16][356413251321910][426 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 11:31:16][356413251321910][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 11:31:16][356413251321910][426 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:31:16][356413251321910][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356413251321910\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1453\"}'\'' -e'"" [2025-08-26 11:31:16][356413251321910][427 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:31:16][356413251321910][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356413251321910\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1453\"}'\'' -e'"" [2025-08-26 11:31:20][356413251321910][4003 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cdbcc12c-0c10-4140-8320-ee5323c767bd","id":"QR_cdbcc12c-0c10-4140-8320-ee5323c767bd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:31:20][356413251321910][4159 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-08-26 11:31:20][356413251321910][4159 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-08-26 11:31:20][356413251321910][4159 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:33:03][351521280446261][1 ms][INFO] === Request start === [2025-08-26 11:33:03][351521280446261][1 ms][DEBUG] START check_scloud [2025-08-26 11:33:03][351521280446261][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:33:04][351521280446261][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 3423 4968 24104176 171728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:33:04][351521280446261][302 ms][DEBUG] targetPkg: running [2025-08-26 11:33:04][351521280446261][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-26 11:33:04][351521280446261][302 ms][DEBUG] START check_boot_completed [2025-08-26 11:33:04][351521280446261][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:33:04][351521280446261][333 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 11:33:04][351521280446261][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:33:04][351521280446261][381 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 11:33:04][351521280446261][381 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 11:33:04][351521280446261][381 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:33:04][351521280446261][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351521280446261\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2564\"}'\'' -e'"" [2025-08-26 11:33:04][351521280446261][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:33:04][351521280446261][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351521280446261\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2564\"}'\'' -e'"" [2025-08-26 11:33:09][351521280446261][5113 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_11097022-d4f5-411a-870b-6a1c19f07698","id":"QR_11097022-d4f5-411a-870b-6a1c19f07698","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:33:09][351521280446261][5270 ms][DEBUG] proc_open done in 4888 ms; code=255; res.len=3343 [2025-08-26 11:33:09][351521280446261][5270 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-08-26 11:33:09][351521280446261][5270 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:33:11][352731456365059][0 ms][INFO] === Request start === [2025-08-26 11:33:11][352731456365059][0 ms][DEBUG] START check_scloud [2025-08-26 11:33:11][352731456365059][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:33:12][352731456365059][307 ms][DEBUG] SU: done in 307 ms; outu0_a118 3423 4968 24262260 183592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:33:12][352731456365059][307 ms][DEBUG] targetPkg: running [2025-08-26 11:33:12][352731456365059][307 ms][DEBUG] END check_scloud in 307 ms [2025-08-26 11:33:12][352731456365059][307 ms][DEBUG] START check_boot_completed [2025-08-26 11:33:12][352731456365059][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:33:12][352731456365059][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:33:12][352731456365059][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:33:12][352731456365059][416 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 11:33:12][352731456365059][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 11:33:12][352731456365059][416 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:33:12][352731456365059][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352731456365059\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9571\"}'\'' -e'"" [2025-08-26 11:33:12][352731456365059][417 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:33:12][352731456365059][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352731456365059\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9571\"}'\'' -e'"" [2025-08-26 11:33:15][352731456365059][3993 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5a793275-f234-47b7-9bab-0e237e405f12","id":"QR_5a793275-f234-47b7-9bab-0e237e405f12","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:33:15][352731456365059][4150 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-08-26 11:33:15][352731456365059][4150 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-08-26 11:33:15][352731456365059][4150 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:33:19][351632912616658][0 ms][INFO] === Request start === [2025-08-26 11:33:19][351632912616658][1 ms][DEBUG] START check_scloud [2025-08-26 11:33:19][351632912616658][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:33:19][351632912616658][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 3423 4968 24430460 194596 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:33:19][351632912616658][319 ms][DEBUG] targetPkg: running [2025-08-26 11:33:19][351632912616658][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-26 11:33:19][351632912616658][319 ms][DEBUG] START check_boot_completed [2025-08-26 11:33:19][351632912616658][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:33:19][351632912616658][366 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:33:19][351632912616658][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:33:19][351632912616658][412 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:33:19][351632912616658][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 11:33:19][351632912616658][412 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:33:19][351632912616658][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632912616658\",\"model\":\"SM-A136B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5736\"}'\'' -e'"" [2025-08-26 11:33:19][351632912616658][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:33:19][351632912616658][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632912616658\",\"model\":\"SM-A136B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5736\"}'\'' -e'"" [2025-08-26 11:33:23][351632912616658][3693 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 11:33:23][351632912616658][3849 ms][DEBUG] proc_open done in 3437 ms; code=255; res.len=107 [2025-08-26 11:33:23][351632912616658][3849 ms][DEBUG] END runCmdUntilRes#1 in 3437 ms [2025-08-26 11:33:23][351632912616658][3850 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 11:33:23][][0 ms][INFO] === Request start === [2025-08-26 11:33:23][][1 ms][DEBUG] START check_scloud [2025-08-26 11:33:23][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:33:23][][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 3423 4968 24615556 206492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:33:23][][253 ms][DEBUG] targetPkg: running [2025-08-26 11:33:23][][253 ms][DEBUG] END check_scloud in 253 ms [2025-08-26 11:33:23][][253 ms][DEBUG] START check_boot_completed [2025-08-26 11:33:23][][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:33:24][][300 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:33:24][][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:33:24][][347 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:33:24][][347 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 11:33:24][][347 ms][DEBUG] rawBody.length=1129 [2025-08-26 11:33:24][][347 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A136B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT71L07XP\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4227\"}'\'' -e'"" [2025-08-26 11:33:24][][347 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:33:24][][347 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A136B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT71L07XP\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4227\"}'\'' -e'"" [2025-08-26 11:33:27][][3611 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 11:33:27][][3768 ms][DEBUG] proc_open done in 3420 ms; code=255; res.len=107 [2025-08-26 11:33:27][][3768 ms][DEBUG] END runCmdUntilRes#1 in 3421 ms [2025-08-26 11:33:27][][3768 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 11:33:29][351632912616658][0 ms][INFO] === Request start === [2025-08-26 11:33:29][351632912616658][1 ms][DEBUG] START check_scloud [2025-08-26 11:33:29][351632912616658][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:33:29][351632912616658][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 3423 4968 24719208 217284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:33:29][351632912616658][307 ms][DEBUG] targetPkg: running [2025-08-26 11:33:29][351632912616658][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 11:33:29][351632912616658][307 ms][DEBUG] START check_boot_completed [2025-08-26 11:33:29][351632912616658][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:33:29][351632912616658][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:33:29][351632912616658][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:33:29][351632912616658][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:33:29][351632912616658][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 11:33:29][351632912616658][400 ms][DEBUG] rawBody.length=1149 [2025-08-26 11:33:29][351632912616658][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632912616658\",\"model\":\"SM-A136B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5160\"}'\'' -e'"" [2025-08-26 11:33:29][351632912616658][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:33:29][351632912616658][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632912616658\",\"model\":\"SM-A136B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5160\"}'\'' -e'"" [2025-08-26 11:33:34][351632912616658][5493 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bfafe697-0de4-4982-b9af-733d6e8321ee","id":"QR_bfafe697-0de4-4982-b9af-733d6e8321ee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:33:35][351632912616658][5649 ms][DEBUG] proc_open done in 5249 ms; code=255; res.len=3343 [2025-08-26 11:33:35][351632912616658][5649 ms][DEBUG] END runCmdUntilRes#1 in 5249 ms [2025-08-26 11:33:35][351632912616658][5649 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:34:03][350117932891573][0 ms][INFO] === Request start === [2025-08-26 11:34:03][350117932891573][1 ms][DEBUG] START check_scloud [2025-08-26 11:34:03][350117932891573][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:34:04][350117932891573][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 3423 4968 24800224 230056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:34:04][350117932891573][304 ms][DEBUG] targetPkg: running [2025-08-26 11:34:04][350117932891573][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-26 11:34:04][350117932891573][304 ms][DEBUG] START check_boot_completed [2025-08-26 11:34:04][350117932891573][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:34:04][350117932891573][335 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 11:34:04][350117932891573][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:34:04][350117932891573][382 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:34:04][350117932891573][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 11:34:04][350117932891573][382 ms][DEBUG] START check_internet [2025-08-26 11:34:04][350117932891573][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:34:04][350117932891573][695 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=99.2 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 99.262/99.262/99.262/0.000 ms\n [2025-08-26 11:34:04][350117932891573][695 ms][DEBUG] check_internet: online [2025-08-26 11:34:04][350117932891573][695 ms][DEBUG] END check_internet in 312 ms [2025-08-26 11:34:04][350117932891573][695 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:34:04][350117932891573][695 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350117932891573\",\"model\":\"SM-A217F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2450\"}'\'' -e'"" [2025-08-26 11:34:04][350117932891573][695 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:34:04][350117932891573][695 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350117932891573\",\"model\":\"SM-A217F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2450\"}'\'' -e'"" [2025-08-26 11:34:08][350117932891573][4350 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e39a64f2-9129-4958-882b-254df64c9a82","id":"QR_e39a64f2-9129-4958-882b-254df64c9a82","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:34:08][350117932891573][4506 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-26 11:34:08][350117932891573][4506 ms][DEBUG] END runCmdUntilRes#1 in 3812 ms [2025-08-26 11:34:08][350117932891573][4506 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:34:10][352859300524074][0 ms][INFO] === Request start === [2025-08-26 11:34:10][352859300524074][1 ms][DEBUG] START check_scloud [2025-08-26 11:34:10][352859300524074][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:34:11][352859300524074][267 ms][DEBUG] SU: done in 267 ms; outu0_a118 3423 4968 24977640 241828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:34:11][352859300524074][268 ms][DEBUG] targetPkg: running [2025-08-26 11:34:11][352859300524074][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-26 11:34:11][352859300524074][268 ms][DEBUG] START check_boot_completed [2025-08-26 11:34:11][352859300524074][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:34:11][352859300524074][312 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 11:34:11][352859300524074][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:34:11][352859300524074][359 ms][DEBUG] SU: done in 46 ms; out [2025-08-26 11:34:11][352859300524074][359 ms][DEBUG] END check_boot_completed in 91 ms [2025-08-26 11:34:11][352859300524074][359 ms][DEBUG] START check_internet [2025-08-26 11:34:11][352859300524074][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:34:11][352859300524074][578 ms][DEBUG] SU: done in 219 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=113 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 113.593/113.593/113.593/0.000 ms\n [2025-08-26 11:34:11][352859300524074][578 ms][DEBUG] check_internet: online [2025-08-26 11:34:11][352859300524074][578 ms][DEBUG] END check_internet in 219 ms [2025-08-26 11:34:11][352859300524074][578 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:34:11][352859300524074][578 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352859300524074\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2524\"}'\'' -e'"" [2025-08-26 11:34:11][352859300524074][578 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:34:11][352859300524074][578 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352859300524074\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2524\"}'\'' -e'"" [2025-08-26 11:34:15][352859300524074][4202 ms][DEBUG] proc_open done in 3624 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-26 11:34:15][352859300524074][4202 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-08-26 11:34:15][352859300524074][4202 ms][WARN] Detected error: Process with pid 3423 either refused to load frida-agent, or terminated during injection [2025-08-26 11:34:15][352859300524074][4203 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 11:34:15][352859300524074][4374 ms][DEBUG] SU: done in 171 ms; out [2025-08-26 11:34:15][352859300524074][4374 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 11:34:15][352859300524074][4374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 11:34:15][352859300524074][4515 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 11:34:15][352859300524074][4515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 11:34:15][352859300524074][4671 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 11:34:17][352859300524074][6686 ms][DEBUG] START check_boot_completed [2025-08-26 11:34:17][352859300524074][6686 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:34:17][352859300524074][6733 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:34:17][352859300524074][6733 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:34:17][352859300524074][6795 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 11:34:17][352859300524074][6795 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 11:34:20][352859300524074][9810 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 11:34:20][352859300524074][9810 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352859300524074\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2524\"}'\'' -e'"" [2025-08-26 11:34:24][352859300524074][13590 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_258465b1-64db-4cef-988e-a7a52a50c9d2","id":"QR_258465b1-64db-4cef-988e-a7a52a50c9d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:34:24][352859300524074][13747 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-26 11:34:24][352859300524074][13747 ms][DEBUG] END runCmdUntilRes#2 in 3937 ms [2025-08-26 11:34:24][352859300524074][13747 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:34:27][353074285770515][0 ms][INFO] === Request start === [2025-08-26 11:34:27][353074285770515][1 ms][DEBUG] START check_scloud [2025-08-26 11:34:27][353074285770515][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:34:27][353074285770515][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 4682 4968 23524480 125032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:34:27][353074285770515][258 ms][DEBUG] targetPkg: running [2025-08-26 11:34:27][353074285770515][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-26 11:34:27][353074285770515][258 ms][DEBUG] START check_boot_completed [2025-08-26 11:34:27][353074285770515][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:34:27][353074285770515][304 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:34:27][353074285770515][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:34:27][353074285770515][351 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:34:27][353074285770515][351 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 11:34:27][353074285770515][351 ms][DEBUG] START check_internet [2025-08-26 11:34:27][353074285770515][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:34:27][353074285770515][663 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=195 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 195.053/195.053/195.053/0.000 ms\n [2025-08-26 11:34:27][353074285770515][663 ms][DEBUG] check_internet: online [2025-08-26 11:34:27][353074285770515][663 ms][DEBUG] END check_internet in 312 ms [2025-08-26 11:34:27][353074285770515][663 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:34:27][353074285770515][664 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074285770515\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7917\"}'\'' -e'"" [2025-08-26 11:34:27][353074285770515][664 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:34:27][353074285770515][664 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074285770515\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7917\"}'\'' -e'"" [2025-08-26 11:34:31][353074285770515][4162 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_698160d4-5b27-47a4-86dd-5cd326ccee1a","id":"QR_698160d4-5b27-47a4-86dd-5cd326ccee1a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:34:31][353074285770515][4319 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=3343 [2025-08-26 11:34:31][353074285770515][4319 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-26 11:34:31][353074285770515][4319 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:34:33][353372915294504][0 ms][INFO] === Request start === [2025-08-26 11:34:33][353372915294504][1 ms][DEBUG] START check_scloud [2025-08-26 11:34:33][353372915294504][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:34:34][353372915294504][241 ms][DEBUG] SU: done in 240 ms; outu0_a118 4682 4968 23728532 138812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:34:34][353372915294504][241 ms][DEBUG] targetPkg: running [2025-08-26 11:34:34][353372915294504][241 ms][DEBUG] END check_scloud in 241 ms [2025-08-26 11:34:34][353372915294504][241 ms][DEBUG] START check_boot_completed [2025-08-26 11:34:34][353372915294504][242 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:34:34][353372915294504][287 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 11:34:34][353372915294504][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:34:34][353372915294504][334 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:34:34][353372915294504][334 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-26 11:34:34][353372915294504][334 ms][DEBUG] START check_internet [2025-08-26 11:34:34][353372915294504][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:34:34][353372915294504][599 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=182 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 182.974/182.974/182.974/0.000 ms\n [2025-08-26 11:34:34][353372915294504][599 ms][DEBUG] check_internet: online [2025-08-26 11:34:34][353372915294504][599 ms][DEBUG] END check_internet in 266 ms [2025-08-26 11:34:34][353372915294504][599 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:34:34][353372915294504][599 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372915294504\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2209\"}'\'' -e'"" [2025-08-26 11:34:34][353372915294504][599 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:34:34][353372915294504][599 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372915294504\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2209\"}'\'' -e'"" [2025-08-26 11:34:37][353372915294504][4083 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5d7327b1-962f-4a6c-a964-aba3ae568ca6","id":"QR_5d7327b1-962f-4a6c-a964-aba3ae568ca6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:34:38][353372915294504][4239 ms][DEBUG] proc_open done in 3640 ms; code=255; res.len=3343 [2025-08-26 11:34:38][353372915294504][4239 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-08-26 11:34:38][353372915294504][4239 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:35:03][354321590538981][0 ms][INFO] === Request start === [2025-08-26 11:35:03][354321590538981][1 ms][DEBUG] START check_scloud [2025-08-26 11:35:03][354321590538981][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:35:04][354321590538981][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 4682 4968 23772224 151240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:35:04][354321590538981][303 ms][DEBUG] targetPkg: running [2025-08-26 11:35:04][354321590538981][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 11:35:04][354321590538981][303 ms][DEBUG] START check_boot_completed [2025-08-26 11:35:04][354321590538981][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:35:04][354321590538981][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:35:04][354321590538981][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:35:04][354321590538981][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:35:04][354321590538981][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 11:35:04][354321590538981][396 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:35:04][354321590538981][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354321590538981\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2561\"}'\'' -e'"" [2025-08-26 11:35:04][354321590538981][396 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:35:04][354321590538981][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354321590538981\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2561\"}'\'' -e'"" [2025-08-26 11:35:07][354321590538981][3895 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_592af5b3-1694-45ff-a4aa-7898ec0107da","id":"QR_592af5b3-1694-45ff-a4aa-7898ec0107da","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:35:07][354321590538981][4051 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=3343 [2025-08-26 11:35:07][354321590538981][4051 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-26 11:35:07][354321590538981][4051 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:35:10][354626221059094][1 ms][INFO] === Request start === [2025-08-26 11:35:10][354626221059094][1 ms][DEBUG] START check_scloud [2025-08-26 11:35:10][354626221059094][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:35:10][354626221059094][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 4682 4968 23898120 161956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:35:10][354626221059094][312 ms][DEBUG] targetPkg: running [2025-08-26 11:35:10][354626221059094][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-26 11:35:10][354626221059094][312 ms][DEBUG] START check_boot_completed [2025-08-26 11:35:10][354626221059094][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:35:10][354626221059094][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:35:10][354626221059094][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:35:10][354626221059094][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 11:35:10][354626221059094][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 11:35:10][354626221059094][422 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:35:10][354626221059094][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626221059094\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7419\"}'\'' -e'"" [2025-08-26 11:35:10][354626221059094][422 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:35:10][354626221059094][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626221059094\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7419\"}'\'' -e'"" [2025-08-26 11:35:14][354626221059094][3967 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4a23f6b1-fe3c-45ce-8df2-feeddde152c6","id":"QR_4a23f6b1-fe3c-45ce-8df2-feeddde152c6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:35:14][354626221059094][4123 ms][DEBUG] proc_open done in 3701 ms; code=255; res.len=3343 [2025-08-26 11:35:14][354626221059094][4124 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-26 11:35:14][354626221059094][4124 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:35:17][355088506664404][0 ms][INFO] === Request start === [2025-08-26 11:35:17][355088506664404][1 ms][DEBUG] START check_scloud [2025-08-26 11:35:17][355088506664404][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:35:17][355088506664404][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 4682 4968 24108232 172204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:35:17][355088506664404][291 ms][DEBUG] targetPkg: running [2025-08-26 11:35:17][355088506664404][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-26 11:35:17][355088506664404][291 ms][DEBUG] START check_boot_completed [2025-08-26 11:35:17][355088506664404][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:35:17][355088506664404][337 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:35:17][355088506664404][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:35:17][355088506664404][400 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 11:35:17][355088506664404][400 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 11:35:17][355088506664404][400 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:35:17][355088506664404][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355088506664404\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9681\"}'\'' -e'"" [2025-08-26 11:35:17][355088506664404][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:35:17][355088506664404][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355088506664404\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9681\"}'\'' -e'"" [2025-08-26 11:35:21][355088506664404][4055 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1be7973d-4bd7-476c-8a15-2b1e9a9bbb59","id":"QR_1be7973d-4bd7-476c-8a15-2b1e9a9bbb59","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:35:21][355088506664404][4211 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-26 11:35:21][355088506664404][4211 ms][DEBUG] END runCmdUntilRes#1 in 3812 ms [2025-08-26 11:35:21][355088506664404][4211 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:35:23][355320540803106][1 ms][INFO] === Request start === [2025-08-26 11:35:23][355320540803106][1 ms][DEBUG] START check_scloud [2025-08-26 11:35:23][355320540803106][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:35:23][355320540803106][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 4682 4968 24211756 183824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:35:23][355320540803106][301 ms][DEBUG] targetPkg: running [2025-08-26 11:35:23][355320540803106][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 11:35:23][355320540803106][301 ms][DEBUG] START check_boot_completed [2025-08-26 11:35:23][355320540803106][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:35:24][355320540803106][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:35:24][355320540803106][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:35:24][355320540803106][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:35:24][355320540803106][394 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 11:35:24][355320540803106][394 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:35:24][355320540803106][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355320540803106\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6232\"}'\'' -e'"" [2025-08-26 11:35:24][355320540803106][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:35:24][355320540803106][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355320540803106\",\"model\":\"SM-G991B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6232\"}'\'' -e'"" [2025-08-26 11:35:27][355320540803106][4268 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a93af71f-3a1d-4f52-b5b0-293113fb84b5","id":"QR_a93af71f-3a1d-4f52-b5b0-293113fb84b5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:35:28][355320540803106][4424 ms][DEBUG] proc_open done in 4029 ms; code=255; res.len=3343 [2025-08-26 11:35:28][355320540803106][4424 ms][DEBUG] END runCmdUntilRes#1 in 4029 ms [2025-08-26 11:35:28][355320540803106][4424 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:35:30][355416334333894][0 ms][INFO] === Request start === [2025-08-26 11:35:30][355416334333894][1 ms][DEBUG] START check_scloud [2025-08-26 11:35:30][355416334333894][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:35:30][355416334333894][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 4682 4968 24368656 194888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:35:30][355416334333894][256 ms][DEBUG] targetPkg: running [2025-08-26 11:35:30][355416334333894][256 ms][DEBUG] END check_scloud in 255 ms [2025-08-26 11:35:30][355416334333894][256 ms][DEBUG] START check_boot_completed [2025-08-26 11:35:30][355416334333894][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:35:30][355416334333894][303 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:35:30][355416334333894][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:35:30][355416334333894][351 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 11:35:30][355416334333894][351 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 11:35:30][355416334333894][351 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:35:30][355416334333894][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355416334333894\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5337\"}'\'' -e'"" [2025-08-26 11:35:30][355416334333894][351 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:35:30][355416334333894][351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355416334333894\",\"model\":\"SM-S901B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5337\"}'\'' -e'"" [2025-08-26 11:35:34][355416334333894][3770 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a4b32648-3ec6-4d55-8aaa-b0f7255c5352","id":"QR_a4b32648-3ec6-4d55-8aaa-b0f7255c5352","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:35:34][355416334333894][3926 ms][DEBUG] proc_open done in 3575 ms; code=255; res.len=3343 [2025-08-26 11:35:34][355416334333894][3926 ms][DEBUG] END runCmdUntilRes#1 in 3575 ms [2025-08-26 11:35:34][355416334333894][3927 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:36:03][350362537007494][0 ms][INFO] === Request start === [2025-08-26 11:36:03][350362537007494][1 ms][DEBUG] START check_scloud [2025-08-26 11:36:03][350362537007494][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:36:04][350362537007494][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 4682 4968 24494444 206812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:36:04][350362537007494][297 ms][DEBUG] targetPkg: running [2025-08-26 11:36:04][350362537007494][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-26 11:36:04][350362537007494][297 ms][DEBUG] START check_boot_completed [2025-08-26 11:36:04][350362537007494][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:36:04][350362537007494][343 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:36:04][350362537007494][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:36:04][350362537007494][392 ms][DEBUG] SU: done in 49 ms; out [2025-08-26 11:36:04][350362537007494][392 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 11:36:04][350362537007494][392 ms][DEBUG] START check_internet [2025-08-26 11:36:04][350362537007494][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:36:04][350362537007494][735 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.233/200.233/200.233/0.000 ms\n [2025-08-26 11:36:04][350362537007494][735 ms][DEBUG] check_internet: online [2025-08-26 11:36:04][350362537007494][735 ms][DEBUG] END check_internet in 343 ms [2025-08-26 11:36:04][350362537007494][735 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:36:04][350362537007494][735 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350362537007494\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2863\"}'\'' -e'"" [2025-08-26 11:36:04][350362537007494][735 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:36:04][350362537007494][735 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350362537007494\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2863\"}'\'' -e'"" [2025-08-26 11:36:08][350362537007494][4405 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_42bd9a39-f955-47dc-b02e-f261ab09c58d","id":"QR_42bd9a39-f955-47dc-b02e-f261ab09c58d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:36:08][350362537007494][4561 ms][DEBUG] proc_open done in 3826 ms; code=255; res.len=3343 [2025-08-26 11:36:08][350362537007494][4561 ms][DEBUG] END runCmdUntilRes#1 in 3826 ms [2025-08-26 11:36:08][350362537007494][4561 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:36:10][350488330443899][0 ms][INFO] === Request start === [2025-08-26 11:36:10][350488330443899][1 ms][DEBUG] START check_scloud [2025-08-26 11:36:10][350488330443899][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:36:11][350488330443899][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 4682 4968 24673268 217916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:36:11][350488330443899][293 ms][DEBUG] targetPkg: running [2025-08-26 11:36:11][350488330443899][293 ms][DEBUG] END check_scloud in 292 ms [2025-08-26 11:36:11][350488330443899][293 ms][DEBUG] START check_boot_completed [2025-08-26 11:36:11][350488330443899][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:36:11][350488330443899][339 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:36:11][350488330443899][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:36:11][350488330443899][402 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 11:36:11][350488330443899][402 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 11:36:11][350488330443899][402 ms][DEBUG] START check_internet [2025-08-26 11:36:11][350488330443899][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:36:11][350488330443899][730 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=176 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 176.540/176.540/176.540/0.000 ms\n [2025-08-26 11:36:11][350488330443899][730 ms][DEBUG] check_internet: online [2025-08-26 11:36:11][350488330443899][730 ms][DEBUG] END check_internet in 328 ms [2025-08-26 11:36:11][350488330443899][731 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:36:11][350488330443899][731 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350488330443899\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5595\"}'\'' -e'"" [2025-08-26 11:36:11][350488330443899][731 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:36:11][350488330443899][731 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350488330443899\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5595\"}'\'' -e'"" [2025-08-26 11:36:15][350488330443899][4245 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_49c1baa1-0b36-4288-8cf9-43951e6ec1a5","id":"QR_49c1baa1-0b36-4288-8cf9-43951e6ec1a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:36:15][350488330443899][4401 ms][DEBUG] proc_open done in 3670 ms; code=255; res.len=3343 [2025-08-26 11:36:15][350488330443899][4401 ms][DEBUG] END runCmdUntilRes#1 in 3670 ms [2025-08-26 11:36:15][350488330443899][4401 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:37:03][351494693436131][0 ms][INFO] === Request start === [2025-08-26 11:37:03][351494693436131][1 ms][DEBUG] START check_scloud [2025-08-26 11:37:03][351494693436131][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:37:04][351494693436131][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 4682 4968 24742892 229364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:37:04][351494693436131][293 ms][DEBUG] targetPkg: running [2025-08-26 11:37:04][351494693436131][293 ms][DEBUG] END check_scloud in 292 ms [2025-08-26 11:37:04][351494693436131][293 ms][DEBUG] START check_boot_completed [2025-08-26 11:37:04][351494693436131][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:37:04][351494693436131][339 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:37:04][351494693436131][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:37:04][351494693436131][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:37:04][351494693436131][386 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 11:37:04][351494693436131][386 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:37:04][351494693436131][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351494693436131\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3375\"}'\'' -e'"" [2025-08-26 11:37:04][351494693436131][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:37:04][351494693436131][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351494693436131\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3375\"}'\'' -e'"" [2025-08-26 11:37:08][351494693436131][4401 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_410935ef-f4b3-4efe-8a62-1a51ad9cd75a","id":"QR_410935ef-f4b3-4efe-8a62-1a51ad9cd75a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:37:08][351494693436131][4557 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3343 [2025-08-26 11:37:08][351494693436131][4557 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-08-26 11:37:08][351494693436131][4557 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:40:05][352429896231946][1 ms][INFO] === Request start === [2025-08-26 11:40:05][352429896231946][1 ms][DEBUG] START check_scloud [2025-08-26 11:40:05][352429896231946][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:40:05][352429896231946][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 4682 4968 24848592 240588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:40:05][352429896231946][306 ms][DEBUG] targetPkg: running [2025-08-26 11:40:05][352429896231946][306 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 11:40:05][352429896231946][306 ms][DEBUG] START check_boot_completed [2025-08-26 11:40:05][352429896231946][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:40:05][352429896231946][337 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 11:40:05][352429896231946][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:40:05][352429896231946][384 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 11:40:05][352429896231946][384 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 11:40:05][352429896231946][384 ms][DEBUG] START check_internet [2025-08-26 11:40:05][352429896231946][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:40:06][352429896231946][884 ms][DEBUG] SU: done in 499 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.042/202.042/202.042/0.000 ms\n [2025-08-26 11:40:06][352429896231946][884 ms][DEBUG] check_internet: online [2025-08-26 11:40:06][352429896231946][884 ms][DEBUG] END check_internet in 499 ms [2025-08-26 11:40:06][352429896231946][884 ms][DEBUG] rawBody.length=1149 [2025-08-26 11:40:06][352429896231946][884 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352429896231946\",\"model\":\"SM-A336M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5170\"}'\'' -e'"" [2025-08-26 11:40:06][352429896231946][884 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:40:06][352429896231946][884 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352429896231946\",\"model\":\"SM-A336M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5170\"}'\'' -e'"" [2025-08-26 11:40:09][352429896231946][4570 ms][DEBUG] proc_open done in 3686 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-26 11:40:09][352429896231946][4570 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-08-26 11:40:09][352429896231946][4571 ms][WARN] Detected error: Process with pid 4682 either refused to load frida-agent, or terminated during injection [2025-08-26 11:40:09][352429896231946][4571 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 11:40:10][352429896231946][4742 ms][DEBUG] SU: done in 172 ms; out [2025-08-26 11:40:10][352429896231946][4742 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 11:40:10][352429896231946][4742 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 11:40:10][352429896231946][4898 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 11:40:10][352429896231946][4898 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 11:40:10][352429896231946][5039 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 11:40:12][352429896231946][7054 ms][DEBUG] START check_boot_completed [2025-08-26 11:40:12][352429896231946][7054 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:40:12][352429896231946][7101 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:40:12][352429896231946][7101 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:40:12][352429896231946][7148 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:40:12][352429896231946][7148 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 11:40:15][352429896231946][10162 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 11:40:15][352429896231946][10163 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352429896231946\",\"model\":\"SM-A336M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5170\"}'\'' -e'"" [2025-08-26 11:40:20][352429896231946][15083 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4982e4f2-7bba-4310-8b46-1d947e208f13","id":"QR_4982e4f2-7bba-4310-8b46-1d947e208f13","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:40:20][352429896231946][15239 ms][DEBUG] proc_open done in 5077 ms; code=255; res.len=3343 [2025-08-26 11:40:20][352429896231946][15240 ms][DEBUG] END runCmdUntilRes#2 in 5077 ms [2025-08-26 11:40:20][352429896231946][15240 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:40:25][354529383055696][0 ms][INFO] === Request start === [2025-08-26 11:40:25][354529383055696][1 ms][DEBUG] START check_scloud [2025-08-26 11:40:25][354529383055696][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:40:25][354529383055696][242 ms][DEBUG] SU: done in 241 ms; outu0_a118 6935 4968 23571640 124624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:40:25][354529383055696][242 ms][DEBUG] targetPkg: running [2025-08-26 11:40:25][354529383055696][242 ms][DEBUG] END check_scloud in 241 ms [2025-08-26 11:40:25][354529383055696][242 ms][DEBUG] START check_boot_completed [2025-08-26 11:40:25][354529383055696][242 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:40:25][354529383055696][288 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:40:25][354529383055696][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:40:25][354529383055696][335 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:40:25][354529383055696][335 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 11:40:25][354529383055696][335 ms][DEBUG] START check_internet [2025-08-26 11:40:25][354529383055696][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:40:26][354529383055696][663 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=231 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 231.346/231.346/231.346/0.000 ms\n [2025-08-26 11:40:26][354529383055696][663 ms][DEBUG] check_internet: online [2025-08-26 11:40:26][354529383055696][663 ms][DEBUG] END check_internet in 328 ms [2025-08-26 11:40:26][354529383055696][663 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:40:26][354529383055696][663 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529383055696\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6533\"}'\'' -e'"" [2025-08-26 11:40:26][354529383055696][663 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:40:26][354529383055696][663 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529383055696\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6533\"}'\'' -e'"" [2025-08-26 11:40:30][354529383055696][4490 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77b82e8f-892d-4980-b72f-e629710ef761","id":"QR_77b82e8f-892d-4980-b72f-e629710ef761","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:40:30][354529383055696][4646 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-26 11:40:30][354529383055696][4646 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-26 11:40:30][354529383055696][4647 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:40:32][354595806725496][0 ms][INFO] === Request start === [2025-08-26 11:40:32][354595806725496][1 ms][DEBUG] START check_scloud [2025-08-26 11:40:32][354595806725496][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:40:32][354595806725496][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 6935 4968 23717260 137788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:40:32][354595806725496][260 ms][DEBUG] targetPkg: running [2025-08-26 11:40:32][354595806725496][260 ms][DEBUG] END check_scloud in 260 ms [2025-08-26 11:40:32][354595806725496][260 ms][DEBUG] START check_boot_completed [2025-08-26 11:40:32][354595806725496][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:40:32][354595806725496][292 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 11:40:32][354595806725496][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:40:32][354595806725496][354 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 11:40:32][354595806725496][354 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 11:40:32][354595806725496][354 ms][DEBUG] START check_internet [2025-08-26 11:40:32][354595806725496][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:40:33][354595806725496][605 ms][DEBUG] SU: done in 251 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=112 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 112.314/112.314/112.314/0.000 ms\n [2025-08-26 11:40:33][354595806725496][605 ms][DEBUG] check_internet: online [2025-08-26 11:40:33][354595806725496][605 ms][DEBUG] END check_internet in 251 ms [2025-08-26 11:40:33][354595806725496][605 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:40:33][354595806725496][605 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354595806725496\",\"model\":\"SM-M336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6060\"}'\'' -e'"" [2025-08-26 11:40:33][354595806725496][605 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:40:33][354595806725496][605 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354595806725496\",\"model\":\"SM-M336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6060\"}'\'' -e'"" [2025-08-26 11:40:36][354595806725496][4103 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c718df51-77e9-4585-a388-e71e494a5c96","id":"QR_c718df51-77e9-4585-a388-e71e494a5c96","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:40:36][354595806725496][4259 ms][DEBUG] proc_open done in 3654 ms; code=255; res.len=3343 [2025-08-26 11:40:36][354595806725496][4259 ms][DEBUG] END runCmdUntilRes#1 in 3654 ms [2025-08-26 11:40:36][354595806725496][4259 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:42:03][352838656438931][0 ms][INFO] === Request start === [2025-08-26 11:42:03][352838656438931][1 ms][DEBUG] START check_scloud [2025-08-26 11:42:03][352838656438931][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:42:03][352838656438931][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 6935 4968 23779448 149644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:42:03][352838656438931][312 ms][DEBUG] targetPkg: running [2025-08-26 11:42:03][352838656438931][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-26 11:42:03][352838656438931][312 ms][DEBUG] START check_boot_completed [2025-08-26 11:42:03][352838656438931][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:42:03][352838656438931][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:42:03][352838656438931][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:42:03][352838656438931][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:42:03][352838656438931][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 11:42:03][352838656438931][405 ms][DEBUG] START check_internet [2025-08-26 11:42:03][352838656438931][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:42:03][352838656438931][672 ms][DEBUG] SU: done in 267 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=161 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 161.935/161.935/161.935/0.000 ms\n [2025-08-26 11:42:03][352838656438931][672 ms][DEBUG] check_internet: online [2025-08-26 11:42:03][352838656438931][673 ms][DEBUG] END check_internet in 267 ms [2025-08-26 11:42:03][352838656438931][673 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:42:03][352838656438931][673 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838656438931\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3193\"}'\'' -e'"" [2025-08-26 11:42:03][352838656438931][673 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:42:03][352838656438931][673 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838656438931\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3193\"}'\'' -e'"" [2025-08-26 11:42:07][352838656438931][4420 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f6ce3efa-5fb3-4f17-9dd9-e14eae6af11b","id":"QR_f6ce3efa-5fb3-4f17-9dd9-e14eae6af11b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:42:07][352838656438931][4576 ms][DEBUG] proc_open done in 3903 ms; code=255; res.len=3343 [2025-08-26 11:42:07][352838656438931][4576 ms][DEBUG] END runCmdUntilRes#1 in 3903 ms [2025-08-26 11:42:07][352838656438931][4576 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:43:03][352288962215732][1 ms][INFO] === Request start === [2025-08-26 11:43:03][352288962215732][1 ms][DEBUG] START check_scloud [2025-08-26 11:43:03][352288962215732][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:43:04][352288962215732][281 ms][DEBUG] SU: done in 279 ms; outu0_a118 6935 4968 23930512 160776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:43:04][352288962215732][281 ms][DEBUG] targetPkg: running [2025-08-26 11:43:04][352288962215732][281 ms][DEBUG] END check_scloud in 280 ms [2025-08-26 11:43:04][352288962215732][281 ms][DEBUG] START check_boot_completed [2025-08-26 11:43:04][352288962215732][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:43:04][352288962215732][327 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:43:04][352288962215732][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:43:04][352288962215732][374 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:43:04][352288962215732][374 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 11:43:04][352288962215732][374 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:43:04][352288962215732][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288962215732\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9056\"}'\'' -e'"" [2025-08-26 11:43:04][352288962215732][374 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:43:04][352288962215732][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288962215732\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9056\"}'\'' -e'"" [2025-08-26 11:43:07][352288962215732][4076 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a9a799de-5bb2-45e9-adb2-5a272bc1b984","id":"QR_a9a799de-5bb2-45e9-adb2-5a272bc1b984","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:43:08][352288962215732][4233 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-26 11:43:08][352288962215732][4233 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-26 11:43:08][352288962215732][4233 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:43:10][355506802154895][0 ms][INFO] === Request start === [2025-08-26 11:43:10][355506802154895][1 ms][DEBUG] START check_scloud [2025-08-26 11:43:10][355506802154895][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:43:10][355506802154895][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 6935 4968 24062808 172564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:43:10][355506802154895][298 ms][DEBUG] targetPkg: running [2025-08-26 11:43:10][355506802154895][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-26 11:43:10][355506802154895][298 ms][DEBUG] START check_boot_completed [2025-08-26 11:43:10][355506802154895][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:43:10][355506802154895][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:43:10][355506802154895][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:43:10][355506802154895][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:43:10][355506802154895][392 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 11:43:10][355506802154895][392 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:43:10][355506802154895][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506802154895\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6727\"}'\'' -e'"" [2025-08-26 11:43:10][355506802154895][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:43:10][355506802154895][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506802154895\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6727\"}'\'' -e'"" [2025-08-26 11:43:14][355506802154895][4281 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0c6c651d-e5d1-4ee1-8e16-fd8d99e2def5","id":"QR_0c6c651d-e5d1-4ee1-8e16-fd8d99e2def5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:43:15][355506802154895][4437 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-08-26 11:43:15][355506802154895][4437 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-08-26 11:43:15][355506802154895][4438 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:44:02][354306210015999][0 ms][INFO] === Request start === [2025-08-26 11:44:02][354306210015999][1 ms][DEBUG] START check_scloud [2025-08-26 11:44:02][354306210015999][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:44:03][354306210015999][331 ms][DEBUG] SU: done in 330 ms; outu0_a118 6935 4968 24164312 183676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:44:03][354306210015999][331 ms][DEBUG] targetPkg: running [2025-08-26 11:44:03][354306210015999][331 ms][DEBUG] END check_scloud in 330 ms [2025-08-26 11:44:03][354306210015999][331 ms][DEBUG] START check_boot_completed [2025-08-26 11:44:03][354306210015999][331 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:44:03][354306210015999][377 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:44:03][354306210015999][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:44:03][354306210015999][440 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 11:44:03][354306210015999][440 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 11:44:03][354306210015999][440 ms][DEBUG] START check_internet [2025-08-26 11:44:03][354306210015999][440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:44:03][354306210015999][909 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.756/201.756/201.756/0.000 ms\n [2025-08-26 11:44:03][354306210015999][909 ms][DEBUG] check_internet: online [2025-08-26 11:44:03][354306210015999][909 ms][DEBUG] END check_internet in 469 ms [2025-08-26 11:44:03][354306210015999][909 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:44:03][354306210015999][909 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354306210015999\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3262\"}'\'' -e'"" [2025-08-26 11:44:03][354306210015999][909 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:44:03][354306210015999][909 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354306210015999\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3262\"}'\'' -e'"" [2025-08-26 11:44:07][354306210015999][5079 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_682ca047-7984-4fdd-821d-cbea3ac369f1","id":"QR_682ca047-7984-4fdd-821d-cbea3ac369f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:44:08][354306210015999][5235 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=3343 [2025-08-26 11:44:08][354306210015999][5236 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-26 11:44:08][354306210015999][5236 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:44:10][359797458634811][0 ms][INFO] === Request start === [2025-08-26 11:44:10][359797458634811][1 ms][DEBUG] START check_scloud [2025-08-26 11:44:10][359797458634811][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:44:11][359797458634811][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 6935 4968 24313056 196072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:44:11][359797458634811][259 ms][DEBUG] targetPkg: running [2025-08-26 11:44:11][359797458634811][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-26 11:44:11][359797458634811][259 ms][DEBUG] START check_boot_completed [2025-08-26 11:44:11][359797458634811][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:44:11][359797458634811][289 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 11:44:11][359797458634811][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:44:11][359797458634811][336 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:44:11][359797458634811][337 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 11:44:11][359797458634811][337 ms][DEBUG] START check_internet [2025-08-26 11:44:11][359797458634811][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:44:11][359797458634811][666 ms][DEBUG] SU: done in 329 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.216/223.216/223.216/0.000 ms\n [2025-08-26 11:44:11][359797458634811][666 ms][DEBUG] check_internet: online [2025-08-26 11:44:11][359797458634811][666 ms][DEBUG] END check_internet in 329 ms [2025-08-26 11:44:11][359797458634811][666 ms][DEBUG] rawBody.length=1149 [2025-08-26 11:44:11][359797458634811][666 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359797458634811\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1965\"}'\'' -e'"" [2025-08-26 11:44:11][359797458634811][666 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:44:11][359797458634811][666 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359797458634811\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1965\"}'\'' -e'"" [2025-08-26 11:44:16][359797458634811][5679 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0046a7b-9572-4089-8e48-3795162f4f78","id":"QR_b0046a7b-9572-4089-8e48-3795162f4f78","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:44:16][359797458634811][5835 ms][DEBUG] proc_open done in 5168 ms; code=255; res.len=3343 [2025-08-26 11:44:16][359797458634811][5835 ms][DEBUG] END runCmdUntilRes#1 in 5169 ms [2025-08-26 11:44:16][359797458634811][5835 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:45:04][355731678743791][1 ms][INFO] === Request start === [2025-08-26 11:45:04][355731678743791][1 ms][DEBUG] START check_scloud [2025-08-26 11:45:04][355731678743791][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:45:04][355731678743791][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 6935 4968 24412576 202896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:45:04][355731678743791][312 ms][DEBUG] targetPkg: running [2025-08-26 11:45:04][355731678743791][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-26 11:45:04][355731678743791][312 ms][DEBUG] START check_boot_completed [2025-08-26 11:45:04][355731678743791][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:45:04][355731678743791][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:45:04][355731678743791][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:45:04][355731678743791][420 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 11:45:04][355731678743791][420 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-26 11:45:04][355731678743791][421 ms][DEBUG] rawBody.length=1149 [2025-08-26 11:45:04][355731678743791][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731678743791\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6440\"}'\'' -e'"" [2025-08-26 11:45:04][355731678743791][421 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:45:04][355731678743791][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731678743791\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6440\"}'\'' -e'"" [2025-08-26 11:45:09][355731678743791][5450 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_71127668-6972-4c8e-ae3d-dcff2e0d880a","id":"QR_71127668-6972-4c8e-ae3d-dcff2e0d880a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:45:10][355731678743791][5606 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-08-26 11:45:10][355731678743791][5607 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-08-26 11:45:10][355731678743791][5607 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:46:04][353313360766059][0 ms][INFO] === Request start === [2025-08-26 11:46:04][353313360766059][1 ms][DEBUG] START check_scloud [2025-08-26 11:46:04][353313360766059][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:46:04][353313360766059][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 6935 4968 24564356 214776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:46:04][353313360766059][306 ms][DEBUG] targetPkg: running [2025-08-26 11:46:04][353313360766059][306 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 11:46:04][353313360766059][306 ms][DEBUG] START check_boot_completed [2025-08-26 11:46:04][353313360766059][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:46:04][353313360766059][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:46:04][353313360766059][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:46:04][353313360766059][415 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 11:46:04][353313360766059][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 11:46:04][353313360766059][416 ms][DEBUG] START check_internet [2025-08-26 11:46:04][353313360766059][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:46:05][353313360766059][712 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=151 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 151.674/151.674/151.674/0.000 ms\n [2025-08-26 11:46:05][353313360766059][712 ms][DEBUG] check_internet: online [2025-08-26 11:46:05][353313360766059][712 ms][DEBUG] END check_internet in 297 ms [2025-08-26 11:46:05][353313360766059][713 ms][DEBUG] rawBody.length=1149 [2025-08-26 11:46:05][353313360766059][713 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353313360766059\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4602\"}'\'' -e'"" [2025-08-26 11:46:05][353313360766059][713 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:46:05][353313360766059][713 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353313360766059\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4602\"}'\'' -e'"" [2025-08-26 11:46:10][353313360766059][5648 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_74fc4e1b-2c24-40bd-96ba-e15c12b9b2b7","id":"QR_74fc4e1b-2c24-40bd-96ba-e15c12b9b2b7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:46:10][353313360766059][5805 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-08-26 11:46:10][353313360766059][5805 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-08-26 11:46:10][353313360766059][5805 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:47:03][357450473862478][0 ms][INFO] === Request start === [2025-08-26 11:47:03][357450473862478][1 ms][DEBUG] START check_scloud [2025-08-26 11:47:03][357450473862478][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:47:03][357450473862478][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 6935 4968 24692456 225756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:47:03][357450473862478][309 ms][DEBUG] targetPkg: running [2025-08-26 11:47:03][357450473862478][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 11:47:03][357450473862478][309 ms][DEBUG] START check_boot_completed [2025-08-26 11:47:03][357450473862478][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:47:03][357450473862478][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:47:03][357450473862478][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:47:04][357450473862478][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:47:04][357450473862478][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 11:47:04][357450473862478][402 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:47:04][357450473862478][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450473862478\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7614\"}'\'' -e'"" [2025-08-26 11:47:04][357450473862478][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:47:04][357450473862478][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450473862478\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7614\"}'\'' -e'"" [2025-08-26 11:47:07][357450473862478][4151 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0e32bf3b-cb4a-4c22-95d6-0a2847ab4383","id":"QR_0e32bf3b-cb4a-4c22-95d6-0a2847ab4383","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:47:07][357450473862478][4307 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-26 11:47:07][357450473862478][4307 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-26 11:47:07][357450473862478][4307 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:47:10][358533137132401][1 ms][INFO] === Request start === [2025-08-26 11:47:10][358533137132401][1 ms][DEBUG] START check_scloud [2025-08-26 11:47:10][358533137132401][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:47:11][358533137132401][272 ms][DEBUG] SU: done in 270 ms; outu0_a118 6935 4968 24830960 237796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:47:11][358533137132401][272 ms][DEBUG] targetPkg: running [2025-08-26 11:47:11][358533137132401][272 ms][DEBUG] END check_scloud in 271 ms [2025-08-26 11:47:11][358533137132401][272 ms][DEBUG] START check_boot_completed [2025-08-26 11:47:11][358533137132401][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:47:11][358533137132401][318 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:47:11][358533137132401][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:47:11][358533137132401][367 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 11:47:11][358533137132401][367 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 11:47:11][358533137132401][367 ms][DEBUG] rawBody.length=1149 [2025-08-26 11:47:11][358533137132401][367 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358533137132401\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5282\"}'\'' -e'"" [2025-08-26 11:47:11][358533137132401][367 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:47:11][358533137132401][367 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358533137132401\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5282\"}'\'' -e'"" [2025-08-26 11:47:14][358533137132401][4052 ms][DEBUG] proc_open done in 3685 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-26 11:47:14][358533137132401][4052 ms][DEBUG] END runCmdUntilRes#1 in 3685 ms [2025-08-26 11:47:14][358533137132401][4052 ms][WARN] Detected error: Process with pid 6935 either refused to load frida-agent, or terminated during injection [2025-08-26 11:47:14][358533137132401][4052 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 11:47:14][358533137132401][4193 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 11:47:14][358533137132401][4193 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 11:47:14][358533137132401][4193 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 11:47:15][358533137132401][4333 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 11:47:15][358533137132401][4333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 11:47:15][358533137132401][4506 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 11:47:17][358533137132401][6520 ms][DEBUG] START check_boot_completed [2025-08-26 11:47:17][358533137132401][6520 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:47:17][358533137132401][6567 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:47:17][358533137132401][6567 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:47:17][358533137132401][6614 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:47:17][358533137132401][6614 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 11:47:20][358533137132401][9629 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 11:47:20][358533137132401][9629 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358533137132401\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5282\"}'\'' -e'"" [2025-08-26 11:47:25][358533137132401][14471 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4a5ed370-9fb4-4c92-9632-0702933b2fac","id":"QR_4a5ed370-9fb4-4c92-9632-0702933b2fac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:47:25][358533137132401][14627 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3343 [2025-08-26 11:47:25][358533137132401][14627 ms][DEBUG] END runCmdUntilRes#2 in 4999 ms [2025-08-26 11:47:25][358533137132401][14627 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:48:02][354485115414927][0 ms][INFO] === Request start === [2025-08-26 11:48:02][354485115414927][1 ms][DEBUG] START check_scloud [2025-08-26 11:48:02][354485115414927][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:48:02][354485115414927][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 9535 4968 23485876 127420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:48:02][354485115414927][303 ms][DEBUG] targetPkg: running [2025-08-26 11:48:02][354485115414927][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 11:48:02][354485115414927][303 ms][DEBUG] START check_boot_completed [2025-08-26 11:48:02][354485115414927][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:48:02][354485115414927][349 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:48:02][354485115414927][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:48:03][354485115414927][412 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 11:48:03][354485115414927][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 11:48:03][354485115414927][412 ms][DEBUG] START check_internet [2025-08-26 11:48:03][354485115414927][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:48:03][354485115414927][646 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.710/141.710/141.710/0.000 ms\n [2025-08-26 11:48:03][354485115414927][646 ms][DEBUG] check_internet: online [2025-08-26 11:48:03][354485115414927][646 ms][DEBUG] END check_internet in 235 ms [2025-08-26 11:48:03][354485115414927][646 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:48:03][354485115414927][646 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354485115414927\",\"model\":\"SM-A516N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6161\"}'\'' -e'"" [2025-08-26 11:48:03][354485115414927][647 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:48:03][354485115414927][647 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354485115414927\",\"model\":\"SM-A516N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6161\"}'\'' -e'"" [2025-08-26 11:48:07][354485115414927][4520 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_37e1ce7a-e1bd-463a-b798-ed58688a9faa","id":"QR_37e1ce7a-e1bd-463a-b798-ed58688a9faa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:48:07][354485115414927][4676 ms][DEBUG] proc_open done in 4029 ms; code=255; res.len=3343 [2025-08-26 11:48:07][354485115414927][4676 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-26 11:48:07][354485115414927][4677 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:48:09][352060486499716][1 ms][INFO] === Request start === [2025-08-26 11:48:09][352060486499716][1 ms][DEBUG] START check_scloud [2025-08-26 11:48:09][352060486499716][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:48:09][352060486499716][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 9535 4968 23642748 138148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:48:09][352060486499716][282 ms][DEBUG] targetPkg: running [2025-08-26 11:48:09][352060486499716][282 ms][DEBUG] END check_scloud in 281 ms [2025-08-26 11:48:09][352060486499716][282 ms][DEBUG] START check_boot_completed [2025-08-26 11:48:09][352060486499716][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:48:09][352060486499716][313 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 11:48:09][352060486499716][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:48:10][352060486499716][375 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 11:48:10][352060486499716][376 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 11:48:10][352060486499716][376 ms][DEBUG] START check_internet [2025-08-26 11:48:10][352060486499716][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:48:10][352060486499716][610 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=116 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 116.338/116.338/116.338/0.000 ms\n [2025-08-26 11:48:10][352060486499716][610 ms][DEBUG] check_internet: online [2025-08-26 11:48:10][352060486499716][610 ms][DEBUG] END check_internet in 234 ms [2025-08-26 11:48:10][352060486499716][610 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:48:10][352060486499716][610 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060486499716\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4302\"}'\'' -e'"" [2025-08-26 11:48:10][352060486499716][610 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:48:10][352060486499716][610 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060486499716\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4302\"}'\'' -e'"" [2025-08-26 11:48:14][352060486499716][4640 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_be7d5e71-4ffb-40d7-8c03-40c7a3a74097","id":"QR_be7d5e71-4ffb-40d7-8c03-40c7a3a74097","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:48:14][352060486499716][4796 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-26 11:48:14][352060486499716][4796 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-26 11:48:14][352060486499716][4796 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:48:16][350386300374633][0 ms][INFO] === Request start === [2025-08-26 11:48:16][350386300374633][1 ms][DEBUG] START check_scloud [2025-08-26 11:48:16][350386300374633][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:48:17][350386300374633][269 ms][DEBUG] SU: done in 269 ms; outu0_a118 9535 4968 23782304 149564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:48:17][350386300374633][270 ms][DEBUG] targetPkg: running [2025-08-26 11:48:17][350386300374633][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-26 11:48:17][350386300374633][270 ms][DEBUG] START check_boot_completed [2025-08-26 11:48:17][350386300374633][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:48:17][350386300374633][316 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:48:17][350386300374633][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:48:17][350386300374633][363 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:48:17][350386300374633][363 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 11:48:17][350386300374633][363 ms][DEBUG] START check_internet [2025-08-26 11:48:17][350386300374633][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:48:17][350386300374633][582 ms][DEBUG] SU: done in 219 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=114 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 114.425/114.425/114.425/0.000 ms\n [2025-08-26 11:48:17][350386300374633][582 ms][DEBUG] check_internet: online [2025-08-26 11:48:17][350386300374633][582 ms][DEBUG] END check_internet in 219 ms [2025-08-26 11:48:17][350386300374633][582 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:48:17][350386300374633][582 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350386300374633\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2272\"}'\'' -e'"" [2025-08-26 11:48:17][350386300374633][582 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:48:17][350386300374633][582 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350386300374633\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2272\"}'\'' -e'"" [2025-08-26 11:48:21][350386300374633][4300 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_236f5cc1-30e5-4bf1-88a7-d6227a0e7ca5","id":"QR_236f5cc1-30e5-4bf1-88a7-d6227a0e7ca5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:48:21][350386300374633][4456 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-08-26 11:48:21][350386300374633][4456 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-26 11:48:21][350386300374633][4456 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:48:24][354793243433515][0 ms][INFO] === Request start === [2025-08-26 11:48:24][354793243433515][1 ms][DEBUG] START check_scloud [2025-08-26 11:48:24][354793243433515][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:48:24][354793243433515][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 9535 4968 23889732 160556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:48:24][354793243433515][284 ms][DEBUG] targetPkg: running [2025-08-26 11:48:24][354793243433515][284 ms][DEBUG] END check_scloud in 283 ms [2025-08-26 11:48:24][354793243433515][284 ms][DEBUG] START check_boot_completed [2025-08-26 11:48:24][354793243433515][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:48:24][354793243433515][331 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:48:24][354793243433515][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:48:24][354793243433515][409 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 11:48:24][354793243433515][409 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 11:48:24][354793243433515][409 ms][DEBUG] START check_internet [2025-08-26 11:48:24][354793243433515][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:48:25][354793243433515][690 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=147 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 147.779/147.779/147.779/0.000 ms\n [2025-08-26 11:48:25][354793243433515][690 ms][DEBUG] check_internet: online [2025-08-26 11:48:25][354793243433515][690 ms][DEBUG] END check_internet in 281 ms [2025-08-26 11:48:25][354793243433515][690 ms][DEBUG] rawBody.length=1149 [2025-08-26 11:48:25][354793243433515][691 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354793243433515\",\"model\":\"SM-A135U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AIO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9104\"}'\'' -e'"" [2025-08-26 11:48:25][354793243433515][691 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:48:25][354793243433515][691 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354793243433515\",\"model\":\"SM-A135U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AIO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9104\"}'\'' -e'"" [2025-08-26 11:48:30][354793243433515][5829 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a9463add-eb57-4997-90ad-4f8657211e27","id":"QR_a9463add-eb57-4997-90ad-4f8657211e27","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:48:30][354793243433515][5985 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-08-26 11:48:30][354793243433515][5985 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-08-26 11:48:30][354793243433515][5985 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:49:03][353725741533124][0 ms][INFO] === Request start === [2025-08-26 11:49:03][353725741533124][1 ms][DEBUG] START check_scloud [2025-08-26 11:49:03][353725741533124][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:49:03][353725741533124][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 9535 4968 23981092 172708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:49:03][353725741533124][312 ms][DEBUG] targetPkg: running [2025-08-26 11:49:03][353725741533124][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-26 11:49:03][353725741533124][312 ms][DEBUG] START check_boot_completed [2025-08-26 11:49:03][353725741533124][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:49:03][353725741533124][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:49:03][353725741533124][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:49:03][353725741533124][436 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 11:49:03][353725741533124][437 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 11:49:03][353725741533124][437 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:49:03][353725741533124][437 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353725741533124\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3809\"}'\'' -e'"" [2025-08-26 11:49:03][353725741533124][437 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:49:03][353725741533124][437 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353725741533124\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3809\"}'\'' -e'"" [2025-08-26 11:49:07][353725741533124][4014 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_22b8593d-8eb9-4559-8d20-d3e88e07fb40","id":"QR_22b8593d-8eb9-4559-8d20-d3e88e07fb40","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:49:07][353725741533124][4170 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-08-26 11:49:07][353725741533124][4170 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-08-26 11:49:07][353725741533124][4170 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:49:11][353722793204316][1 ms][INFO] === Request start === [2025-08-26 11:49:11][353722793204316][1 ms][DEBUG] START check_scloud [2025-08-26 11:49:11][353722793204316][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:49:11][353722793204316][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 9535 4968 24142124 183564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:49:11][353722793204316][306 ms][DEBUG] targetPkg: running [2025-08-26 11:49:11][353722793204316][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-26 11:49:11][353722793204316][306 ms][DEBUG] START check_boot_completed [2025-08-26 11:49:11][353722793204316][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:49:11][353722793204316][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:49:11][353722793204316][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:49:11][353722793204316][446 ms][DEBUG] SU: done in 93 ms; out [2025-08-26 11:49:11][353722793204316][446 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 11:49:11][353722793204316][446 ms][DEBUG] rawBody.length=1158 [2025-08-26 11:49:11][353722793204316][446 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722793204316\",\"model\":\"SM-P620\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52X70AA5AB\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7134\"}'\'' -e'"" [2025-08-26 11:49:11][353722793204316][446 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:49:11][353722793204316][446 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722793204316\",\"model\":\"SM-P620\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52X70AA5AB\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7134\"}'\'' -e'"" [2025-08-26 11:49:15][353722793204316][4554 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e1e752cb-8228-4a9e-811b-79c0c69eb627","id":"QR_e1e752cb-8228-4a9e-811b-79c0c69eb627","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:49:16][353722793204316][4711 ms][DEBUG] proc_open done in 4265 ms; code=255; res.len=3343 [2025-08-26 11:49:16][353722793204316][4711 ms][DEBUG] END runCmdUntilRes#1 in 4265 ms [2025-08-26 11:49:16][353722793204316][4711 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:50:04][353548751888406][0 ms][INFO] === Request start === [2025-08-26 11:50:04][353548751888406][1 ms][DEBUG] START check_scloud [2025-08-26 11:50:04][353548751888406][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:50:05][353548751888406][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 9535 4968 24230240 195888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:50:05][353548751888406][293 ms][DEBUG] targetPkg: running [2025-08-26 11:50:05][353548751888406][293 ms][DEBUG] END check_scloud in 292 ms [2025-08-26 11:50:05][353548751888406][293 ms][DEBUG] START check_boot_completed [2025-08-26 11:50:05][353548751888406][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:50:05][353548751888406][324 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 11:50:05][353548751888406][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:50:05][353548751888406][371 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:50:05][353548751888406][371 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 11:50:05][353548751888406][372 ms][DEBUG] START check_internet [2025-08-26 11:50:05][353548751888406][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:50:05][353548751888406][856 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.040/203.040/203.040/0.000 ms\n [2025-08-26 11:50:05][353548751888406][856 ms][DEBUG] check_internet: online [2025-08-26 11:50:05][353548751888406][856 ms][DEBUG] END check_internet in 484 ms [2025-08-26 11:50:05][353548751888406][856 ms][DEBUG] rawBody.length=1149 [2025-08-26 11:50:05][353548751888406][856 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548751888406\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5363\"}'\'' -e'"" [2025-08-26 11:50:05][353548751888406][856 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:50:05][353548751888406][856 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548751888406\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5363\"}'\'' -e'"" [2025-08-26 11:50:10][353548751888406][5901 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4b45687f-e549-4963-8d84-2b530a6bdfb9","id":"QR_4b45687f-e549-4963-8d84-2b530a6bdfb9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:50:10][353548751888406][6057 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-08-26 11:50:10][353548751888406][6057 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-08-26 11:50:10][353548751888406][6057 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:51:02][357518811547249][0 ms][INFO] === Request start === [2025-08-26 11:51:02][357518811547249][0 ms][DEBUG] START check_scloud [2025-08-26 11:51:02][357518811547249][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:51:03][357518811547249][295 ms][DEBUG] SU: done in 295 ms; outu0_a118 9535 4968 24366532 206816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:51:03][357518811547249][295 ms][DEBUG] targetPkg: running [2025-08-26 11:51:03][357518811547249][295 ms][DEBUG] END check_scloud in 295 ms [2025-08-26 11:51:03][357518811547249][295 ms][DEBUG] START check_boot_completed [2025-08-26 11:51:03][357518811547249][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:51:03][357518811547249][326 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 11:51:03][357518811547249][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:51:03][357518811547249][373 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:51:03][357518811547249][373 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 11:51:03][357518811547249][373 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:51:03][357518811547249][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357518811547249\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6809\"}'\'' -e'"" [2025-08-26 11:51:03][357518811547249][373 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:51:03][357518811547249][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357518811547249\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6809\"}'\'' -e'"" [2025-08-26 11:51:06][357518811547249][3997 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-26 11:51:06][357518811547249][4154 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=115 [2025-08-26 11:51:06][357518811547249][4154 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-26 11:51:06][357518811547249][4154 ms][INFO] SUCCESS response from frida (len=115) [2025-08-26 11:51:07][][0 ms][INFO] === Request start === [2025-08-26 11:51:07][][1 ms][DEBUG] START check_scloud [2025-08-26 11:51:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:51:07][][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 9535 4968 24494796 217660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:51:07][][296 ms][DEBUG] targetPkg: running [2025-08-26 11:51:07][][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-26 11:51:07][][296 ms][DEBUG] START check_boot_completed [2025-08-26 11:51:07][][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:51:07][][327 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 11:51:07][][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:51:07][][389 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 11:51:07][][390 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 11:51:07][][390 ms][DEBUG] rawBody.length=1129 [2025-08-26 11:51:07][][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCT70EV26X\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3422\"}'\'' -e'"" [2025-08-26 11:51:07][][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:51:07][][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCT70EV26X\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3422\"}'\'' -e'"" [2025-08-26 11:51:11][][3810 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-26 11:51:11][][3967 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=115 [2025-08-26 11:51:11][][3967 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-08-26 11:51:11][][3967 ms][INFO] SUCCESS response from frida (len=115) [2025-08-26 11:52:03][354454657032596][1 ms][INFO] === Request start === [2025-08-26 11:52:03][354454657032596][1 ms][DEBUG] START check_scloud [2025-08-26 11:52:03][354454657032596][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:52:04][354454657032596][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 9535 4968 24643276 229928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:52:04][354454657032596][300 ms][DEBUG] targetPkg: running [2025-08-26 11:52:04][354454657032596][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-26 11:52:04][354454657032596][300 ms][DEBUG] START check_boot_completed [2025-08-26 11:52:04][354454657032596][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:52:04][354454657032596][347 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:52:04][354454657032596][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:52:04][354454657032596][409 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 11:52:04][354454657032596][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 11:52:04][354454657032596][409 ms][DEBUG] START check_internet [2025-08-26 11:52:04][354454657032596][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:52:04][354454657032596][690 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.393/141.393/141.393/0.000 ms\n [2025-08-26 11:52:04][354454657032596][690 ms][DEBUG] check_internet: online [2025-08-26 11:52:04][354454657032596][690 ms][DEBUG] END check_internet in 281 ms [2025-08-26 11:52:04][354454657032596][690 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:52:04][354454657032596][690 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354454657032596\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6584\"}'\'' -e'"" [2025-08-26 11:52:04][354454657032596][690 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:52:04][354454657032596][690 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354454657032596\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6584\"}'\'' -e'"" [2025-08-26 11:52:08][354454657032596][4533 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7612b139-4f44-4217-90a2-d4a3f336c3d4","id":"QR_7612b139-4f44-4217-90a2-d4a3f336c3d4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:52:08][354454657032596][4689 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=3343 [2025-08-26 11:52:08][354454657032596][4689 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-26 11:52:08][354454657032596][4689 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:53:02][356769545323073][0 ms][INFO] === Request start === [2025-08-26 11:53:02][356769545323073][1 ms][DEBUG] START check_scloud [2025-08-26 11:53:02][356769545323073][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:53:02][356769545323073][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 9535 4968 24750120 241776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:53:02][356769545323073][301 ms][DEBUG] targetPkg: running [2025-08-26 11:53:02][356769545323073][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 11:53:02][356769545323073][301 ms][DEBUG] START check_boot_completed [2025-08-26 11:53:02][356769545323073][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:53:02][356769545323073][332 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 11:53:02][356769545323073][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:53:02][356769545323073][379 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:53:02][356769545323073][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 11:53:02][356769545323073][379 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:53:02][356769545323073][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356769545323073\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9288\"}'\'' -e'"" [2025-08-26 11:53:02][356769545323073][380 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:53:02][356769545323073][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356769545323073\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9288\"}'\'' -e'"" [2025-08-26 11:53:10][356769545323073][8112 ms][DEBUG] proc_open done in 7732 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-26 11:53:10][356769545323073][8112 ms][DEBUG] END runCmdUntilRes#1 in 7732 ms [2025-08-26 11:53:10][356769545323073][8112 ms][WARN] Detected error: Process with pid 9535 either refused to load frida-agent, or terminated during injection [2025-08-26 11:53:10][356769545323073][8112 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 11:53:10][356769545323073][8315 ms][DEBUG] SU: done in 203 ms; out [2025-08-26 11:53:10][356769545323073][8315 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 11:53:10][356769545323073][8315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 11:53:10][356769545323073][8565 ms][DEBUG] SU: done in 250 ms; out [2025-08-26 11:53:10][356769545323073][8565 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 11:53:11][356769545323073][8987 ms][DEBUG] SU: done in 422 ms; out [2025-08-26 11:53:13][356769545323073][11002 ms][DEBUG] START check_boot_completed [2025-08-26 11:53:13][356769545323073][11002 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:53:13][356769545323073][11049 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:53:13][356769545323073][11049 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:53:13][356769545323073][11111 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 11:53:13][356769545323073][11111 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 11:53:16][356769545323073][14126 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 11:53:16][356769545323073][14126 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356769545323073\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9288\"}'\'' -e'"" [2025-08-26 11:53:16][356769545323073][14642 ms][DEBUG] proc_open done in 516 ms (timeout); code=4; out.len=0 err.len=50 [2025-08-26 11:53:16][356769545323073][14642 ms][DEBUG] END runCmdUntilRes#2 in 516 ms [2025-08-26 11:53:16][356769545323073][14642 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-08-26 11:54:01][356769545323073][0 ms][INFO] === Request start === [2025-08-26 11:54:01][356769545323073][1 ms][DEBUG] START check_scloud [2025-08-26 11:54:01][356769545323073][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:54:02][356769545323073][382 ms][DEBUG] SU: done in 381 ms; out [2025-08-26 11:54:02][356769545323073][382 ms][WARN] targetPkg: not running, restarting [2025-08-26 11:54:02][356769545323073][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 11:54:02][356769545323073][537 ms][DEBUG] SU: done in 155 ms; out [2025-08-26 11:54:02][356769545323073][537 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 11:54:02][356769545323073][818 ms][DEBUG] SU: done in 281 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 11:54:04][356769545323073][2833 ms][DEBUG] END check_scloud in 2832 ms [2025-08-26 11:54:04][356769545323073][2833 ms][DEBUG] START check_boot_completed [2025-08-26 11:54:04][356769545323073][2833 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:54:04][356769545323073][2880 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:54:04][356769545323073][2880 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:54:04][356769545323073][2958 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 11:54:04][356769545323073][2958 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 11:54:04][356769545323073][2958 ms][DEBUG] START check_internet [2025-08-26 11:54:04][356769545323073][2959 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:54:05][356769545323073][3599 ms][DEBUG] SU: done in 640 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=108 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 108.023/108.023/108.023/0.000 ms\n [2025-08-26 11:54:05][356769545323073][3599 ms][DEBUG] check_internet: online [2025-08-26 11:54:05][356769545323073][3599 ms][DEBUG] END check_internet in 641 ms [2025-08-26 11:54:05][356769545323073][3599 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:54:05][356769545323073][3599 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356769545323073\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7645\"}'\'' -e'"" [2025-08-26 11:54:05][356769545323073][3599 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:54:05][356769545323073][3599 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356769545323073\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7645\"}'\'' -e'"" [2025-08-26 11:54:10][356769545323073][8660 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-26 11:54:10][356769545323073][8816 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=115 [2025-08-26 11:54:10][356769545323073][8816 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-08-26 11:54:10][356769545323073][8816 ms][INFO] SUCCESS response from frida (len=115) [2025-08-26 11:54:11][][1 ms][INFO] === Request start === [2025-08-26 11:54:11][][1 ms][DEBUG] START check_scloud [2025-08-26 11:54:11][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:54:11][][377 ms][DEBUG] SU: done in 376 ms; outu0_a118 15312 11216 23793760 116212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:54:11][][378 ms][DEBUG] targetPkg: running [2025-08-26 11:54:11][][378 ms][DEBUG] END check_scloud in 377 ms [2025-08-26 11:54:11][][378 ms][DEBUG] START check_boot_completed [2025-08-26 11:54:11][][378 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:54:11][][424 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 11:54:11][][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:54:11][][487 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 11:54:11][][487 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 11:54:11][][487 ms][DEBUG] START check_internet [2025-08-26 11:54:11][][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:54:11][][768 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=113 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 113.573/113.573/113.573/0.000 ms\n [2025-08-26 11:54:11][][768 ms][DEBUG] check_internet: online [2025-08-26 11:54:11][][768 ms][DEBUG] END check_internet in 281 ms [2025-08-26 11:54:11][][768 ms][DEBUG] rawBody.length=1129 [2025-08-26 11:54:11][][768 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W406Z3JX\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4829\"}'\'' -e'"" [2025-08-26 11:54:11][][768 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:54:11][][768 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W406Z3JX\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4829\"}'\'' -e'"" [2025-08-26 11:54:16][][4923 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 11:54:16][][5079 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=107 [2025-08-26 11:54:16][][5079 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-26 11:54:16][][5079 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 11:54:17][351270415334006][1 ms][INFO] === Request start === [2025-08-26 11:54:17][351270415334006][1 ms][DEBUG] START check_scloud [2025-08-26 11:54:17][351270415334006][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:54:18][351270415334006][327 ms][DEBUG] SU: done in 326 ms; outu0_a118 15312 11216 23944552 119184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:54:18][351270415334006][327 ms][DEBUG] targetPkg: running [2025-08-26 11:54:18][351270415334006][327 ms][DEBUG] END check_scloud in 326 ms [2025-08-26 11:54:18][351270415334006][327 ms][DEBUG] START check_boot_completed [2025-08-26 11:54:18][351270415334006][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:54:18][351270415334006][358 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 11:54:18][351270415334006][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:54:18][351270415334006][421 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 11:54:18][351270415334006][421 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 11:54:18][351270415334006][421 ms][DEBUG] START check_internet [2025-08-26 11:54:18][351270415334006][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:54:18][351270415334006][670 ms][DEBUG] SU: done in 249 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=129 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 129.600/129.600/129.600/0.000 ms\n [2025-08-26 11:54:18][351270415334006][671 ms][DEBUG] check_internet: online [2025-08-26 11:54:18][351270415334006][671 ms][DEBUG] END check_internet in 250 ms [2025-08-26 11:54:18][351270415334006][671 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:54:18][351270415334006][671 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270415334006\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1885\"}'\'' -e'"" [2025-08-26 11:54:18][351270415334006][671 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:54:18][351270415334006][671 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270415334006\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1885\"}'\'' -e'"" [2025-08-26 11:54:22][351270415334006][4591 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_925266bc-bce2-4cf5-a62a-21c4d6584006","id":"QR_925266bc-bce2-4cf5-a62a-21c4d6584006","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:54:22][351270415334006][4747 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-26 11:54:22][351270415334006][4747 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-26 11:54:22][351270415334006][4748 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:54:25][350013884118752][0 ms][INFO] === Request start === [2025-08-26 11:54:25][350013884118752][1 ms][DEBUG] START check_scloud [2025-08-26 11:54:25][350013884118752][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:54:25][350013884118752][340 ms][DEBUG] SU: done in 339 ms; outu0_a118 15312 11216 24125264 106552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:54:25][350013884118752][340 ms][DEBUG] targetPkg: running [2025-08-26 11:54:25][350013884118752][340 ms][DEBUG] END check_scloud in 340 ms [2025-08-26 11:54:25][350013884118752][340 ms][DEBUG] START check_boot_completed [2025-08-26 11:54:25][350013884118752][340 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:54:25][350013884118752][387 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:54:25][350013884118752][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:54:25][350013884118752][449 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 11:54:25][350013884118752][449 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 11:54:25][350013884118752][449 ms][DEBUG] START check_internet [2025-08-26 11:54:25][350013884118752][449 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:54:25][350013884118752][778 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=195 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 195.859/195.859/195.859/0.000 ms\n [2025-08-26 11:54:25][350013884118752][778 ms][DEBUG] check_internet: online [2025-08-26 11:54:25][350013884118752][778 ms][DEBUG] END check_internet in 328 ms [2025-08-26 11:54:25][350013884118752][778 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:54:25][350013884118752][778 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884118752\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6061\"}'\'' -e'"" [2025-08-26 11:54:25][350013884118752][778 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:54:25][350013884118752][778 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884118752\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6061\"}'\'' -e'"" [2025-08-26 11:54:29][350013884118752][4901 ms][DEBUG] frida res:res:{"error":"Error: javax.net.ssl.SSLHandshakeException: Failed to communicate with keystore service"}\r\n [2025-08-26 11:54:30][350013884118752][5058 ms][DEBUG] proc_open done in 4279 ms; code=255; res.len=99 [2025-08-26 11:54:30][350013884118752][5058 ms][DEBUG] END runCmdUntilRes#1 in 4279 ms [2025-08-26 11:54:30][350013884118752][5058 ms][INFO] SUCCESS response from frida (len=99) [2025-08-26 11:55:03][354588701058113][0 ms][INFO] === Request start === [2025-08-26 11:55:03][354588701058113][1 ms][DEBUG] START check_scloud [2025-08-26 11:55:03][354588701058113][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:55:03][354588701058113][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 15312 11216 24144732 67488 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:55:03][354588701058113][325 ms][DEBUG] targetPkg: running [2025-08-26 11:55:03][354588701058113][325 ms][DEBUG] END check_scloud in 324 ms [2025-08-26 11:55:03][354588701058113][325 ms][DEBUG] START check_boot_completed [2025-08-26 11:55:03][354588701058113][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:55:03][354588701058113][356 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 11:55:03][354588701058113][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:55:03][354588701058113][419 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 11:55:03][354588701058113][419 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 11:55:03][354588701058113][419 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:55:03][354588701058113][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354588701058113\",\"model\":\"SM-S926N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6214\"}'\'' -e'"" [2025-08-26 11:55:03][354588701058113][419 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:55:03][354588701058113][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354588701058113\",\"model\":\"SM-S926N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6214\"}'\'' -e'"" [2025-08-26 11:55:07][354588701058113][4871 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6c067d4d-5836-4074-914f-aa7b57dc1ce7","id":"QR_6c067d4d-5836-4074-914f-aa7b57dc1ce7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:55:08][354588701058113][5027 ms][DEBUG] proc_open done in 4607 ms; code=255; res.len=3343 [2025-08-26 11:55:08][354588701058113][5027 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-08-26 11:55:08][354588701058113][5027 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:56:03][353182205787988][0 ms][INFO] === Request start === [2025-08-26 11:56:03][353182205787988][1 ms][DEBUG] START check_scloud [2025-08-26 11:56:03][353182205787988][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:56:03][353182205787988][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 15312 11216 24230900 87540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:56:03][353182205787988][316 ms][DEBUG] targetPkg: running [2025-08-26 11:56:03][353182205787988][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-26 11:56:03][353182205787988][316 ms][DEBUG] START check_boot_completed [2025-08-26 11:56:03][353182205787988][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:56:03][353182205787988][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:56:03][353182205787988][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:56:03][353182205787988][410 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 11:56:03][353182205787988][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 11:56:03][353182205787988][410 ms][DEBUG] START check_internet [2025-08-26 11:56:03][353182205787988][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:56:03][353182205787988][629 ms][DEBUG] SU: done in 219 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=107 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 107.540/107.540/107.540/0.000 ms\n [2025-08-26 11:56:03][353182205787988][629 ms][DEBUG] check_internet: online [2025-08-26 11:56:03][353182205787988][629 ms][DEBUG] END check_internet in 219 ms [2025-08-26 11:56:03][353182205787988][629 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:56:03][353182205787988][629 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182205787988\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4105\"}'\'' -e'"" [2025-08-26 11:56:03][353182205787988][629 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:56:03][353182205787988][629 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182205787988\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4105\"}'\'' -e'"" [2025-08-26 11:56:07][353182205787988][4424 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_90e5b0c9-965c-4736-b25e-7ae55c4b9129","id":"QR_90e5b0c9-965c-4736-b25e-7ae55c4b9129","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:56:07][353182205787988][4581 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-08-26 11:56:07][353182205787988][4581 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-26 11:56:07][353182205787988][4581 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:58:03][358212589690873][1 ms][INFO] === Request start === [2025-08-26 11:58:03][358212589690873][1 ms][DEBUG] START check_scloud [2025-08-26 11:58:03][358212589690873][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:58:03][358212589690873][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 15312 11216 24350872 100724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:58:03][358212589690873][298 ms][DEBUG] targetPkg: running [2025-08-26 11:58:03][358212589690873][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-26 11:58:03][358212589690873][298 ms][DEBUG] START check_boot_completed [2025-08-26 11:58:03][358212589690873][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:58:03][358212589690873][329 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 11:58:03][358212589690873][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:58:03][358212589690873][392 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 11:58:03][358212589690873][392 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 11:58:03][358212589690873][392 ms][DEBUG] START check_internet [2025-08-26 11:58:03][358212589690873][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:58:04][358212589690873][689 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=173 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 173.880/173.880/173.880/0.000 ms\n [2025-08-26 11:58:04][358212589690873][689 ms][DEBUG] check_internet: online [2025-08-26 11:58:04][358212589690873][689 ms][DEBUG] END check_internet in 297 ms [2025-08-26 11:58:04][358212589690873][689 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:58:04][358212589690873][689 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212589690873\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SEK\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5776\"}'\'' -e'"" [2025-08-26 11:58:04][358212589690873][689 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:58:04][358212589690873][689 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212589690873\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SEK\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5776\"}'\'' -e'"" [2025-08-26 11:58:08][358212589690873][4500 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ac393798-1e23-4e7e-b8c4-67b8920dea8c","id":"QR_ac393798-1e23-4e7e-b8c4-67b8920dea8c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:58:08][358212589690873][4656 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-26 11:58:08][358212589690873][4656 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-26 11:58:08][358212589690873][4657 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 11:58:09][350013905328976][0 ms][INFO] === Request start === [2025-08-26 11:58:09][350013905328976][1 ms][DEBUG] START check_scloud [2025-08-26 11:58:09][350013905328976][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 11:58:10][350013905328976][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 15312 11216 24497440 111612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 11:58:10][350013905328976][272 ms][DEBUG] targetPkg: running [2025-08-26 11:58:10][350013905328976][272 ms][DEBUG] END check_scloud in 271 ms [2025-08-26 11:58:10][350013905328976][272 ms][DEBUG] START check_boot_completed [2025-08-26 11:58:10][350013905328976][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 11:58:10][350013905328976][319 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 11:58:10][350013905328976][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 11:58:10][350013905328976][381 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 11:58:10][350013905328976][381 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 11:58:10][350013905328976][381 ms][DEBUG] START check_internet [2025-08-26 11:58:10][350013905328976][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 11:58:10][350013905328976][647 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=114 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 114.642/114.642/114.642/0.000 ms\n [2025-08-26 11:58:10][350013905328976][647 ms][DEBUG] check_internet: online [2025-08-26 11:58:10][350013905328976][647 ms][DEBUG] END check_internet in 266 ms [2025-08-26 11:58:10][350013905328976][647 ms][DEBUG] rawBody.length=1148 [2025-08-26 11:58:10][350013905328976][647 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013905328976\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5550\"}'\'' -e'"" [2025-08-26 11:58:10][350013905328976][647 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 11:58:10][350013905328976][648 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013905328976\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5550\"}'\'' -e'"" [2025-08-26 11:58:14][350013905328976][4161 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe811c0e-95fb-4bca-9b7d-9702fc944763","id":"QR_fe811c0e-95fb-4bca-9b7d-9702fc944763","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 11:58:14][350013905328976][4318 ms][DEBUG] proc_open done in 3670 ms; code=255; res.len=3343 [2025-08-26 11:58:14][350013905328976][4318 ms][DEBUG] END runCmdUntilRes#1 in 3670 ms [2025-08-26 11:58:14][350013905328976][4318 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:00:04][353684144422759][1 ms][INFO] === Request start === [2025-08-26 12:00:04][353684144422759][1 ms][DEBUG] START check_scloud [2025-08-26 12:00:04][353684144422759][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:00:04][353684144422759][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 15312 11216 24645984 123148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:00:04][353684144422759][291 ms][DEBUG] targetPkg: running [2025-08-26 12:00:04][353684144422759][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-26 12:00:04][353684144422759][291 ms][DEBUG] START check_boot_completed [2025-08-26 12:00:04][353684144422759][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:00:04][353684144422759][322 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 12:00:04][353684144422759][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:00:04][353684144422759][385 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 12:00:04][353684144422759][385 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 12:00:04][353684144422759][385 ms][DEBUG] START check_internet [2025-08-26 12:00:04][353684144422759][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:00:05][353684144422759][853 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=132 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 132.437/132.437/132.437/0.000 ms\n [2025-08-26 12:00:05][353684144422759][853 ms][DEBUG] check_internet: online [2025-08-26 12:00:05][353684144422759][853 ms][DEBUG] END check_internet in 469 ms [2025-08-26 12:00:05][353684144422759][854 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:00:05][353684144422759][854 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684144422759\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3977\"}'\'' -e'"" [2025-08-26 12:00:05][353684144422759][854 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:00:05][353684144422759][854 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684144422759\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3977\"}'\'' -e'"" [2025-08-26 12:00:12][353684144422759][7945 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_de8f587c-d295-4d25-99a0-65b76f2cc784","id":"QR_de8f587c-d295-4d25-99a0-65b76f2cc784","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:00:12][353684144422759][8101 ms][DEBUG] proc_open done in 7247 ms; code=255; res.len=3343 [2025-08-26 12:00:12][353684144422759][8101 ms][DEBUG] END runCmdUntilRes#1 in 7248 ms [2025-08-26 12:00:12][353684144422759][8101 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:01:03][352192664082657][0 ms][INFO] === Request start === [2025-08-26 12:01:03][352192664082657][1 ms][DEBUG] START check_scloud [2025-08-26 12:01:03][352192664082657][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:01:03][352192664082657][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 15312 11216 24800836 132528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:01:03][352192664082657][325 ms][DEBUG] targetPkg: running [2025-08-26 12:01:03][352192664082657][325 ms][DEBUG] END check_scloud in 324 ms [2025-08-26 12:01:03][352192664082657][325 ms][DEBUG] START check_boot_completed [2025-08-26 12:01:03][352192664082657][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:01:03][352192664082657][372 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:01:03][352192664082657][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:01:03][352192664082657][434 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:01:03][352192664082657][434 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:01:03][352192664082657][434 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:01:03][352192664082657][434 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192664082657\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4081\"}'\'' -e'"" [2025-08-26 12:01:03][352192664082657][434 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:01:03][352192664082657][434 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192664082657\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4081\"}'\'' -e'"" [2025-08-26 12:01:07][352192664082657][4089 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab46c8c3-7984-4e74-9ab9-65c5a749018d","id":"QR_ab46c8c3-7984-4e74-9ab9-65c5a749018d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:01:07][352192664082657][4245 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-26 12:01:07][352192664082657][4245 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-26 12:01:07][352192664082657][4246 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:01:10][353372910121876][0 ms][INFO] === Request start === [2025-08-26 12:01:10][353372910121876][1 ms][DEBUG] START check_scloud [2025-08-26 12:01:10][353372910121876][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:01:10][353372910121876][326 ms][DEBUG] SU: done in 325 ms; outu0_a118 15312 11216 24935244 143576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:01:10][353372910121876][326 ms][DEBUG] targetPkg: running [2025-08-26 12:01:10][353372910121876][326 ms][DEBUG] END check_scloud in 325 ms [2025-08-26 12:01:10][353372910121876][326 ms][DEBUG] START check_boot_completed [2025-08-26 12:01:10][353372910121876][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:01:10][353372910121876][373 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:01:10][353372910121876][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:01:10][353372910121876][466 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 12:01:10][353372910121876][466 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 12:01:10][353372910121876][467 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:01:10][353372910121876][467 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372910121876\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3955\"}'\'' -e'"" [2025-08-26 12:01:10][353372910121876][467 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:01:10][353372910121876][467 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372910121876\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3955\"}'\'' -e'"" [2025-08-26 12:01:14][353372910121876][4497 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e2432a4e-4071-48f7-8746-5569511e9fa1","id":"QR_e2432a4e-4071-48f7-8746-5569511e9fa1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:01:14][353372910121876][4653 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-26 12:01:14][353372910121876][4653 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-26 12:01:14][353372910121876][4653 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:03:03][355472980389557][1 ms][INFO] === Request start === [2025-08-26 12:03:03][355472980389557][1 ms][DEBUG] START check_scloud [2025-08-26 12:03:03][355472980389557][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:03:03][355472980389557][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 15312 11216 25026572 155688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:03:03][355472980389557][297 ms][DEBUG] targetPkg: running [2025-08-26 12:03:03][355472980389557][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-26 12:03:03][355472980389557][297 ms][DEBUG] START check_boot_completed [2025-08-26 12:03:03][355472980389557][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:03:03][355472980389557][343 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:03:03][355472980389557][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:03:03][355472980389557][391 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 12:03:03][355472980389557][391 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 12:03:03][355472980389557][391 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:03:03][355472980389557][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355472980389557\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5823\"}'\'' -e'"" [2025-08-26 12:03:03][355472980389557][391 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:03:03][355472980389557][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355472980389557\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5823\"}'\'' -e'"" [2025-08-26 12:03:07][355472980389557][4749 ms][DEBUG] proc_open done in 4357 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 12:03:07][355472980389557][4749 ms][DEBUG] END runCmdUntilRes#1 in 4357 ms [2025-08-26 12:03:07][355472980389557][4749 ms][WARN] Detected error: Process with pid 15312 either refused to load frida-agent, or terminated during injection [2025-08-26 12:03:07][355472980389557][4749 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 12:03:08][355472980389557][4905 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 12:03:08][355472980389557][4905 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 12:03:08][355472980389557][4905 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 12:03:08][355472980389557][5045 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 12:03:08][355472980389557][5046 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 12:03:08][355472980389557][5217 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 12:03:10][355472980389557][7232 ms][DEBUG] START check_boot_completed [2025-08-26 12:03:10][355472980389557][7232 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:03:10][355472980389557][7279 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:03:10][355472980389557][7279 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:03:10][355472980389557][7342 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:03:10][355472980389557][7342 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 12:03:13][355472980389557][10356 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 12:03:13][355472980389557][10357 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355472980389557\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5823\"}'\'' -e'"" [2025-08-26 12:03:17][355472980389557][14340 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d8381eab-e899-47d2-a5c8-36021d732147","id":"QR_d8381eab-e899-47d2-a5c8-36021d732147","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:03:17][355472980389557][14496 ms][DEBUG] proc_open done in 4140 ms; code=255; res.len=3343 [2025-08-26 12:03:17][355472980389557][14496 ms][DEBUG] END runCmdUntilRes#2 in 4140 ms [2025-08-26 12:03:17][355472980389557][14497 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:03:19][353881489564316][0 ms][INFO] === Request start === [2025-08-26 12:03:19][353881489564316][1 ms][DEBUG] START check_scloud [2025-08-26 12:03:19][353881489564316][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:03:19][353881489564316][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 24097 11216 23797980 125032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:03:19][353881489564316][257 ms][DEBUG] targetPkg: running [2025-08-26 12:03:19][353881489564316][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-26 12:03:19][353881489564316][257 ms][DEBUG] START check_boot_completed [2025-08-26 12:03:19][353881489564316][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:03:19][353881489564316][319 ms][DEBUG] ADB: done in 62 ms; out [2025-08-26 12:03:19][353881489564316][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:03:19][353881489564316][366 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:03:19][353881489564316][366 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:03:19][353881489564316][366 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:03:19][353881489564316][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881489564316\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1759\"}'\'' -e'"" [2025-08-26 12:03:19][353881489564316][366 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:03:19][353881489564316][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353881489564316\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1759\"}'\'' -e'"" [2025-08-26 12:03:23][353881489564316][3787 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_11c00150-af25-4988-a168-4a3710f37fd9","id":"QR_11c00150-af25-4988-a168-4a3710f37fd9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:03:23][353881489564316][3943 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=3343 [2025-08-26 12:03:23][353881489564316][3944 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-08-26 12:03:23][353881489564316][3944 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:04:04][350013883082561][0 ms][INFO] === Request start === [2025-08-26 12:04:04][350013883082561][1 ms][DEBUG] START check_scloud [2025-08-26 12:04:04][350013883082561][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:04:04][350013883082561][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 24097 11216 23887800 138720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:04:04][350013883082561][284 ms][DEBUG] targetPkg: running [2025-08-26 12:04:04][350013883082561][285 ms][DEBUG] END check_scloud in 284 ms [2025-08-26 12:04:04][350013883082561][285 ms][DEBUG] START check_boot_completed [2025-08-26 12:04:04][350013883082561][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:04:04][350013883082561][330 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:04:04][350013883082561][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:04:04][350013883082561][393 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 12:04:04][350013883082561][393 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-26 12:04:04][350013883082561][393 ms][DEBUG] START check_internet [2025-08-26 12:04:04][350013883082561][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:04:04][350013883082561][908 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.920/199.920/199.920/0.000 ms\n [2025-08-26 12:04:04][350013883082561][909 ms][DEBUG] check_internet: online [2025-08-26 12:04:04][350013883082561][909 ms][DEBUG] END check_internet in 515 ms [2025-08-26 12:04:04][350013883082561][909 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:04:04][350013883082561][909 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883082561\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5891\"}'\'' -e'"" [2025-08-26 12:04:04][350013883082561][909 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:04:04][350013883082561][909 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883082561\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5891\"}'\'' -e'"" [2025-08-26 12:04:08][350013883082561][4626 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8ee4d20b-8e0b-4dd6-bb36-8825ab07580e","id":"QR_8ee4d20b-8e0b-4dd6-bb36-8825ab07580e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:04:08][350013883082561][4782 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-08-26 12:04:08][350013883082561][4782 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-26 12:04:08][350013883082561][4782 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:04:10][351272332174614][0 ms][INFO] === Request start === [2025-08-26 12:04:10][351272332174614][0 ms][DEBUG] START check_scloud [2025-08-26 12:04:10][351272332174614][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:04:10][351272332174614][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 24097 11216 24036288 149788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:04:10][351272332174614][259 ms][DEBUG] targetPkg: running [2025-08-26 12:04:10][351272332174614][259 ms][DEBUG] END check_scloud in 259 ms [2025-08-26 12:04:10][351272332174614][259 ms][DEBUG] START check_boot_completed [2025-08-26 12:04:10][351272332174614][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:04:10][351272332174614][306 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:04:10][351272332174614][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:04:10][351272332174614][384 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 12:04:10][351272332174614][384 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 12:04:10][351272332174614][384 ms][DEBUG] START check_internet [2025-08-26 12:04:10][351272332174614][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:04:11][351272332174614][711 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.158/223.158/223.158/0.000 ms\n [2025-08-26 12:04:11][351272332174614][712 ms][DEBUG] check_internet: online [2025-08-26 12:04:11][351272332174614][712 ms][DEBUG] END check_internet in 328 ms [2025-08-26 12:04:11][351272332174614][712 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:04:11][351272332174614][712 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272332174614\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5490\"}'\'' -e'"" [2025-08-26 12:04:11][351272332174614][712 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:04:11][351272332174614][712 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272332174614\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5490\"}'\'' -e'"" [2025-08-26 12:04:14][351272332174614][4257 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_faf91a89-2a33-4437-8abd-7238b4fff667","id":"QR_faf91a89-2a33-4437-8abd-7238b4fff667","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:04:14][351272332174614][4414 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-08-26 12:04:14][351272332174614][4414 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-26 12:04:14][351272332174614][4414 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:07:03][350013881351067][1 ms][INFO] === Request start === [2025-08-26 12:07:03][350013881351067][1 ms][DEBUG] START check_scloud [2025-08-26 12:07:03][350013881351067][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:07:03][350013881351067][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 24097 11216 24125392 161132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:07:03][350013881351067][314 ms][DEBUG] targetPkg: running [2025-08-26 12:07:03][350013881351067][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-26 12:07:03][350013881351067][314 ms][DEBUG] START check_boot_completed [2025-08-26 12:07:03][350013881351067][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:07:03][350013881351067][345 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 12:07:03][350013881351067][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:07:03][350013881351067][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:07:03][350013881351067][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 12:07:03][350013881351067][392 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:07:03][350013881351067][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881351067\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1525\"}'\'' -e'"" [2025-08-26 12:07:03][350013881351067][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:07:03][350013881351067][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881351067\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1525\"}'\'' -e'"" [2025-08-26 12:07:07][350013881351067][4297 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7c597603-7ccc-46ad-9203-fff32a4e066c","id":"QR_7c597603-7ccc-46ad-9203-fff32a4e066c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:07:07][350013881351067][4454 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-08-26 12:07:07][350013881351067][4454 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-26 12:07:07][350013881351067][4454 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:07:10][357576777099357][0 ms][INFO] === Request start === [2025-08-26 12:07:10][357576777099357][1 ms][DEBUG] START check_scloud [2025-08-26 12:07:10][357576777099357][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:07:10][357576777099357][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 24097 11216 24293656 172136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:07:10][357576777099357][272 ms][DEBUG] targetPkg: running [2025-08-26 12:07:10][357576777099357][272 ms][DEBUG] END check_scloud in 271 ms [2025-08-26 12:07:10][357576777099357][272 ms][DEBUG] START check_boot_completed [2025-08-26 12:07:10][357576777099357][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:07:10][357576777099357][319 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:07:10][357576777099357][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:07:10][357576777099357][366 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:07:10][357576777099357][366 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 12:07:10][357576777099357][366 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:07:10][357576777099357][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576777099357\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6815\"}'\'' -e'"" [2025-08-26 12:07:10][357576777099357][366 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:07:10][357576777099357][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576777099357\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6815\"}'\'' -e'"" [2025-08-26 12:07:13][357576777099357][3912 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb92f996-cbc8-4042-939a-395b8b459758","id":"QR_cb92f996-cbc8-4042-939a-395b8b459758","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:07:14][357576777099357][4068 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-08-26 12:07:14][357576777099357][4068 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-26 12:07:14][357576777099357][4068 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:07:16][352665181728449][0 ms][INFO] === Request start === [2025-08-26 12:07:16][352665181728449][1 ms][DEBUG] START check_scloud [2025-08-26 12:07:16][352665181728449][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:07:16][352665181728449][294 ms][DEBUG] SU: done in 294 ms; outu0_a118 24097 11216 24413536 183880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:07:16][352665181728449][294 ms][DEBUG] targetPkg: running [2025-08-26 12:07:16][352665181728449][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-26 12:07:16][352665181728449][295 ms][DEBUG] START check_boot_completed [2025-08-26 12:07:16][352665181728449][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:07:16][352665181728449][341 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:07:16][352665181728449][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:07:16][352665181728449][404 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:07:16][352665181728449][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:07:16][352665181728449][404 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:07:16][352665181728449][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665181728449\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3703\"}'\'' -e'"" [2025-08-26 12:07:16][352665181728449][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:07:16][352665181728449][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665181728449\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3703\"}'\'' -e'"" [2025-08-26 12:07:20][352665181728449][4028 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_62ee2885-72d4-46b4-8589-2640f0615f9d","id":"QR_62ee2885-72d4-46b4-8589-2640f0615f9d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:07:20][352665181728449][4184 ms][DEBUG] proc_open done in 3779 ms; code=255; res.len=3343 [2025-08-26 12:07:20][352665181728449][4184 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-26 12:07:20][352665181728449][4184 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:08:03][350572360572626][0 ms][INFO] === Request start === [2025-08-26 12:08:03][350572360572626][1 ms][DEBUG] START check_scloud [2025-08-26 12:08:03][350572360572626][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:08:03][350572360572626][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 24097 11216 24535356 194948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:08:03][350572360572626][316 ms][DEBUG] targetPkg: running [2025-08-26 12:08:03][350572360572626][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-26 12:08:03][350572360572626][316 ms][DEBUG] START check_boot_completed [2025-08-26 12:08:03][350572360572626][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:08:03][350572360572626][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:08:03][350572360572626][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:08:03][350572360572626][425 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:08:03][350572360572626][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:08:03][350572360572626][425 ms][DEBUG] START check_internet [2025-08-26 12:08:03][350572360572626][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:08:04][350572360572626][753 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.588/199.588/199.588/0.000 ms\n [2025-08-26 12:08:04][350572360572626][753 ms][DEBUG] check_internet: online [2025-08-26 12:08:04][350572360572626][753 ms][DEBUG] END check_internet in 328 ms [2025-08-26 12:08:04][350572360572626][753 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:08:04][350572360572626][753 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350572360572626\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SOZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4558\"}'\'' -e'"" [2025-08-26 12:08:04][350572360572626][753 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:08:04][350572360572626][753 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350572360572626\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SOZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4558\"}'\'' -e'"" [2025-08-26 12:08:07][350572360572626][4580 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_96ac8ee1-1d67-4373-9c47-539a7307c141","id":"QR_96ac8ee1-1d67-4373-9c47-539a7307c141","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:08:08][350572360572626][4736 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-26 12:08:08][350572360572626][4736 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-26 12:08:08][350572360572626][4736 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:08:10][355326628805442][0 ms][INFO] === Request start === [2025-08-26 12:08:10][355326628805442][1 ms][DEBUG] START check_scloud [2025-08-26 12:08:10][355326628805442][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:08:10][355326628805442][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 24097 11216 24699844 206604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:08:10][355326628805442][315 ms][DEBUG] targetPkg: running [2025-08-26 12:08:10][355326628805442][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-26 12:08:10][355326628805442][315 ms][DEBUG] START check_boot_completed [2025-08-26 12:08:10][355326628805442][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:08:10][355326628805442][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:08:10][355326628805442][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:08:11][355326628805442][439 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 12:08:11][355326628805442][439 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 12:08:11][355326628805442][439 ms][DEBUG] START check_internet [2025-08-26 12:08:11][355326628805442][439 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:08:11][355326628805442][752 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.319/199.319/199.319/0.000 ms\n [2025-08-26 12:08:11][355326628805442][752 ms][DEBUG] check_internet: online [2025-08-26 12:08:11][355326628805442][752 ms][DEBUG] END check_internet in 313 ms [2025-08-26 12:08:11][355326628805442][752 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:08:11][355326628805442][752 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326628805442\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8775\"}'\'' -e'"" [2025-08-26 12:08:11][355326628805442][752 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:08:11][355326628805442][752 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355326628805442\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8775\"}'\'' -e'"" [2025-08-26 12:08:15][355326628805442][4563 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0f897056-f915-4c57-8b2c-5e7b50b8cd5a","id":"QR_0f897056-f915-4c57-8b2c-5e7b50b8cd5a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:08:15][355326628805442][4719 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-26 12:08:15][355326628805442][4719 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-26 12:08:15][355326628805442][4720 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:12:03][352927941092833][1 ms][INFO] === Request start === [2025-08-26 12:12:03][352927941092833][1 ms][DEBUG] START check_scloud [2025-08-26 12:12:03][352927941092833][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:12:04][352927941092833][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 24097 11216 24825988 201416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:12:04][352927941092833][277 ms][DEBUG] targetPkg: running [2025-08-26 12:12:04][352927941092833][277 ms][DEBUG] END check_scloud in 276 ms [2025-08-26 12:12:04][352927941092833][277 ms][DEBUG] START check_boot_completed [2025-08-26 12:12:04][352927941092833][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:12:04][352927941092833][308 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 12:12:04][352927941092833][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:12:04][352927941092833][356 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:12:04][352927941092833][356 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 12:12:04][352927941092833][356 ms][DEBUG] START check_internet [2025-08-26 12:12:04][352927941092833][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:12:04][352927941092833][808 ms][DEBUG] SU: done in 452 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.786/201.786/201.786/0.000 ms\n [2025-08-26 12:12:04][352927941092833][809 ms][DEBUG] check_internet: online [2025-08-26 12:12:04][352927941092833][809 ms][DEBUG] END check_internet in 453 ms [2025-08-26 12:12:04][352927941092833][809 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:12:04][352927941092833][809 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927941092833\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4205\"}'\'' -e'"" [2025-08-26 12:12:04][352927941092833][809 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:12:04][352927941092833][809 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927941092833\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4205\"}'\'' -e'"" [2025-08-26 12:12:08][352927941092833][4604 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_725f73ca-4dc2-41f9-8951-7f7e446e120d","id":"QR_725f73ca-4dc2-41f9-8951-7f7e446e120d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:12:08][352927941092833][4760 ms][DEBUG] proc_open done in 3951 ms; code=255; res.len=3343 [2025-08-26 12:12:08][352927941092833][4761 ms][DEBUG] END runCmdUntilRes#1 in 3951 ms [2025-08-26 12:12:08][352927941092833][4761 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:13:03][350900922021107][0 ms][INFO] === Request start === [2025-08-26 12:13:03][350900922021107][0 ms][DEBUG] START check_scloud [2025-08-26 12:13:03][350900922021107][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:13:03][350900922021107][320 ms][DEBUG] SU: done in 320 ms; outu0_a118 24097 11216 24990888 191776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:13:03][350900922021107][320 ms][DEBUG] targetPkg: running [2025-08-26 12:13:03][350900922021107][321 ms][DEBUG] END check_scloud in 320 ms [2025-08-26 12:13:03][350900922021107][321 ms][DEBUG] START check_boot_completed [2025-08-26 12:13:03][350900922021107][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:13:03][350900922021107][367 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:13:03][350900922021107][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:13:03][350900922021107][414 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:13:03][350900922021107][414 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 12:13:03][350900922021107][414 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:13:03][350900922021107][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900922021107\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7202\"}'\'' -e'"" [2025-08-26 12:13:03][350900922021107][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:13:03][350900922021107][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900922021107\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7202\"}'\'' -e'"" [2025-08-26 12:13:07][350900922021107][4022 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_efcdbf69-f2ed-4e01-be0c-4150485f8632","id":"QR_efcdbf69-f2ed-4e01-be0c-4150485f8632","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:13:07][350900922021107][4179 ms][DEBUG] proc_open done in 3765 ms; code=255; res.len=3343 [2025-08-26 12:13:07][350900922021107][4179 ms][DEBUG] END runCmdUntilRes#1 in 3765 ms [2025-08-26 12:13:07][350900922021107][4179 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:13:12][352971687148938][0 ms][INFO] === Request start === [2025-08-26 12:13:12][352971687148938][1 ms][DEBUG] START check_scloud [2025-08-26 12:13:12][352971687148938][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:13:12][352971687148938][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 24097 11216 25155888 199932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:13:12][352971687148938][322 ms][DEBUG] targetPkg: running [2025-08-26 12:13:12][352971687148938][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-26 12:13:12][352971687148938][322 ms][DEBUG] START check_boot_completed [2025-08-26 12:13:12][352971687148938][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:13:12][352971687148938][368 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:13:12][352971687148938][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:13:12][352971687148938][431 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:13:12][352971687148938][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:13:12][352971687148938][431 ms][DEBUG] rawBody.length=1149 [2025-08-26 12:13:12][352971687148938][431 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352971687148938\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CWW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1065\"}'\'' -e'"" [2025-08-26 12:13:12][352971687148938][431 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:13:12][352971687148938][431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352971687148938\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CWW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1065\"}'\'' -e'"" [2025-08-26 12:13:16][352971687148938][4586 ms][DEBUG] proc_open done in 4155 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 12:13:16][352971687148938][4586 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-26 12:13:16][352971687148938][4586 ms][WARN] Detected error: Process with pid 24097 either refused to load frida-agent, or terminated during injection [2025-08-26 12:13:16][352971687148938][4586 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 12:13:17][352971687148938][4742 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 12:13:17][352971687148938][4742 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 12:13:17][352971687148938][4742 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 12:13:17][352971687148938][4868 ms][DEBUG] SU: done in 126 ms; out [2025-08-26 12:13:17][352971687148938][4868 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 12:13:17][352971687148938][5023 ms][DEBUG] SU: done in 155 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 12:13:19][352971687148938][7038 ms][DEBUG] START check_boot_completed [2025-08-26 12:13:19][352971687148938][7038 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:13:19][352971687148938][7085 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:13:19][352971687148938][7085 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:13:19][352971687148938][7132 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:13:19][352971687148938][7132 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 12:13:22][352971687148938][10147 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 12:13:22][352971687148938][10147 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352971687148938\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CWW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1065\"}'\'' -e'"" [2025-08-26 12:13:27][352971687148938][15302 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6a55fc4f-dc6c-4e27-8a0e-dd3fdc0bb00f","id":"QR_6a55fc4f-dc6c-4e27-8a0e-dd3fdc0bb00f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:13:27][352971687148938][15458 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-08-26 12:13:27][352971687148938][15458 ms][DEBUG] END runCmdUntilRes#2 in 5311 ms [2025-08-26 12:13:27][352971687148938][15458 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:13:32][353475122025999][0 ms][INFO] === Request start === [2025-08-26 12:13:32][353475122025999][1 ms][DEBUG] START check_scloud [2025-08-26 12:13:32][353475122025999][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:13:32][353475122025999][241 ms][DEBUG] SU: done in 240 ms; outu0_a118 25887 11216 23794908 126204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:13:32][353475122025999][241 ms][DEBUG] targetPkg: running [2025-08-26 12:13:32][353475122025999][241 ms][DEBUG] END check_scloud in 240 ms [2025-08-26 12:13:32][353475122025999][241 ms][DEBUG] START check_boot_completed [2025-08-26 12:13:32][353475122025999][241 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:13:32][353475122025999][288 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:13:32][353475122025999][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:13:32][353475122025999][350 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:13:32][353475122025999][350 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:13:32][353475122025999][350 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:13:32][353475122025999][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475122025999\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9743\"}'\'' -e'"" [2025-08-26 12:13:32][353475122025999][350 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:13:32][353475122025999][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475122025999\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9743\"}'\'' -e'"" [2025-08-26 12:13:36][353475122025999][4005 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c637d8eb-d1cb-486a-b53e-e4a5458193a9","id":"QR_c637d8eb-d1cb-486a-b53e-e4a5458193a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:13:36][353475122025999][4161 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-26 12:13:36][353475122025999][4162 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-26 12:13:36][353475122025999][4162 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:14:03][352469855805660][0 ms][INFO] === Request start === [2025-08-26 12:14:03][352469855805660][1 ms][DEBUG] START check_scloud [2025-08-26 12:14:03][352469855805660][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:14:04][352469855805660][320 ms][DEBUG] SU: done in 320 ms; outu0_a118 25887 11216 23891896 139336 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:14:04][352469855805660][320 ms][DEBUG] targetPkg: running [2025-08-26 12:14:04][352469855805660][321 ms][DEBUG] END check_scloud in 320 ms [2025-08-26 12:14:04][352469855805660][321 ms][DEBUG] START check_boot_completed [2025-08-26 12:14:04][352469855805660][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:14:04][352469855805660][367 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:14:04][352469855805660][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:14:04][352469855805660][430 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:14:04][352469855805660][430 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:14:04][352469855805660][430 ms][DEBUG] START check_internet [2025-08-26 12:14:04][352469855805660][430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:14:04][352469855805660][945 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.514/201.514/201.514/0.000 ms\n [2025-08-26 12:14:04][352469855805660][945 ms][DEBUG] check_internet: online [2025-08-26 12:14:04][352469855805660][945 ms][DEBUG] END check_internet in 515 ms [2025-08-26 12:14:04][352469855805660][945 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:14:04][352469855805660][946 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469855805660\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3871\"}'\'' -e'"" [2025-08-26 12:14:04][352469855805660][946 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:14:04][352469855805660][946 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469855805660\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3871\"}'\'' -e'"" [2025-08-26 12:14:08][352469855805660][4429 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_00484802-7d0d-4d2f-843f-38cb6f3e93c9","id":"QR_00484802-7d0d-4d2f-843f-38cb6f3e93c9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:14:08][352469855805660][4585 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=3343 [2025-08-26 12:14:08][352469855805660][4585 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-08-26 12:14:08][352469855805660][4585 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:14:10][352546732025214][1 ms][INFO] === Request start === [2025-08-26 12:14:10][352546732025214][1 ms][DEBUG] START check_scloud [2025-08-26 12:14:10][352546732025214][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:14:11][352546732025214][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 25887 11216 24014912 151032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:14:11][352546732025214][317 ms][DEBUG] targetPkg: running [2025-08-26 12:14:11][352546732025214][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-26 12:14:11][352546732025214][317 ms][DEBUG] START check_boot_completed [2025-08-26 12:14:11][352546732025214][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:14:11][352546732025214][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:14:11][352546732025214][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:14:11][352546732025214][442 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 12:14:11][352546732025214][442 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 12:14:11][352546732025214][442 ms][DEBUG] START check_internet [2025-08-26 12:14:11][352546732025214][442 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:14:11][352546732025214][709 ms][DEBUG] SU: done in 267 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=156 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 156.751/156.751/156.751/0.000 ms\n [2025-08-26 12:14:11][352546732025214][709 ms][DEBUG] check_internet: online [2025-08-26 12:14:11][352546732025214][709 ms][DEBUG] END check_internet in 268 ms [2025-08-26 12:14:11][352546732025214][709 ms][DEBUG] rawBody.length=1150 [2025-08-26 12:14:11][352546732025214][709 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352546732025214\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8014\"}'\'' -e'"" [2025-08-26 12:14:11][352546732025214][710 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:14:11][352546732025214][710 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352546732025214\",\"model\":\"SM-S166VL\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8014\"}'\'' -e'"" [2025-08-26 12:14:16][352546732025214][5768 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_24177db7-2137-43ac-8b99-8325207d70e8","id":"QR_24177db7-2137-43ac-8b99-8325207d70e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:14:16][352546732025214][5925 ms][DEBUG] proc_open done in 5215 ms; code=255; res.len=3343 [2025-08-26 12:14:16][352546732025214][5925 ms][DEBUG] END runCmdUntilRes#1 in 5215 ms [2025-08-26 12:14:16][352546732025214][5925 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:14:20][353154433988670][0 ms][INFO] === Request start === [2025-08-26 12:14:20][353154433988670][1 ms][DEBUG] START check_scloud [2025-08-26 12:14:20][353154433988670][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:14:20][353154433988670][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 25887 11216 24176136 161544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:14:20][353154433988670][318 ms][DEBUG] targetPkg: running [2025-08-26 12:14:20][353154433988670][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-26 12:14:20][353154433988670][318 ms][DEBUG] START check_boot_completed [2025-08-26 12:14:20][353154433988670][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:14:20][353154433988670][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:14:20][353154433988670][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:14:20][353154433988670][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:14:20][353154433988670][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 12:14:20][353154433988670][411 ms][DEBUG] START check_internet [2025-08-26 12:14:20][353154433988670][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:14:21][353154433988670][709 ms][DEBUG] SU: done in 298 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.898/203.898/203.898/0.000 ms\n [2025-08-26 12:14:21][353154433988670][710 ms][DEBUG] check_internet: online [2025-08-26 12:14:21][353154433988670][710 ms][DEBUG] END check_internet in 298 ms [2025-08-26 12:14:21][353154433988670][710 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:14:21][353154433988670][710 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353154433988670\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5946\"}'\'' -e'"" [2025-08-26 12:14:21][353154433988670][710 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:14:21][353154433988670][710 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353154433988670\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5946\"}'\'' -e'"" [2025-08-26 12:14:24][353154433988670][4286 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 12:14:25][353154433988670][4442 ms][DEBUG] proc_open done in 3732 ms; code=255; res.len=107 [2025-08-26 12:14:25][353154433988670][4442 ms][DEBUG] END runCmdUntilRes#1 in 3732 ms [2025-08-26 12:14:25][353154433988670][4442 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 12:14:25][][0 ms][INFO] === Request start === [2025-08-26 12:14:25][][1 ms][DEBUG] START check_scloud [2025-08-26 12:14:25][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:14:25][][290 ms][DEBUG] SU: done in 290 ms; outu0_a118 25887 11216 24316588 173332 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:14:25][][290 ms][DEBUG] targetPkg: running [2025-08-26 12:14:25][][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-26 12:14:25][][291 ms][DEBUG] START check_boot_completed [2025-08-26 12:14:25][][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:14:25][][337 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:14:25][][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:14:25][][415 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 12:14:25][][415 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 12:14:25][][415 ms][DEBUG] START check_internet [2025-08-26 12:14:25][][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:14:25][][650 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=116 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 116.911/116.911/116.911/0.000 ms\n [2025-08-26 12:14:25][][650 ms][DEBUG] check_internet: online [2025-08-26 12:14:25][][650 ms][DEBUG] END check_internet in 235 ms [2025-08-26 12:14:25][][650 ms][DEBUG] rawBody.length=1129 [2025-08-26 12:14:25][][650 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCY11NF0DF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2834\"}'\'' -e'"" [2025-08-26 12:14:25][][650 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:14:25][][650 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M356B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCY11NF0DF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2834\"}'\'' -e'"" [2025-08-26 12:14:29][][3930 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 12:14:29][][4086 ms][DEBUG] proc_open done in 3436 ms; code=255; res.len=107 [2025-08-26 12:14:29][][4086 ms][DEBUG] END runCmdUntilRes#1 in 3436 ms [2025-08-26 12:14:29][][4086 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 12:14:30][352891564893028][0 ms][INFO] === Request start === [2025-08-26 12:14:30][352891564893028][1 ms][DEBUG] START check_scloud [2025-08-26 12:14:30][352891564893028][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:14:30][352891564893028][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 25887 11216 24445996 184192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:14:30][352891564893028][272 ms][DEBUG] targetPkg: running [2025-08-26 12:14:30][352891564893028][272 ms][DEBUG] END check_scloud in 271 ms [2025-08-26 12:14:30][352891564893028][272 ms][DEBUG] START check_boot_completed [2025-08-26 12:14:30][352891564893028][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:14:30][352891564893028][303 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 12:14:30][352891564893028][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:14:30][352891564893028][350 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:14:30][352891564893028][350 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 12:14:30][352891564893028][350 ms][DEBUG] START check_internet [2025-08-26 12:14:30][352891564893028][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:14:30][352891564893028][568 ms][DEBUG] SU: done in 218 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=115 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 115.024/115.024/115.024/0.000 ms\n [2025-08-26 12:14:30][352891564893028][569 ms][DEBUG] check_internet: online [2025-08-26 12:14:30][352891564893028][569 ms][DEBUG] END check_internet in 219 ms [2025-08-26 12:14:30][352891564893028][569 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:14:30][352891564893028][569 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352891564893028\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3134\"}'\'' -e'"" [2025-08-26 12:14:30][352891564893028][569 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:14:30][352891564893028][569 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352891564893028\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3134\"}'\'' -e'"" [2025-08-26 12:14:34][352891564893028][3927 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cebf76f5-0a0d-4658-b7fd-6409a2771edf","id":"QR_cebf76f5-0a0d-4658-b7fd-6409a2771edf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:14:34][352891564893028][4083 ms][DEBUG] proc_open done in 3514 ms; code=255; res.len=3343 [2025-08-26 12:14:34][352891564893028][4083 ms][DEBUG] END runCmdUntilRes#1 in 3514 ms [2025-08-26 12:14:34][352891564893028][4083 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:15:03][351272336608344][0 ms][INFO] === Request start === [2025-08-26 12:15:03][351272336608344][1 ms][DEBUG] START check_scloud [2025-08-26 12:15:03][351272336608344][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:15:03][351272336608344][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 25887 11216 24506404 195876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:15:03][351272336608344][314 ms][DEBUG] targetPkg: running [2025-08-26 12:15:03][351272336608344][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-26 12:15:03][351272336608344][314 ms][DEBUG] START check_boot_completed [2025-08-26 12:15:03][351272336608344][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:15:04][351272336608344][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:15:04][351272336608344][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:15:04][351272336608344][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:15:04][351272336608344][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 12:15:04][351272336608344][407 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:15:04][351272336608344][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272336608344\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5385\"}'\'' -e'"" [2025-08-26 12:15:04][351272336608344][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:15:04][351272336608344][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272336608344\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5385\"}'\'' -e'"" [2025-08-26 12:15:08][351272336608344][4359 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2e86f81d-3b39-4211-b920-f0b901bf4b8e","id":"QR_2e86f81d-3b39-4211-b920-f0b901bf4b8e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:15:08][351272336608344][4515 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-26 12:15:08][351272336608344][4516 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-26 12:15:08][351272336608344][4516 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:15:10][352698476362202][0 ms][INFO] === Request start === [2025-08-26 12:15:10][352698476362202][1 ms][DEBUG] START check_scloud [2025-08-26 12:15:10][352698476362202][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:15:10][352698476362202][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 25887 11216 24634540 206968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:15:10][352698476362202][318 ms][DEBUG] targetPkg: running [2025-08-26 12:15:10][352698476362202][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-26 12:15:10][352698476362202][318 ms][DEBUG] START check_boot_completed [2025-08-26 12:15:10][352698476362202][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:15:10][352698476362202][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:15:10][352698476362202][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:15:10][352698476362202][427 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:15:10][352698476362202][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:15:10][352698476362202][427 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:15:10][352698476362202][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698476362202\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1603\"}'\'' -e'"" [2025-08-26 12:15:10][352698476362202][427 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:15:10][352698476362202][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698476362202\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1603\"}'\'' -e'"" [2025-08-26 12:15:14][352698476362202][4035 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c4005a99-af5d-456e-9674-04b94d3d4ad7","id":"QR_c4005a99-af5d-456e-9674-04b94d3d4ad7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:15:14][352698476362202][4192 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-08-26 12:15:14][352698476362202][4192 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-08-26 12:15:14][352698476362202][4192 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:18:03][350814495187098][1 ms][INFO] === Request start === [2025-08-26 12:18:03][350814495187098][1 ms][DEBUG] START check_scloud [2025-08-26 12:18:03][350814495187098][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:18:03][350814495187098][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 25887 11216 24780120 218196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:18:03][350814495187098][310 ms][DEBUG] targetPkg: running [2025-08-26 12:18:03][350814495187098][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 12:18:03][350814495187098][310 ms][DEBUG] START check_boot_completed [2025-08-26 12:18:03][350814495187098][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:18:03][350814495187098][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:18:03][350814495187098][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:18:03][350814495187098][419 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:18:03][350814495187098][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:18:03][350814495187098][419 ms][DEBUG] START check_internet [2025-08-26 12:18:03][350814495187098][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:18:04][350814495187098][747 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=179 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 179.374/179.374/179.374/0.000 ms\n [2025-08-26 12:18:04][350814495187098][747 ms][DEBUG] check_internet: online [2025-08-26 12:18:04][350814495187098][747 ms][DEBUG] END check_internet in 328 ms [2025-08-26 12:18:04][350814495187098][747 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:18:04][350814495187098][747 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814495187098\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8009\"}'\'' -e'"" [2025-08-26 12:18:04][350814495187098][747 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:18:04][350814495187098][747 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814495187098\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8009\"}'\'' -e'"" [2025-08-26 12:18:08][350814495187098][4964 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5c57865e-84ce-4ad5-9615-7dd48d98cf98","id":"QR_5c57865e-84ce-4ad5-9615-7dd48d98cf98","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:18:08][350814495187098][5120 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3343 [2025-08-26 12:18:08][350814495187098][5120 ms][DEBUG] END runCmdUntilRes#1 in 4373 ms [2025-08-26 12:18:08][350814495187098][5120 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:19:02][353628426685633][0 ms][INFO] === Request start === [2025-08-26 12:19:02][353628426685633][1 ms][DEBUG] START check_scloud [2025-08-26 12:19:02][353628426685633][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:19:02][353628426685633][315 ms][DEBUG] SU: done in 315 ms; outu0_a118 25887 11216 24945084 230228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:19:02][353628426685633][315 ms][DEBUG] targetPkg: running [2025-08-26 12:19:02][353628426685633][315 ms][DEBUG] END check_scloud in 315 ms [2025-08-26 12:19:02][353628426685633][316 ms][DEBUG] START check_boot_completed [2025-08-26 12:19:02][353628426685633][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:19:02][353628426685633][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:19:02][353628426685633][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:19:03][353628426685633][424 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:19:03][353628426685633][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:19:03][353628426685633][425 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:19:03][353628426685633][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628426685633\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4026\"}'\'' -e'"" [2025-08-26 12:19:03][353628426685633][425 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:19:03][353628426685633][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628426685633\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4026\"}'\'' -e'"" [2025-08-26 12:19:06][353628426685633][4017 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_353f163b-2bd2-4199-a210-aac716a49ca0","id":"QR_353f163b-2bd2-4199-a210-aac716a49ca0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:19:06][353628426685633][4173 ms][DEBUG] proc_open done in 3748 ms; code=255; res.len=3343 [2025-08-26 12:19:06][353628426685633][4173 ms][DEBUG] END runCmdUntilRes#1 in 3748 ms [2025-08-26 12:19:06][353628426685633][4173 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:19:08][353285384649851][0 ms][INFO] === Request start === [2025-08-26 12:19:08][353285384649851][1 ms][DEBUG] START check_scloud [2025-08-26 12:19:08][353285384649851][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:19:08][353285384649851][298 ms][DEBUG] SU: done in 298 ms; outu0_a118 25887 11216 25126472 240992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:19:08][353285384649851][298 ms][DEBUG] targetPkg: running [2025-08-26 12:19:08][353285384649851][298 ms][DEBUG] END check_scloud in 298 ms [2025-08-26 12:19:08][353285384649851][299 ms][DEBUG] START check_boot_completed [2025-08-26 12:19:08][353285384649851][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:19:08][353285384649851][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:19:08][353285384649851][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:19:08][353285384649851][408 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 12:19:08][353285384649851][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:19:08][353285384649851][408 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:19:08][353285384649851][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353285384649851\",\"model\":\"SM-F721N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9566\"}'\'' -e'"" [2025-08-26 12:19:08][353285384649851][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:19:08][353285384649851][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353285384649851\",\"model\":\"SM-F721N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9566\"}'\'' -e'"" [2025-08-26 12:19:12][353285384649851][4079 ms][DEBUG] proc_open done in 3671 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 12:19:12][353285384649851][4079 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-26 12:19:12][353285384649851][4079 ms][WARN] Detected error: Process with pid 25887 either refused to load frida-agent, or terminated during injection [2025-08-26 12:19:12][353285384649851][4079 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 12:19:12][353285384649851][4219 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 12:19:12][353285384649851][4219 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 12:19:12][353285384649851][4220 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 12:19:12][353285384649851][4344 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 12:19:12][353285384649851][4344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 12:19:12][353285384649851][4532 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 12:19:14][353285384649851][6547 ms][DEBUG] START check_boot_completed [2025-08-26 12:19:14][353285384649851][6547 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:19:14][353285384649851][6594 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:19:14][353285384649851][6594 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:19:14][353285384649851][6687 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 12:19:14][353285384649851][6688 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-26 12:19:17][353285384649851][9702 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 12:19:17][353285384649851][9702 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353285384649851\",\"model\":\"SM-F721N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9566\"}'\'' -e'"" [2025-08-26 12:19:21][353285384649851][13279 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e3b51811-674e-4cfe-94bb-283c8703f261","id":"QR_e3b51811-674e-4cfe-94bb-283c8703f261","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:19:21][353285384649851][13436 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-08-26 12:19:21][353285384649851][13436 ms][DEBUG] END runCmdUntilRes#2 in 3734 ms [2025-08-26 12:19:21][353285384649851][13436 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:19:24][351617731039992][0 ms][INFO] === Request start === [2025-08-26 12:19:24][351617731039992][1 ms][DEBUG] START check_scloud [2025-08-26 12:19:24][351617731039992][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:19:24][351617731039992][247 ms][DEBUG] SU: done in 246 ms; outu0_a118 27116 11216 23781596 125348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:19:24][351617731039992][247 ms][DEBUG] targetPkg: running [2025-08-26 12:19:24][351617731039992][247 ms][DEBUG] END check_scloud in 246 ms [2025-08-26 12:19:24][351617731039992][247 ms][DEBUG] START check_boot_completed [2025-08-26 12:19:24][351617731039992][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:19:24][351617731039992][294 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:19:24][351617731039992][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:19:24][351617731039992][387 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 12:19:24][351617731039992][387 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 12:19:24][351617731039992][387 ms][DEBUG] rawBody.length=1149 [2025-08-26 12:19:24][351617731039992][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351617731039992\",\"model\":\"SM-A546W\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1172\"}'\'' -e'"" [2025-08-26 12:19:24][351617731039992][388 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:19:24][351617731039992][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351617731039992\",\"model\":\"SM-A546W\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1172\"}'\'' -e'"" [2025-08-26 12:19:28][351617731039992][4667 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_97fb29bd-504e-43fa-b710-c1da590ab414","id":"QR_97fb29bd-504e-43fa-b710-c1da590ab414","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:19:28][351617731039992][4824 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-08-26 12:19:28][351617731039992][4824 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-08-26 12:19:28][351617731039992][4824 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:20:03][352053267330994][0 ms][INFO] === Request start === [2025-08-26 12:20:03][352053267330994][1 ms][DEBUG] START check_scloud [2025-08-26 12:20:03][352053267330994][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:20:03][352053267330994][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 27116 11216 23865272 138788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:20:03][352053267330994][298 ms][DEBUG] targetPkg: running [2025-08-26 12:20:03][352053267330994][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-26 12:20:03][352053267330994][298 ms][DEBUG] START check_boot_completed [2025-08-26 12:20:03][352053267330994][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:20:03][352053267330994][329 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 12:20:03][352053267330994][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:20:03][352053267330994][376 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:20:03][352053267330994][376 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 12:20:03][352053267330994][376 ms][DEBUG] START check_internet [2025-08-26 12:20:03][352053267330994][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:20:03][352053267330994][860 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.577/202.577/202.577/0.000 ms\n [2025-08-26 12:20:03][352053267330994][861 ms][DEBUG] check_internet: online [2025-08-26 12:20:03][352053267330994][861 ms][DEBUG] END check_internet in 484 ms [2025-08-26 12:20:03][352053267330994][861 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:20:03][352053267330994][861 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053267330994\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3943\"}'\'' -e'"" [2025-08-26 12:20:03][352053267330994][861 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:20:03][352053267330994][861 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053267330994\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3943\"}'\'' -e'"" [2025-08-26 12:20:07][352053267330994][4484 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c8e7b3b6-9b8c-4b61-8a4e-291742bdb609","id":"QR_c8e7b3b6-9b8c-4b61-8a4e-291742bdb609","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:20:07][352053267330994][4641 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-08-26 12:20:07][352053267330994][4641 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-26 12:20:07][352053267330994][4641 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:20:08][351681597832346][1 ms][INFO] === Request start === [2025-08-26 12:20:08][351681597832346][1 ms][DEBUG] START check_scloud [2025-08-26 12:20:08][351681597832346][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:20:09][351681597832346][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 27116 11216 24009152 150360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:20:09][351681597832346][291 ms][DEBUG] targetPkg: running [2025-08-26 12:20:09][351681597832346][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-26 12:20:09][351681597832346][291 ms][DEBUG] START check_boot_completed [2025-08-26 12:20:09][351681597832346][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:20:09][351681597832346][338 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:20:09][351681597832346][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:20:09][351681597832346][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:20:09][351681597832346][385 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 12:20:09][351681597832346][385 ms][DEBUG] START check_internet [2025-08-26 12:20:09][351681597832346][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:20:09][351681597832346][619 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=114 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 114.278/114.278/114.278/0.000 ms\n [2025-08-26 12:20:09][351681597832346][619 ms][DEBUG] check_internet: online [2025-08-26 12:20:09][351681597832346][619 ms][DEBUG] END check_internet in 234 ms [2025-08-26 12:20:09][351681597832346][619 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:20:09][351681597832346][619 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681597832346\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8493\"}'\'' -e'"" [2025-08-26 12:20:09][351681597832346][619 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:20:09][351681597832346][620 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681597832346\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8493\"}'\'' -e'"" [2025-08-26 12:20:13][351681597832346][4103 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_337f6974-005f-4a98-bbb0-648ad06501fa","id":"QR_337f6974-005f-4a98-bbb0-648ad06501fa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:20:13][351681597832346][4259 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=3343 [2025-08-26 12:20:13][351681597832346][4259 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-08-26 12:20:13][351681597832346][4259 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:20:14][352600224254483][0 ms][INFO] === Request start === [2025-08-26 12:20:14][352600224254483][1 ms][DEBUG] START check_scloud [2025-08-26 12:20:14][352600224254483][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:20:15][352600224254483][281 ms][DEBUG] SU: done in 280 ms; outu0_a118 27116 11216 24186504 160664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:20:15][352600224254483][281 ms][DEBUG] targetPkg: running [2025-08-26 12:20:15][352600224254483][281 ms][DEBUG] END check_scloud in 280 ms [2025-08-26 12:20:15][352600224254483][281 ms][DEBUG] START check_boot_completed [2025-08-26 12:20:15][352600224254483][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:20:15][352600224254483][312 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 12:20:15][352600224254483][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:20:15][352600224254483][374 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 12:20:15][352600224254483][374 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 12:20:15][352600224254483][374 ms][DEBUG] START check_internet [2025-08-26 12:20:15][352600224254483][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:20:15][352600224254483][608 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=113 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 113.896/113.896/113.896/0.000 ms\n [2025-08-26 12:20:15][352600224254483][608 ms][DEBUG] check_internet: online [2025-08-26 12:20:15][352600224254483][608 ms][DEBUG] END check_internet in 234 ms [2025-08-26 12:20:15][352600224254483][608 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:20:15][352600224254483][608 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600224254483\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6238\"}'\'' -e'"" [2025-08-26 12:20:15][352600224254483][608 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:20:15][352600224254483][609 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600224254483\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6238\"}'\'' -e'"" [2025-08-26 12:20:18][352600224254483][4014 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b32dea8b-216e-4844-8da1-d5a342ec0b6d","id":"QR_b32dea8b-216e-4844-8da1-d5a342ec0b6d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:20:18][352600224254483][4170 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=3343 [2025-08-26 12:20:18][352600224254483][4170 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-08-26 12:20:18][352600224254483][4170 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:20:20][353818878270295][0 ms][INFO] === Request start === [2025-08-26 12:20:20][353818878270295][1 ms][DEBUG] START check_scloud [2025-08-26 12:20:20][353818878270295][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:20:20][353818878270295][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 27116 11216 24359824 171672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:20:20][353818878270295][303 ms][DEBUG] targetPkg: running [2025-08-26 12:20:20][353818878270295][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 12:20:20][353818878270295][303 ms][DEBUG] START check_boot_completed [2025-08-26 12:20:20][353818878270295][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:20:20][353818878270295][349 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:20:20][353818878270295][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:20:20][353818878270295][427 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 12:20:20][353818878270295][427 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 12:20:20][353818878270295][428 ms][DEBUG] START check_internet [2025-08-26 12:20:20][353818878270295][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:20:21][353818878270295][662 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=115 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 115.255/115.255/115.255/0.000 ms\n [2025-08-26 12:20:21][353818878270295][662 ms][DEBUG] check_internet: online [2025-08-26 12:20:21][353818878270295][662 ms][DEBUG] END check_internet in 234 ms [2025-08-26 12:20:21][353818878270295][662 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:20:21][353818878270295][662 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818878270295\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4679\"}'\'' -e'"" [2025-08-26 12:20:21][353818878270295][662 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:20:21][353818878270295][662 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818878270295\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4679\"}'\'' -e'"" [2025-08-26 12:20:24][353818878270295][4364 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e962243-a94e-4275-b21d-e8677d84d779","id":"QR_9e962243-a94e-4275-b21d-e8677d84d779","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:20:24][353818878270295][4520 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-26 12:20:24][353818878270295][4520 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-26 12:20:24][353818878270295][4520 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:20:26][351477972923291][0 ms][INFO] === Request start === [2025-08-26 12:20:26][351477972923291][1 ms][DEBUG] START check_scloud [2025-08-26 12:20:26][351477972923291][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:20:26][351477972923291][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 27116 11216 24494196 183644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:20:26][351477972923291][293 ms][DEBUG] targetPkg: running [2025-08-26 12:20:26][351477972923291][293 ms][DEBUG] END check_scloud in 292 ms [2025-08-26 12:20:26][351477972923291][293 ms][DEBUG] START check_boot_completed [2025-08-26 12:20:26][351477972923291][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:20:26][351477972923291][339 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:20:26][351477972923291][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:20:26][351477972923291][402 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 12:20:26][351477972923291][402 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:20:26][351477972923291][402 ms][DEBUG] START check_internet [2025-08-26 12:20:26][351477972923291][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:20:27][351477972923291][777 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=214 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 214.790/214.790/214.790/0.000 ms\n [2025-08-26 12:20:27][351477972923291][777 ms][DEBUG] check_internet: online [2025-08-26 12:20:27][351477972923291][777 ms][DEBUG] END check_internet in 375 ms [2025-08-26 12:20:27][351477972923291][777 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:20:27][351477972923291][777 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972923291\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4078\"}'\'' -e'"" [2025-08-26 12:20:27][351477972923291][777 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:20:27][351477972923291][777 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477972923291\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4078\"}'\'' -e'"" [2025-08-26 12:20:30][351477972923291][4026 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 12:20:30][351477972923291][4182 ms][DEBUG] proc_open done in 3405 ms; code=255; res.len=107 [2025-08-26 12:20:30][351477972923291][4182 ms][DEBUG] END runCmdUntilRes#1 in 3405 ms [2025-08-26 12:20:30][351477972923291][4182 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 12:20:30][][0 ms][INFO] === Request start === [2025-08-26 12:20:30][][1 ms][DEBUG] START check_scloud [2025-08-26 12:20:30][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:20:31][][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 27116 11216 24624344 194612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:20:31][][294 ms][DEBUG] targetPkg: running [2025-08-26 12:20:31][][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-26 12:20:31][][294 ms][DEBUG] START check_boot_completed [2025-08-26 12:20:31][][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:20:31][][340 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:20:31][][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:20:31][][403 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 12:20:31][][403 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:20:31][][403 ms][DEBUG] START check_internet [2025-08-26 12:20:31][][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:20:31][][668 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=115 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 115.425/115.425/115.425/0.000 ms\n [2025-08-26 12:20:31][][668 ms][DEBUG] check_internet: online [2025-08-26 12:20:31][][668 ms][DEBUG] END check_internet in 265 ms [2025-08-26 12:20:31][][668 ms][DEBUG] rawBody.length=1129 [2025-08-26 12:20:31][][668 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XB0SJA6Y\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2043\"}'\'' -e'"" [2025-08-26 12:20:31][][668 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:20:31][][668 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XB0SJA6Y\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2043\"}'\'' -e'"" [2025-08-26 12:20:34][][4136 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 12:20:35][][4292 ms][DEBUG] proc_open done in 3624 ms; code=255; res.len=107 [2025-08-26 12:20:35][][4292 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-08-26 12:20:35][][4293 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 12:21:01][353684141523773][0 ms][INFO] === Request start === [2025-08-26 12:21:01][353684141523773][0 ms][DEBUG] START check_scloud [2025-08-26 12:21:01][353684141523773][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:21:02][353684141523773][287 ms][DEBUG] SU: done in 287 ms; outu0_a118 27116 11216 24686864 206788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:21:02][353684141523773][287 ms][DEBUG] targetPkg: running [2025-08-26 12:21:02][353684141523773][287 ms][DEBUG] END check_scloud in 287 ms [2025-08-26 12:21:02][353684141523773][287 ms][DEBUG] START check_boot_completed [2025-08-26 12:21:02][353684141523773][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:21:02][353684141523773][319 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 12:21:02][353684141523773][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:21:02][353684141523773][365 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:21:02][353684141523773][365 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 12:21:02][353684141523773][365 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:21:02][353684141523773][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141523773\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9749\"}'\'' -e'"" [2025-08-26 12:21:02][353684141523773][365 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:21:02][353684141523773][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141523773\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9749\"}'\'' -e'"" [2025-08-26 12:21:05][353684141523773][3896 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a31b96c6-e1dd-4fd3-b0db-557ee48acd22","id":"QR_a31b96c6-e1dd-4fd3-b0db-557ee48acd22","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:21:05][353684141523773][4052 ms][DEBUG] proc_open done in 3687 ms; code=255; res.len=3343 [2025-08-26 12:21:05][353684141523773][4052 ms][DEBUG] END runCmdUntilRes#1 in 3687 ms [2025-08-26 12:21:05][353684141523773][4052 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:21:07][350287312564916][0 ms][INFO] === Request start === [2025-08-26 12:21:07][350287312564916][1 ms][DEBUG] START check_scloud [2025-08-26 12:21:07][350287312564916][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:21:07][350287312564916][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 27116 11216 24821272 217472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:21:07][350287312564916][294 ms][DEBUG] targetPkg: running [2025-08-26 12:21:07][350287312564916][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-26 12:21:07][350287312564916][294 ms][DEBUG] START check_boot_completed [2025-08-26 12:21:07][350287312564916][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:21:07][350287312564916][325 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 12:21:07][350287312564916][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:21:07][350287312564916][404 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 12:21:07][350287312564916][404 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 12:21:07][350287312564916][404 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:21:07][350287312564916][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287312564916\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1642\"}'\'' -e'"" [2025-08-26 12:21:07][350287312564916][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:21:07][350287312564916][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287312564916\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1642\"}'\'' -e'"" [2025-08-26 12:21:11][350287312564916][3981 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_594d9984-fc91-4a27-a1b1-151b1342fc12","id":"QR_594d9984-fc91-4a27-a1b1-151b1342fc12","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:21:11][350287312564916][4137 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-08-26 12:21:11][350287312564916][4137 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-08-26 12:21:11][350287312564916][4137 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:21:12][358475771799204][0 ms][INFO] === Request start === [2025-08-26 12:21:12][358475771799204][1 ms][DEBUG] START check_scloud [2025-08-26 12:21:12][358475771799204][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:21:13][358475771799204][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 27116 11216 24950540 229660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:21:13][358475771799204][251 ms][DEBUG] targetPkg: running [2025-08-26 12:21:13][358475771799204][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-26 12:21:13][358475771799204][251 ms][DEBUG] START check_boot_completed [2025-08-26 12:21:13][358475771799204][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:21:13][358475771799204][282 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 12:21:13][358475771799204][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:21:13][358475771799204][329 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:21:13][358475771799204][329 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 12:21:13][358475771799204][329 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:21:13][358475771799204][329 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358475771799204\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8907\"}'\'' -e'"" [2025-08-26 12:21:13][358475771799204][329 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:21:13][358475771799204][329 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358475771799204\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8907\"}'\'' -e'"" [2025-08-26 12:21:16][358475771799204][3750 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 12:21:16][358475771799204][3906 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=107 [2025-08-26 12:21:16][358475771799204][3906 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-08-26 12:21:16][358475771799204][3907 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 12:21:17][][0 ms][INFO] === Request start === [2025-08-26 12:21:17][][1 ms][DEBUG] START check_scloud [2025-08-26 12:21:17][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:21:17][][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 27116 11216 25074708 241688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:21:17][][288 ms][DEBUG] targetPkg: running [2025-08-26 12:21:17][][288 ms][DEBUG] END check_scloud in 287 ms [2025-08-26 12:21:17][][288 ms][DEBUG] START check_boot_completed [2025-08-26 12:21:17][][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:21:17][][334 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:21:17][][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:21:17][][397 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:21:17][][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:21:17][][397 ms][DEBUG] rawBody.length=1129 [2025-08-26 12:21:17][][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58R74S2P5J\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1297\"}'\'' -e'"" [2025-08-26 12:21:17][][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:21:17][][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58R74S2P5J\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1297\"}'\'' -e'"" [2025-08-26 12:21:21][][4083 ms][DEBUG] proc_open done in 3686 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 12:21:21][][4083 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-08-26 12:21:21][][4084 ms][WARN] Detected error: Process with pid 27116 either refused to load frida-agent, or terminated during injection [2025-08-26 12:21:21][][4084 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 12:21:21][][4224 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 12:21:21][][4224 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 12:21:21][][4224 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 12:21:21][][4365 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 12:21:21][][4365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 12:21:21][][4507 ms][DEBUG] SU: done in 142 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 12:21:23][][6520 ms][DEBUG] START check_boot_completed [2025-08-26 12:21:23][][6520 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:21:23][][6567 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:21:23][][6567 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:21:23][][6614 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:21:23][][6614 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 12:21:26][][9629 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 12:21:26][][9629 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58R74S2P5J\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1297\"}'\'' -e'"" [2025-08-26 12:21:30][][13269 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 12:21:30][][13425 ms][DEBUG] proc_open done in 3796 ms; code=255; res.len=107 [2025-08-26 12:21:30][][13425 ms][DEBUG] END runCmdUntilRes#2 in 3796 ms [2025-08-26 12:21:30][][13425 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 12:21:31][350471129861026][0 ms][INFO] === Request start === [2025-08-26 12:21:31][350471129861026][1 ms][DEBUG] START check_scloud [2025-08-26 12:21:31][350471129861026][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:21:31][350471129861026][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 28323 11216 23810940 125900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:21:31][350471129861026][251 ms][DEBUG] targetPkg: running [2025-08-26 12:21:31][350471129861026][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-26 12:21:31][350471129861026][251 ms][DEBUG] START check_boot_completed [2025-08-26 12:21:31][350471129861026][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:21:31][350471129861026][297 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:21:31][350471129861026][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:21:31][350471129861026][344 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:21:31][350471129861026][344 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 12:21:31][350471129861026][345 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:21:31][350471129861026][345 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471129861026\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7243\"}'\'' -e'"" [2025-08-26 12:21:31][350471129861026][345 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:21:31][350471129861026][345 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471129861026\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7243\"}'\'' -e'"" [2025-08-26 12:21:34][350471129861026][3687 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8fa4105b-5724-4941-90b3-4fe53da65367","id":"QR_8fa4105b-5724-4941-90b3-4fe53da65367","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:21:34][350471129861026][3843 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=3343 [2025-08-26 12:21:34][350471129861026][3843 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-08-26 12:21:34][350471129861026][3844 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:22:02][354917591618092][0 ms][INFO] === Request start === [2025-08-26 12:22:02][354917591618092][1 ms][DEBUG] START check_scloud [2025-08-26 12:22:02][354917591618092][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:22:03][354917591618092][327 ms][DEBUG] SU: done in 326 ms; outu0_a118 28323 11216 23845596 139756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:22:03][354917591618092][327 ms][DEBUG] targetPkg: running [2025-08-26 12:22:03][354917591618092][327 ms][DEBUG] END check_scloud in 326 ms [2025-08-26 12:22:03][354917591618092][327 ms][DEBUG] START check_boot_completed [2025-08-26 12:22:03][354917591618092][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:22:03][354917591618092][373 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:22:03][354917591618092][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:22:03][354917591618092][422 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 12:22:03][354917591618092][422 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 12:22:03][354917591618092][422 ms][DEBUG] START check_internet [2025-08-26 12:22:03][354917591618092][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:22:03][354917591618092][748 ms][DEBUG] SU: done in 326 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=191 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 191.260/191.260/191.260/0.000 ms\n [2025-08-26 12:22:03][354917591618092][749 ms][DEBUG] check_internet: online [2025-08-26 12:22:03][354917591618092][749 ms][DEBUG] END check_internet in 327 ms [2025-08-26 12:22:03][354917591618092][749 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:22:03][354917591618092][749 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354917591618092\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5888\"}'\'' -e'"" [2025-08-26 12:22:03][354917591618092][749 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:22:03][354917591618092][749 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354917591618092\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5888\"}'\'' -e'"" [2025-08-26 12:22:07][354917591618092][4279 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 12:22:07][354917591618092][4435 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=107 [2025-08-26 12:22:07][354917591618092][4435 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-08-26 12:22:07][354917591618092][4435 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 12:22:07][][0 ms][INFO] === Request start === [2025-08-26 12:22:07][][1 ms][DEBUG] START check_scloud [2025-08-26 12:22:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:22:07][][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 28323 11216 24020900 151532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:22:07][][305 ms][DEBUG] targetPkg: running [2025-08-26 12:22:07][][305 ms][DEBUG] END check_scloud in 305 ms [2025-08-26 12:22:07][][305 ms][DEBUG] START check_boot_completed [2025-08-26 12:22:07][][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:22:07][][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:22:07][][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:22:07][][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:22:07][][399 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 12:22:07][][399 ms][DEBUG] START check_internet [2025-08-26 12:22:07][][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:22:08][][649 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=115 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 115.675/115.675/115.675/0.000 ms\n [2025-08-26 12:22:08][][649 ms][DEBUG] check_internet: online [2025-08-26 12:22:08][][649 ms][DEBUG] END check_internet in 250 ms [2025-08-26 12:22:08][][649 ms][DEBUG] rawBody.length=1129 [2025-08-26 12:22:08][][649 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT9162X5B\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1932\"}'\'' -e'"" [2025-08-26 12:22:08][][649 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:22:08][][649 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT9162X5B\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1932\"}'\'' -e'"" [2025-08-26 12:22:11][][3835 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 12:22:11][][3991 ms][DEBUG] proc_open done in 3342 ms; code=255; res.len=107 [2025-08-26 12:22:11][][3991 ms][DEBUG] END runCmdUntilRes#1 in 3342 ms [2025-08-26 12:22:11][][3991 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 12:22:12][357648370855277][1 ms][INFO] === Request start === [2025-08-26 12:22:12][357648370855277][1 ms][DEBUG] START check_scloud [2025-08-26 12:22:12][357648370855277][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:22:12][357648370855277][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 28323 11216 24194028 162404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:22:12][357648370855277][304 ms][DEBUG] targetPkg: running [2025-08-26 12:22:12][357648370855277][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-26 12:22:12][357648370855277][304 ms][DEBUG] START check_boot_completed [2025-08-26 12:22:12][357648370855277][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:22:12][357648370855277][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:22:12][357648370855277][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:22:12][357648370855277][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:22:12][357648370855277][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:22:12][357648370855277][413 ms][DEBUG] START check_internet [2025-08-26 12:22:12][357648370855277][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:22:12][357648370855277][632 ms][DEBUG] SU: done in 218 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=115 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 115.416/115.416/115.416/0.000 ms\n [2025-08-26 12:22:12][357648370855277][632 ms][DEBUG] check_internet: online [2025-08-26 12:22:12][357648370855277][632 ms][DEBUG] END check_internet in 219 ms [2025-08-26 12:22:12][357648370855277][632 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:22:12][357648370855277][632 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357648370855277\",\"model\":\"SM-A156B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1891\"}'\'' -e'"" [2025-08-26 12:22:12][357648370855277][633 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:22:12][357648370855277][633 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357648370855277\",\"model\":\"SM-A156B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1891\"}'\'' -e'"" [2025-08-26 12:22:16][357648370855277][4115 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f9711730-d9be-4b59-b36f-ad7139b59bc5","id":"QR_f9711730-d9be-4b59-b36f-ad7139b59bc5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:22:16][357648370855277][4272 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=3343 [2025-08-26 12:22:16][357648370855277][4272 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-08-26 12:22:16][357648370855277][4272 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:22:17][352397456633407][0 ms][INFO] === Request start === [2025-08-26 12:22:17][352397456633407][1 ms][DEBUG] START check_scloud [2025-08-26 12:22:17][352397456633407][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:22:18][352397456633407][259 ms][DEBUG] SU: done in 259 ms; outu0_a118 28323 11216 24369204 174172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:22:18][352397456633407][260 ms][DEBUG] targetPkg: running [2025-08-26 12:22:18][352397456633407][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-26 12:22:18][352397456633407][260 ms][DEBUG] START check_boot_completed [2025-08-26 12:22:18][352397456633407][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:22:18][352397456633407][306 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:22:18][352397456633407][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:22:18][352397456633407][353 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:22:18][352397456633407][353 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 12:22:18][352397456633407][353 ms][DEBUG] START check_internet [2025-08-26 12:22:18][352397456633407][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:22:18][352397456633407][619 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=151 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 151.779/151.779/151.779/0.000 ms\n [2025-08-26 12:22:18][352397456633407][619 ms][DEBUG] check_internet: online [2025-08-26 12:22:18][352397456633407][619 ms][DEBUG] END check_internet in 266 ms [2025-08-26 12:22:18][352397456633407][619 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:22:18][352397456633407][619 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397456633407\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6938\"}'\'' -e'"" [2025-08-26 12:22:18][352397456633407][619 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:22:18][352397456633407][619 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397456633407\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6938\"}'\'' -e'"" [2025-08-26 12:22:21][352397456633407][4227 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_45feb39a-8736-49e1-8924-e47966d0703e","id":"QR_45feb39a-8736-49e1-8924-e47966d0703e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:22:22][352397456633407][4383 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-08-26 12:22:22][352397456633407][4383 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-08-26 12:22:22][352397456633407][4383 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:22:24][352432791951907][0 ms][INFO] === Request start === [2025-08-26 12:22:24][352432791951907][1 ms][DEBUG] START check_scloud [2025-08-26 12:22:24][352432791951907][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:22:24][352432791951907][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 28323 11216 24519832 184588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:22:24][352432791951907][287 ms][DEBUG] targetPkg: running [2025-08-26 12:22:24][352432791951907][287 ms][DEBUG] END check_scloud in 286 ms [2025-08-26 12:22:24][352432791951907][287 ms][DEBUG] START check_boot_completed [2025-08-26 12:22:24][352432791951907][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:22:24][352432791951907][333 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:22:24][352432791951907][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:22:24][352432791951907][396 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 12:22:24][352432791951907][396 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:22:24][352432791951907][396 ms][DEBUG] START check_internet [2025-08-26 12:22:24][352432791951907][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:22:25][352432791951907][740 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=189 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 189.088/189.088/189.088/0.000 ms\n [2025-08-26 12:22:25][352432791951907][740 ms][DEBUG] check_internet: online [2025-08-26 12:22:25][352432791951907][740 ms][DEBUG] END check_internet in 344 ms [2025-08-26 12:22:25][352432791951907][740 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:22:25][352432791951907][740 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352432791951907\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9945\"}'\'' -e'"" [2025-08-26 12:22:25][352432791951907][740 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:22:25][352432791951907][740 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352432791951907\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9945\"}'\'' -e'"" [2025-08-26 12:22:28][352432791951907][4176 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_49fa3594-5f3f-43f8-baf3-ac136e6f4b19","id":"QR_49fa3594-5f3f-43f8-baf3-ac136e6f4b19","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:22:28][352432791951907][4332 ms][DEBUG] proc_open done in 3592 ms; code=255; res.len=3343 [2025-08-26 12:22:28][352432791951907][4332 ms][DEBUG] END runCmdUntilRes#1 in 3592 ms [2025-08-26 12:22:28][352432791951907][4332 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:22:30][352600226754241][0 ms][INFO] === Request start === [2025-08-26 12:22:30][352600226754241][1 ms][DEBUG] START check_scloud [2025-08-26 12:22:30][352600226754241][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:22:30][352600226754241][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 28323 11216 24682748 196440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:22:30][352600226754241][318 ms][DEBUG] targetPkg: running [2025-08-26 12:22:30][352600226754241][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-26 12:22:30][352600226754241][318 ms][DEBUG] START check_boot_completed [2025-08-26 12:22:30][352600226754241][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:22:30][352600226754241][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:22:30][352600226754241][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:22:30][352600226754241][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:22:30][352600226754241][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 12:22:30][352600226754241][411 ms][DEBUG] START check_internet [2025-08-26 12:22:30][352600226754241][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:22:31][352600226754241][630 ms][DEBUG] SU: done in 219 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=115 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 115.502/115.502/115.502/0.000 ms\n [2025-08-26 12:22:31][352600226754241][630 ms][DEBUG] check_internet: online [2025-08-26 12:22:31][352600226754241][630 ms][DEBUG] END check_internet in 219 ms [2025-08-26 12:22:31][352600226754241][630 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:22:31][352600226754241][631 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226754241\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1516\"}'\'' -e'"" [2025-08-26 12:22:31][352600226754241][631 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:22:31][352600226754241][631 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226754241\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1516\"}'\'' -e'"" [2025-08-26 12:22:34][352600226754241][4379 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_287bfdd4-c250-4ae3-8fad-ab6da550012f","id":"QR_287bfdd4-c250-4ae3-8fad-ab6da550012f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:22:35][352600226754241][4535 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-26 12:22:35][352600226754241][4535 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-26 12:22:35][352600226754241][4535 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:23:03][356954844272375][0 ms][INFO] === Request start === [2025-08-26 12:23:03][356954844272375][1 ms][DEBUG] START check_scloud [2025-08-26 12:23:03][356954844272375][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:23:04][356954844272375][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 28323 11216 24743284 207772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:23:04][356954844272375][270 ms][DEBUG] targetPkg: running [2025-08-26 12:23:04][356954844272375][270 ms][DEBUG] END check_scloud in 270 ms [2025-08-26 12:23:04][356954844272375][271 ms][DEBUG] START check_boot_completed [2025-08-26 12:23:04][356954844272375][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:23:04][356954844272375][317 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:23:04][356954844272375][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:23:04][356954844272375][395 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 12:23:04][356954844272375][395 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 12:23:04][356954844272375][395 ms][DEBUG] rawBody.length=1149 [2025-08-26 12:23:04][356954844272375][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356954844272375\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"SAM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2735\"}'\'' -e'"" [2025-08-26 12:23:04][356954844272375][396 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:23:04][356954844272375][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356954844272375\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"SAM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2735\"}'\'' -e'"" [2025-08-26 12:23:09][356954844272375][5441 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5dba9569-a24a-424b-9947-ca6dc7d166e5","id":"QR_5dba9569-a24a-424b-9947-ca6dc7d166e5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:23:09][356954844272375][5597 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-08-26 12:23:09][356954844272375][5597 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-08-26 12:23:09][356954844272375][5597 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:23:14][357714710501334][0 ms][INFO] === Request start === [2025-08-26 12:23:14][357714710501334][1 ms][DEBUG] START check_scloud [2025-08-26 12:23:14][357714710501334][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:23:14][357714710501334][307 ms][DEBUG] SU: done in 307 ms; outu0_a118 28323 11216 24879740 219640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:23:14][357714710501334][308 ms][DEBUG] targetPkg: running [2025-08-26 12:23:14][357714710501334][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-26 12:23:14][357714710501334][308 ms][DEBUG] START check_boot_completed [2025-08-26 12:23:14][357714710501334][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:23:14][357714710501334][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:23:14][357714710501334][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:23:14][357714710501334][402 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 12:23:14][357714710501334][402 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 12:23:14][357714710501334][402 ms][DEBUG] rawBody.length=1149 [2025-08-26 12:23:14][357714710501334][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357714710501334\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1523\"}'\'' -e'"" [2025-08-26 12:23:14][357714710501334][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:23:14][357714710501334][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357714710501334\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1523\"}'\'' -e'"" [2025-08-26 12:23:19][357714710501334][4681 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3b203e99-4e9e-48c3-82ef-08003537edf2","id":"QR_3b203e99-4e9e-48c3-82ef-08003537edf2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:23:19][357714710501334][4837 ms][DEBUG] proc_open done in 4435 ms; code=255; res.len=3343 [2025-08-26 12:23:19][357714710501334][4837 ms][DEBUG] END runCmdUntilRes#1 in 4435 ms [2025-08-26 12:23:19][357714710501334][4837 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:23:24][352516402312028][0 ms][INFO] === Request start === [2025-08-26 12:23:24][352516402312028][1 ms][DEBUG] START check_scloud [2025-08-26 12:23:24][352516402312028][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:23:24][352516402312028][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 28323 11216 25035576 231376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:23:24][352516402312028][321 ms][DEBUG] targetPkg: running [2025-08-26 12:23:24][352516402312028][321 ms][DEBUG] END check_scloud in 320 ms [2025-08-26 12:23:24][352516402312028][321 ms][DEBUG] START check_boot_completed [2025-08-26 12:23:24][352516402312028][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:23:24][352516402312028][368 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:23:24][352516402312028][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:23:24][352516402312028][430 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:23:24][352516402312028][430 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:23:24][352516402312028][430 ms][DEBUG] rawBody.length=1149 [2025-08-26 12:23:24][352516402312028][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352516402312028\",\"model\":\"SM-S906U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4860\"}'\'' -e'"" [2025-08-26 12:23:24][352516402312028][430 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:23:24][352516402312028][431 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352516402312028\",\"model\":\"SM-S906U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4860\"}'\'' -e'"" [2025-08-26 12:23:29][352516402312028][4991 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3100e934-2172-447f-b06e-3b3bb233e1ef","id":"QR_3100e934-2172-447f-b06e-3b3bb233e1ef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:23:29][352516402312028][5148 ms][DEBUG] proc_open done in 4717 ms; code=255; res.len=3343 [2025-08-26 12:23:29][352516402312028][5148 ms][DEBUG] END runCmdUntilRes#1 in 4717 ms [2025-08-26 12:23:29][352516402312028][5148 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:23:34][359400850061259][0 ms][INFO] === Request start === [2025-08-26 12:23:34][359400850061259][0 ms][DEBUG] START check_scloud [2025-08-26 12:23:34][359400850061259][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:23:34][359400850061259][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 28323 11216 25152532 242952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:23:34][359400850061259][302 ms][DEBUG] targetPkg: running [2025-08-26 12:23:34][359400850061259][302 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 12:23:34][359400850061259][302 ms][DEBUG] START check_boot_completed [2025-08-26 12:23:34][359400850061259][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:23:34][359400850061259][333 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 12:23:34][359400850061259][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:23:34][359400850061259][380 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:23:34][359400850061259][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 12:23:34][359400850061259][380 ms][DEBUG] rawBody.length=1149 [2025-08-26 12:23:34][359400850061259][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359400850061259\",\"model\":\"SM-S911U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1775\"}'\'' -e'"" [2025-08-26 12:23:34][359400850061259][380 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:23:34][359400850061259][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359400850061259\",\"model\":\"SM-S911U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1775\"}'\'' -e'"" [2025-08-26 12:23:38][359400850061259][3989 ms][DEBUG] proc_open done in 3608 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 12:23:38][359400850061259][3989 ms][DEBUG] END runCmdUntilRes#1 in 3609 ms [2025-08-26 12:23:38][359400850061259][3989 ms][WARN] Detected error: Process with pid 28323 either refused to load frida-agent, or terminated during injection [2025-08-26 12:23:38][359400850061259][3989 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 12:23:38][359400850061259][4129 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 12:23:38][359400850061259][4129 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 12:23:38][359400850061259][4129 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 12:23:38][359400850061259][4238 ms][DEBUG] SU: done in 109 ms; out [2025-08-26 12:23:38][359400850061259][4238 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 12:23:38][359400850061259][4379 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 12:23:40][359400850061259][6394 ms][DEBUG] START check_boot_completed [2025-08-26 12:23:40][359400850061259][6394 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:23:40][359400850061259][6425 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 12:23:40][359400850061259][6425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:23:41][359400850061259][6472 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:23:41][359400850061259][6472 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 12:23:44][359400850061259][9487 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 12:23:44][359400850061259][9487 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359400850061259\",\"model\":\"SM-S911U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1775\"}'\'' -e'"" [2025-08-26 12:23:48][359400850061259][14346 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9eb776a4-cf35-4ba4-abe7-8f5ef44daa26","id":"QR_9eb776a4-cf35-4ba4-abe7-8f5ef44daa26","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:23:49][359400850061259][14502 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-08-26 12:23:49][359400850061259][14502 ms][DEBUG] END runCmdUntilRes#2 in 5015 ms [2025-08-26 12:23:49][359400850061259][14502 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:24:04][353309091495141][0 ms][INFO] === Request start === [2025-08-26 12:24:04][353309091495141][1 ms][DEBUG] START check_scloud [2025-08-26 12:24:04][353309091495141][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:24:04][353309091495141][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 29519 11216 23854880 128196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:24:04][353309091495141][257 ms][DEBUG] targetPkg: running [2025-08-26 12:24:04][353309091495141][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-26 12:24:04][353309091495141][257 ms][DEBUG] START check_boot_completed [2025-08-26 12:24:04][353309091495141][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:24:04][353309091495141][303 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:24:04][353309091495141][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:24:04][353309091495141][350 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:24:04][353309091495141][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 12:24:04][353309091495141][350 ms][DEBUG] START check_internet [2025-08-26 12:24:04][353309091495141][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:24:05][353309091495141][835 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.387/200.387/200.387/0.000 ms\n [2025-08-26 12:24:05][353309091495141][835 ms][DEBUG] check_internet: online [2025-08-26 12:24:05][353309091495141][835 ms][DEBUG] END check_internet in 485 ms [2025-08-26 12:24:05][353309091495141][835 ms][DEBUG] rawBody.length=1149 [2025-08-26 12:24:05][353309091495141][835 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353309091495141\",\"model\":\"SM-G960U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9447\"}'\'' -e'"" [2025-08-26 12:24:05][353309091495141][835 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:24:05][353309091495141][835 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353309091495141\",\"model\":\"SM-G960U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9447\"}'\'' -e'"" [2025-08-26 12:24:09][353309091495141][5646 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a1d733e9-7ea8-4748-a8d5-b0d61b644bf1","id":"QR_a1d733e9-7ea8-4748-a8d5-b0d61b644bf1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:24:10][353309091495141][5802 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=3343 [2025-08-26 12:24:10][353309091495141][5802 ms][DEBUG] END runCmdUntilRes#1 in 4967 ms [2025-08-26 12:24:10][353309091495141][5802 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:25:04][355859838821288][1 ms][INFO] === Request start === [2025-08-26 12:25:04][355859838821288][1 ms][DEBUG] START check_scloud [2025-08-26 12:25:04][355859838821288][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:25:04][355859838821288][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 29519 11216 23935316 138264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:25:04][355859838821288][294 ms][DEBUG] targetPkg: running [2025-08-26 12:25:04][355859838821288][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-26 12:25:04][355859838821288][294 ms][DEBUG] START check_boot_completed [2025-08-26 12:25:04][355859838821288][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:25:04][355859838821288][340 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:25:04][355859838821288][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:25:04][355859838821288][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:25:04][355859838821288][387 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 12:25:04][355859838821288][387 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:25:04][355859838821288][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859838821288\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2656\"}'\'' -e'"" [2025-08-26 12:25:04][355859838821288][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:25:04][355859838821288][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859838821288\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2656\"}'\'' -e'"" [2025-08-26 12:25:08][355859838821288][4168 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6e652ea6-dbc0-4c30-bbeb-74fecac59709","id":"QR_6e652ea6-dbc0-4c30-bbeb-74fecac59709","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:25:08][355859838821288][4324 ms][DEBUG] proc_open done in 3937 ms; code=255; res.len=3343 [2025-08-26 12:25:08][355859838821288][4324 ms][DEBUG] END runCmdUntilRes#1 in 3937 ms [2025-08-26 12:25:08][355859838821288][4324 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:26:05][355355257924844][0 ms][INFO] === Request start === [2025-08-26 12:26:05][355355257924844][1 ms][DEBUG] START check_scloud [2025-08-26 12:26:05][355355257924844][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:26:05][355355257924844][322 ms][DEBUG] SU: done in 322 ms; outu0_a118 29519 11216 24054316 150156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:26:05][355355257924844][322 ms][DEBUG] targetPkg: running [2025-08-26 12:26:05][355355257924844][322 ms][DEBUG] END check_scloud in 322 ms [2025-08-26 12:26:05][355355257924844][323 ms][DEBUG] START check_boot_completed [2025-08-26 12:26:05][355355257924844][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:26:05][355355257924844][369 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:26:05][355355257924844][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:26:05][355355257924844][416 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:26:05][355355257924844][416 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 12:26:05][355355257924844][416 ms][DEBUG] START check_internet [2025-08-26 12:26:05][355355257924844][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:26:06][355355257924844][666 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.092/142.092/142.092/0.000 ms\n [2025-08-26 12:26:06][355355257924844][666 ms][DEBUG] check_internet: online [2025-08-26 12:26:06][355355257924844][666 ms][DEBUG] END check_internet in 250 ms [2025-08-26 12:26:06][355355257924844][666 ms][DEBUG] rawBody.length=1147 [2025-08-26 12:26:06][355355257924844][667 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355257924844\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1884\"}'\'' -e'"" [2025-08-26 12:26:06][355355257924844][667 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:26:06][355355257924844][667 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355257924844\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1884\"}'\'' -e'"" [2025-08-26 12:26:09][355355257924844][4306 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-26 12:26:09][355355257924844][4462 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=115 [2025-08-26 12:26:09][355355257924844][4462 ms][DEBUG] END runCmdUntilRes#1 in 3795 ms [2025-08-26 12:26:09][355355257924844][4462 ms][INFO] SUCCESS response from frida (len=115) [2025-08-26 12:26:10][][0 ms][INFO] === Request start === [2025-08-26 12:26:10][][1 ms][DEBUG] START check_scloud [2025-08-26 12:26:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:26:10][][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 29519 11216 24209012 161068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:26:10][][270 ms][DEBUG] targetPkg: running [2025-08-26 12:26:10][][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-26 12:26:10][][270 ms][DEBUG] START check_boot_completed [2025-08-26 12:26:10][][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:26:10][][317 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:26:10][][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:26:10][][410 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 12:26:10][][410 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 12:26:10][][411 ms][DEBUG] START check_internet [2025-08-26 12:26:10][][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:26:10][][629 ms][DEBUG] SU: done in 218 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=115 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 115.812/115.812/115.812/0.000 ms\n [2025-08-26 12:26:10][][629 ms][DEBUG] check_internet: online [2025-08-26 12:26:10][][629 ms][DEBUG] END check_internet in 218 ms [2025-08-26 12:26:10][][629 ms][DEBUG] rawBody.length=1128 [2025-08-26 12:26:10][][629 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9YTC049GHE\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8297\"}'\'' -e'"" [2025-08-26 12:26:10][][629 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:26:10][][629 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9YTC049GHE\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8297\"}'\'' -e'"" [2025-08-26 12:26:14][][3847 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 12:26:14][][4003 ms][DEBUG] proc_open done in 3374 ms; code=255; res.len=107 [2025-08-26 12:26:14][][4003 ms][DEBUG] END runCmdUntilRes#1 in 3374 ms [2025-08-26 12:26:14][][4003 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 12:26:16][355355257924844][0 ms][INFO] === Request start === [2025-08-26 12:26:16][355355257924844][1 ms][DEBUG] START check_scloud [2025-08-26 12:26:16][355355257924844][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:26:16][355355257924844][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 29519 11216 24388348 172840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:26:16][355355257924844][319 ms][DEBUG] targetPkg: running [2025-08-26 12:26:16][355355257924844][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-26 12:26:16][355355257924844][319 ms][DEBUG] START check_boot_completed [2025-08-26 12:26:16][355355257924844][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:26:16][355355257924844][365 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:26:16][355355257924844][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:26:16][355355257924844][414 ms][DEBUG] SU: done in 49 ms; out [2025-08-26 12:26:16][355355257924844][414 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 12:26:16][355355257924844][414 ms][DEBUG] START check_internet [2025-08-26 12:26:16][355355257924844][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:26:16][355355257924844][662 ms][DEBUG] SU: done in 248 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=115 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 115.678/115.678/115.678/0.000 ms\n [2025-08-26 12:26:16][355355257924844][662 ms][DEBUG] check_internet: online [2025-08-26 12:26:16][355355257924844][662 ms][DEBUG] END check_internet in 248 ms [2025-08-26 12:26:16][355355257924844][663 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:26:16][355355257924844][663 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355257924844\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7011\"}'\'' -e'"" [2025-08-26 12:26:16][355355257924844][663 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:26:16][355355257924844][663 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355257924844\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7011\"}'\'' -e'"" [2025-08-26 12:26:20][355355257924844][4583 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 12:26:20][355355257924844][4739 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=107 [2025-08-26 12:26:20][355355257924844][4739 ms][DEBUG] END runCmdUntilRes#1 in 4076 ms [2025-08-26 12:26:20][355355257924844][4739 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 12:26:21][][0 ms][INFO] === Request start === [2025-08-26 12:26:21][][1 ms][DEBUG] START check_scloud [2025-08-26 12:26:21][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:26:21][][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 29519 11216 24552444 183680 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:26:21][][258 ms][DEBUG] targetPkg: running [2025-08-26 12:26:21][][258 ms][DEBUG] END check_scloud in 258 ms [2025-08-26 12:26:21][][258 ms][DEBUG] START check_boot_completed [2025-08-26 12:26:21][][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:26:21][][305 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:26:21][][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:26:21][][352 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:26:21][][352 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 12:26:21][][352 ms][DEBUG] START check_internet [2025-08-26 12:26:21][][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:26:21][][555 ms][DEBUG] SU: done in 203 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=115 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 115.714/115.714/115.714/0.000 ms\n [2025-08-26 12:26:21][][555 ms][DEBUG] check_internet: online [2025-08-26 12:26:21][][555 ms][DEBUG] END check_internet in 203 ms [2025-08-26 12:26:21][][555 ms][DEBUG] rawBody.length=1129 [2025-08-26 12:26:21][][555 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9YTC049GHE\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7931\"}'\'' -e'"" [2025-08-26 12:26:21][][555 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:26:21][][555 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-X205\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9YTC049GHE\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7931\"}'\'' -e'"" [2025-08-26 12:26:25][][4116 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 12:26:25][][4272 ms][DEBUG] proc_open done in 3718 ms; code=255; res.len=107 [2025-08-26 12:26:25][][4272 ms][DEBUG] END runCmdUntilRes#1 in 3718 ms [2025-08-26 12:26:25][][4272 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 12:26:27][353809892896660][0 ms][INFO] === Request start === [2025-08-26 12:26:27][353809892896660][1 ms][DEBUG] START check_scloud [2025-08-26 12:26:27][353809892896660][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:26:27][353809892896660][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 29519 11216 24707296 195644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:26:27][353809892896660][267 ms][DEBUG] targetPkg: running [2025-08-26 12:26:27][353809892896660][267 ms][DEBUG] END check_scloud in 267 ms [2025-08-26 12:26:27][353809892896660][267 ms][DEBUG] START check_boot_completed [2025-08-26 12:26:27][353809892896660][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:26:27][353809892896660][314 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:26:27][353809892896660][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:26:28][353809892896660][361 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:26:28][353809892896660][361 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 12:26:28][353809892896660][361 ms][DEBUG] START check_internet [2025-08-26 12:26:28][353809892896660][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:26:28][353809892896660][673 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=219 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 219.292/219.292/219.292/0.000 ms\n [2025-08-26 12:26:28][353809892896660][673 ms][DEBUG] check_internet: online [2025-08-26 12:26:28][353809892896660][673 ms][DEBUG] END check_internet in 313 ms [2025-08-26 12:26:28][353809892896660][673 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:26:28][353809892896660][674 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809892896660\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4092\"}'\'' -e'"" [2025-08-26 12:26:28][353809892896660][674 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:26:28][353809892896660][674 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809892896660\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4092\"}'\'' -e'"" [2025-08-26 12:26:31][353809892896660][4235 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_240341dc-3287-4d61-a3c7-6dabba4796bc","id":"QR_240341dc-3287-4d61-a3c7-6dabba4796bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:26:32][353809892896660][4391 ms][DEBUG] proc_open done in 3717 ms; code=255; res.len=3343 [2025-08-26 12:26:32][353809892896660][4391 ms][DEBUG] END runCmdUntilRes#1 in 3717 ms [2025-08-26 12:26:32][353809892896660][4391 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:26:35][351798811486954][0 ms][INFO] === Request start === [2025-08-26 12:26:35][351798811486954][1 ms][DEBUG] START check_scloud [2025-08-26 12:26:35][351798811486954][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:26:35][351798811486954][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 29519 11216 24829252 206588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:26:35][351798811486954][272 ms][DEBUG] targetPkg: running [2025-08-26 12:26:35][351798811486954][272 ms][DEBUG] END check_scloud in 272 ms [2025-08-26 12:26:35][351798811486954][272 ms][DEBUG] START check_boot_completed [2025-08-26 12:26:35][351798811486954][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:26:35][351798811486954][319 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:26:35][351798811486954][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:26:36][351798811486954][413 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 12:26:36][351798811486954][413 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 12:26:36][351798811486954][413 ms][DEBUG] START check_internet [2025-08-26 12:26:36][351798811486954][413 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:26:36][351798811486954][741 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.827/199.827/199.827/0.000 ms\n [2025-08-26 12:26:36][351798811486954][741 ms][DEBUG] check_internet: online [2025-08-26 12:26:36][351798811486954][741 ms][DEBUG] END check_internet in 328 ms [2025-08-26 12:26:36][351798811486954][741 ms][DEBUG] rawBody.length=1149 [2025-08-26 12:26:36][351798811486954][741 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351798811486954\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1966\"}'\'' -e'"" [2025-08-26 12:26:36][351798811486954][741 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:26:36][351798811486954][741 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351798811486954\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1966\"}'\'' -e'"" [2025-08-26 12:26:40][351798811486954][5083 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0142ddf2-efc3-4642-9ae8-a522ab7d0810","id":"QR_0142ddf2-efc3-4642-9ae8-a522ab7d0810","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:26:40][351798811486954][5240 ms][DEBUG] proc_open done in 4498 ms; code=255; res.len=3343 [2025-08-26 12:26:40][351798811486954][5240 ms][DEBUG] END runCmdUntilRes#1 in 4498 ms [2025-08-26 12:26:40][351798811486954][5240 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:29:03][357211245476090][0 ms][INFO] === Request start === [2025-08-26 12:29:03][357211245476090][0 ms][DEBUG] START check_scloud [2025-08-26 12:29:03][357211245476090][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:29:03][357211245476090][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 29519 11216 24908092 217900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:29:03][357211245476090][303 ms][DEBUG] targetPkg: running [2025-08-26 12:29:03][357211245476090][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 12:29:03][357211245476090][303 ms][DEBUG] START check_boot_completed [2025-08-26 12:29:03][357211245476090][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:29:03][357211245476090][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 12:29:03][357211245476090][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:29:04][357211245476090][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:29:04][357211245476090][381 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 12:29:04][357211245476090][381 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:29:04][357211245476090][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211245476090\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6335\"}'\'' -e'"" [2025-08-26 12:29:04][357211245476090][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:29:04][357211245476090][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211245476090\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6335\"}'\'' -e'"" [2025-08-26 12:29:08][357211245476090][4473 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fc85be75-5b50-41ec-9566-cf964eb9d0e4","id":"QR_fc85be75-5b50-41ec-9566-cf964eb9d0e4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:29:08][357211245476090][4630 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3343 [2025-08-26 12:29:08][357211245476090][4630 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-26 12:29:08][357211245476090][4630 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:30:05][357067260505902][0 ms][INFO] === Request start === [2025-08-26 12:30:05][357067260505902][1 ms][DEBUG] START check_scloud [2025-08-26 12:30:05][357067260505902][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:30:05][357067260505902][280 ms][DEBUG] SU: done in 280 ms; outu0_a118 29519 11216 25062944 230376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:30:05][357067260505902][280 ms][DEBUG] targetPkg: running [2025-08-26 12:30:05][357067260505902][281 ms][DEBUG] END check_scloud in 280 ms [2025-08-26 12:30:05][357067260505902][281 ms][DEBUG] START check_boot_completed [2025-08-26 12:30:05][357067260505902][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:30:05][357067260505902][327 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:30:05][357067260505902][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:30:05][357067260505902][390 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 12:30:05][357067260505902][390 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:30:05][357067260505902][390 ms][DEBUG] START check_internet [2025-08-26 12:30:05][357067260505902][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:30:05][357067260505902][733 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=109 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 109.225/109.225/109.225/0.000 ms\n [2025-08-26 12:30:05][357067260505902][734 ms][DEBUG] check_internet: online [2025-08-26 12:30:05][357067260505902][734 ms][DEBUG] END check_internet in 344 ms [2025-08-26 12:30:05][357067260505902][734 ms][DEBUG] rawBody.length=1149 [2025-08-26 12:30:05][357067260505902][734 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357067260505902\",\"model\":\"SM-A135U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7076\"}'\'' -e'"" [2025-08-26 12:30:05][357067260505902][734 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:30:05][357067260505902][734 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357067260505902\",\"model\":\"SM-A135U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7076\"}'\'' -e'"" [2025-08-26 12:30:11][357067260505902][5998 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a372139e-66ff-45a1-9456-e5ee1480dd8f","id":"QR_a372139e-66ff-45a1-9456-e5ee1480dd8f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:30:11][357067260505902][6154 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-08-26 12:30:11][357067260505902][6154 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-08-26 12:30:11][357067260505902][6154 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:31:03][350637540810756][0 ms][INFO] === Request start === [2025-08-26 12:31:03][350637540810756][1 ms][DEBUG] START check_scloud [2025-08-26 12:31:03][350637540810756][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:31:03][350637540810756][289 ms][DEBUG] SU: done in 289 ms; outu0_a118 29519 11216 25193220 241116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:31:03][350637540810756][289 ms][DEBUG] targetPkg: running [2025-08-26 12:31:03][350637540810756][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-26 12:31:03][350637540810756][290 ms][DEBUG] START check_boot_completed [2025-08-26 12:31:03][350637540810756][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:31:03][350637540810756][334 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 12:31:03][350637540810756][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:31:03][350637540810756][397 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:31:03][350637540810756][397 ms][DEBUG] END check_boot_completed in 107 ms [2025-08-26 12:31:03][350637540810756][397 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:31:03][350637540810756][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637540810756\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2410\"}'\'' -e'"" [2025-08-26 12:31:03][350637540810756][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:31:03][350637540810756][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637540810756\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2410\"}'\'' -e'"" [2025-08-26 12:31:07][350637540810756][4084 ms][DEBUG] proc_open done in 3687 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 12:31:07][350637540810756][4084 ms][DEBUG] END runCmdUntilRes#1 in 3687 ms [2025-08-26 12:31:07][350637540810756][4085 ms][WARN] Detected error: Process with pid 29519 either refused to load frida-agent, or terminated during injection [2025-08-26 12:31:07][350637540810756][4085 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 12:31:07][350637540810756][4255 ms][DEBUG] SU: done in 171 ms; out [2025-08-26 12:31:07][350637540810756][4255 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 12:31:07][350637540810756][4255 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 12:31:07][350637540810756][4382 ms][DEBUG] SU: done in 127 ms; out [2025-08-26 12:31:07][350637540810756][4382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 12:31:08][350637540810756][4568 ms][DEBUG] SU: done in 185 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 12:31:10][350637540810756][6583 ms][DEBUG] START check_boot_completed [2025-08-26 12:31:10][350637540810756][6583 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:31:10][350637540810756][6630 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:31:10][350637540810756][6630 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:31:10][350637540810756][6678 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 12:31:10][350637540810756][6678 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 12:31:13][350637540810756][9691 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 12:31:13][350637540810756][9691 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637540810756\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2410\"}'\'' -e'"" [2025-08-26 12:31:17][350637540810756][13987 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b284f8c5-12d3-4413-8808-f55005aed580","id":"QR_b284f8c5-12d3-4413-8808-f55005aed580","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:31:17][350637540810756][14143 ms][DEBUG] proc_open done in 4452 ms; code=255; res.len=3343 [2025-08-26 12:31:17][350637540810756][14144 ms][DEBUG] END runCmdUntilRes#2 in 4452 ms [2025-08-26 12:31:17][350637540810756][14144 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:32:03][350013884118752][1 ms][INFO] === Request start === [2025-08-26 12:32:03][350013884118752][1 ms][DEBUG] START check_scloud [2025-08-26 12:32:03][350013884118752][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:32:03][350013884118752][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 31416 11216 23722252 128980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:32:03][350013884118752][302 ms][DEBUG] targetPkg: running [2025-08-26 12:32:03][350013884118752][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-26 12:32:03][350013884118752][302 ms][DEBUG] START check_boot_completed [2025-08-26 12:32:03][350013884118752][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:32:03][350013884118752][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:32:03][350013884118752][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:32:03][350013884118752][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:32:03][350013884118752][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 12:32:03][350013884118752][395 ms][DEBUG] START check_internet [2025-08-26 12:32:03][350013884118752][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:32:04][350013884118752][723 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=227 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 227.745/227.745/227.745/0.000 ms\n [2025-08-26 12:32:04][350013884118752][723 ms][DEBUG] check_internet: online [2025-08-26 12:32:04][350013884118752][723 ms][DEBUG] END check_internet in 328 ms [2025-08-26 12:32:04][350013884118752][723 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:32:04][350013884118752][723 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884118752\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6909\"}'\'' -e'"" [2025-08-26 12:32:04][350013884118752][723 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:32:04][350013884118752][723 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013884118752\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6909\"}'\'' -e'"" [2025-08-26 12:32:07][350013884118752][4300 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a2941fde-50a7-4336-875a-2479f0bb7cfc","id":"QR_a2941fde-50a7-4336-875a-2479f0bb7cfc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:32:08][350013884118752][4456 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=3343 [2025-08-26 12:32:08][350013884118752][4456 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-08-26 12:32:08][350013884118752][4456 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:32:11][355755470526757][0 ms][INFO] === Request start === [2025-08-26 12:32:11][355755470526757][1 ms][DEBUG] START check_scloud [2025-08-26 12:32:11][355755470526757][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:32:11][355755470526757][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 31416 11216 23894932 139004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:32:11][355755470526757][301 ms][DEBUG] targetPkg: running [2025-08-26 12:32:11][355755470526757][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 12:32:11][355755470526757][301 ms][DEBUG] START check_boot_completed [2025-08-26 12:32:11][355755470526757][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:32:11][355755470526757][346 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 12:32:11][355755470526757][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:32:11][355755470526757][408 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:32:11][355755470526757][408 ms][DEBUG] END check_boot_completed in 107 ms [2025-08-26 12:32:11][355755470526757][408 ms][DEBUG] START check_internet [2025-08-26 12:32:11][355755470526757][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:32:11][355755470526757][690 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.490/164.490/164.490/0.000 ms\n [2025-08-26 12:32:11][355755470526757][690 ms][DEBUG] check_internet: online [2025-08-26 12:32:11][355755470526757][690 ms][DEBUG] END check_internet in 281 ms [2025-08-26 12:32:11][355755470526757][690 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:32:11][355755470526757][690 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355755470526757\",\"model\":\"SM-F731N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8071\"}'\'' -e'"" [2025-08-26 12:32:11][355755470526757][690 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:32:11][355755470526757][690 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355755470526757\",\"model\":\"SM-F731N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8071\"}'\'' -e'"" [2025-08-26 12:32:15][355755470526757][4657 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9cd271d3-c9ec-49e4-9ae9-e2a47ba9e009","id":"QR_9cd271d3-c9ec-49e4-9ae9-e2a47ba9e009","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:32:16][355755470526757][4813 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-08-26 12:32:16][355755470526757][4813 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-26 12:32:16][355755470526757][4813 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:33:03][355038112226312][0 ms][INFO] === Request start === [2025-08-26 12:33:03][355038112226312][1 ms][DEBUG] START check_scloud [2025-08-26 12:33:03][355038112226312][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:33:04][355038112226312][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 31416 11216 24050992 151088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:33:04][355038112226312][324 ms][DEBUG] targetPkg: running [2025-08-26 12:33:04][355038112226312][324 ms][DEBUG] END check_scloud in 323 ms [2025-08-26 12:33:04][355038112226312][324 ms][DEBUG] START check_boot_completed [2025-08-26 12:33:04][355038112226312][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:33:04][355038112226312][371 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:33:04][355038112226312][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:33:04][355038112226312][417 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:33:04][355038112226312][417 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 12:33:04][355038112226312][417 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:33:04][355038112226312][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355038112226312\",\"model\":\"SM-F700F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1700\"}'\'' -e'"" [2025-08-26 12:33:04][355038112226312][417 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:33:04][355038112226312][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355038112226312\",\"model\":\"SM-F700F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1700\"}'\'' -e'"" [2025-08-26 12:33:08][355038112226312][4182 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2b343c78-1ab2-4543-aa01-6b022af7a832","id":"QR_2b343c78-1ab2-4543-aa01-6b022af7a832","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:33:08][355038112226312][4338 ms][DEBUG] proc_open done in 3921 ms; code=255; res.len=3343 [2025-08-26 12:33:08][355038112226312][4338 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-08-26 12:33:08][355038112226312][4338 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:35:04][352863162291350][1 ms][INFO] === Request start === [2025-08-26 12:35:04][352863162291350][1 ms][DEBUG] START check_scloud [2025-08-26 12:35:04][352863162291350][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:35:04][352863162291350][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 31416 11216 24176136 162228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:35:04][352863162291350][310 ms][DEBUG] targetPkg: running [2025-08-26 12:35:04][352863162291350][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 12:35:04][352863162291350][310 ms][DEBUG] START check_boot_completed [2025-08-26 12:35:04][352863162291350][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:35:04][352863162291350][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 12:35:04][352863162291350][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:35:04][352863162291350][388 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 12:35:04][352863162291350][389 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 12:35:04][352863162291350][389 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:35:04][352863162291350][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352863162291350\",\"model\":\"SM-S928N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6928\"}'\'' -e'"" [2025-08-26 12:35:04][352863162291350][389 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:35:04][352863162291350][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352863162291350\",\"model\":\"SM-S928N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6928\"}'\'' -e'"" [2025-08-26 12:35:08][352863162291350][4231 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a55b967f-4070-4d26-b9d2-8c3794cab504","id":"QR_a55b967f-4070-4d26-b9d2-8c3794cab504","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:35:08][352863162291350][4387 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-08-26 12:35:08][352863162291350][4387 ms][DEBUG] END runCmdUntilRes#1 in 3998 ms [2025-08-26 12:35:08][352863162291350][4387 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:37:03][353475122535096][0 ms][INFO] === Request start === [2025-08-26 12:37:03][353475122535096][1 ms][DEBUG] START check_scloud [2025-08-26 12:37:03][353475122535096][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:37:04][353475122535096][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 31416 11216 24328876 173168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:37:04][353475122535096][306 ms][DEBUG] targetPkg: running [2025-08-26 12:37:04][353475122535096][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-26 12:37:04][353475122535096][306 ms][DEBUG] START check_boot_completed [2025-08-26 12:37:04][353475122535096][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:37:04][353475122535096][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:37:04][353475122535096][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:37:04][353475122535096][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:37:04][353475122535096][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 12:37:04][353475122535096][399 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:37:04][353475122535096][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475122535096\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9487\"}'\'' -e'"" [2025-08-26 12:37:04][353475122535096][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:37:04][353475122535096][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475122535096\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9487\"}'\'' -e'"" [2025-08-26 12:37:07][353475122535096][4039 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6efd30be-9daf-47f7-aa51-7ba06649ed60","id":"QR_6efd30be-9daf-47f7-aa51-7ba06649ed60","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:37:08][353475122535096][4195 ms][DEBUG] proc_open done in 3796 ms; code=255; res.len=3343 [2025-08-26 12:37:08][353475122535096][4195 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-26 12:37:08][353475122535096][4195 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:37:10][352773711751723][1 ms][INFO] === Request start === [2025-08-26 12:37:10][352773711751723][1 ms][DEBUG] START check_scloud [2025-08-26 12:37:10][352773711751723][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:37:10][352773711751723][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 31416 11216 24507372 185004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:37:10][352773711751723][262 ms][DEBUG] targetPkg: running [2025-08-26 12:37:10][352773711751723][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-26 12:37:10][352773711751723][262 ms][DEBUG] START check_boot_completed [2025-08-26 12:37:10][352773711751723][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:37:10][352773711751723][308 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:37:10][352773711751723][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:37:10][352773711751723][370 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:37:10][352773711751723][370 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-26 12:37:10][352773711751723][370 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:37:10][352773711751723][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352773711751723\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8689\"}'\'' -e'"" [2025-08-26 12:37:10][352773711751723][370 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:37:10][352773711751723][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352773711751723\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8689\"}'\'' -e'"" [2025-08-26 12:37:15][352773711751723][4432 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb37c27e-9054-411c-9805-36018eb0b162","id":"QR_eb37c27e-9054-411c-9805-36018eb0b162","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:37:15][352773711751723][4588 ms][DEBUG] proc_open done in 4218 ms; code=255; res.len=3343 [2025-08-26 12:37:15][352773711751723][4588 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-08-26 12:37:15][352773711751723][4588 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:38:05][352844251194978][0 ms][INFO] === Request start === [2025-08-26 12:38:05][352844251194978][1 ms][DEBUG] START check_scloud [2025-08-26 12:38:05][352844251194978][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:38:05][352844251194978][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 31416 11216 24633516 196304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:38:05][352844251194978][255 ms][DEBUG] targetPkg: running [2025-08-26 12:38:05][352844251194978][255 ms][DEBUG] END check_scloud in 255 ms [2025-08-26 12:38:05][352844251194978][256 ms][DEBUG] START check_boot_completed [2025-08-26 12:38:05][352844251194978][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:38:05][352844251194978][302 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:38:05][352844251194978][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:38:05][352844251194978][365 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:38:05][352844251194978][365 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:38:05][352844251194978][365 ms][DEBUG] START check_internet [2025-08-26 12:38:05][352844251194978][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:38:05][352844251194978][833 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.997/199.997/199.997/0.000 ms\n [2025-08-26 12:38:05][352844251194978][833 ms][DEBUG] check_internet: online [2025-08-26 12:38:05][352844251194978][833 ms][DEBUG] END check_internet in 469 ms [2025-08-26 12:38:05][352844251194978][833 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:38:05][352844251194978][833 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352844251194978\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9155\"}'\'' -e'"" [2025-08-26 12:38:05][352844251194978][834 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:38:05][352844251194978][834 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352844251194978\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9155\"}'\'' -e'"" [2025-08-26 12:38:09][352844251194978][4301 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 12:38:09][352844251194978][4457 ms][DEBUG] proc_open done in 3623 ms; code=255; res.len=107 [2025-08-26 12:38:09][352844251194978][4457 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-08-26 12:38:09][352844251194978][4457 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 12:38:09][][0 ms][INFO] === Request start === [2025-08-26 12:38:09][][1 ms][DEBUG] START check_scloud [2025-08-26 12:38:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:38:10][][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 31416 11216 24790452 208420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:38:10][][279 ms][DEBUG] targetPkg: running [2025-08-26 12:38:10][][279 ms][DEBUG] END check_scloud in 278 ms [2025-08-26 12:38:10][][279 ms][DEBUG] START check_boot_completed [2025-08-26 12:38:10][][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:38:10][][310 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 12:38:10][][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:38:10][][372 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 12:38:10][][373 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 12:38:10][][373 ms][DEBUG] START check_internet [2025-08-26 12:38:10][][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:38:10][][608 ms][DEBUG] SU: done in 235 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=115 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 115.577/115.577/115.577/0.000 ms\n [2025-08-26 12:38:10][][608 ms][DEBUG] check_internet: online [2025-08-26 12:38:10][][608 ms][DEBUG] END check_internet in 236 ms [2025-08-26 12:38:10][][608 ms][DEBUG] rawBody.length=1129 [2025-08-26 12:38:10][][608 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8T40PQEWN\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3059\"}'\'' -e'"" [2025-08-26 12:38:10][][608 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:38:10][][609 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8T40PQEWN\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3059\"}'\'' -e'"" [2025-08-26 12:38:13][][3840 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 12:38:13][][3996 ms][DEBUG] proc_open done in 3388 ms; code=255; res.len=107 [2025-08-26 12:38:13][][3996 ms][DEBUG] END runCmdUntilRes#1 in 3388 ms [2025-08-26 12:38:13][][3996 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 12:38:16][352844251194978][0 ms][INFO] === Request start === [2025-08-26 12:38:16][352844251194978][1 ms][DEBUG] START check_scloud [2025-08-26 12:38:16][352844251194978][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:38:16][352844251194978][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 31416 11216 24971964 219096 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:38:16][352844251194978][314 ms][DEBUG] targetPkg: running [2025-08-26 12:38:16][352844251194978][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-26 12:38:16][352844251194978][314 ms][DEBUG] START check_boot_completed [2025-08-26 12:38:16][352844251194978][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:38:16][352844251194978][345 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 12:38:16][352844251194978][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:38:16][352844251194978][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:38:16][352844251194978][392 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 12:38:16][352844251194978][392 ms][DEBUG] START check_internet [2025-08-26 12:38:16][352844251194978][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:38:16][352844251194978][611 ms][DEBUG] SU: done in 219 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=115 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 115.335/115.335/115.335/0.000 ms\n [2025-08-26 12:38:16][352844251194978][611 ms][DEBUG] check_internet: online [2025-08-26 12:38:16][352844251194978][611 ms][DEBUG] END check_internet in 219 ms [2025-08-26 12:38:16][352844251194978][611 ms][DEBUG] rawBody.length=1149 [2025-08-26 12:38:16][352844251194978][611 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352844251194978\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2798\"}'\'' -e'"" [2025-08-26 12:38:16][352844251194978][611 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:38:16][352844251194978][611 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352844251194978\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2798\"}'\'' -e'"" [2025-08-26 12:38:21][352844251194978][5594 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_554495ff-3da9-40d3-8b24-0068d1ad2e9d","id":"QR_554495ff-3da9-40d3-8b24-0068d1ad2e9d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:38:21][352844251194978][5750 ms][DEBUG] proc_open done in 5139 ms; code=255; res.len=3343 [2025-08-26 12:38:21][352844251194978][5750 ms][DEBUG] END runCmdUntilRes#1 in 5139 ms [2025-08-26 12:38:21][352844251194978][5750 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:39:02][350152501061951][0 ms][INFO] === Request start === [2025-08-26 12:39:02][350152501061951][0 ms][DEBUG] START check_scloud [2025-08-26 12:39:02][350152501061951][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:39:03][350152501061951][246 ms][DEBUG] SU: done in 246 ms; outu0_a118 31416 11216 25100120 231780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:39:03][350152501061951][246 ms][DEBUG] targetPkg: running [2025-08-26 12:39:03][350152501061951][246 ms][DEBUG] END check_scloud in 246 ms [2025-08-26 12:39:03][350152501061951][246 ms][DEBUG] START check_boot_completed [2025-08-26 12:39:03][350152501061951][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:39:03][350152501061951][277 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 12:39:03][350152501061951][277 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:39:03][350152501061951][324 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:39:03][350152501061951][324 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 12:39:03][350152501061951][324 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:39:03][350152501061951][324 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350152501061951\",\"model\":\"SM-A536J\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KDI\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5043\"}'\'' -e'"" [2025-08-26 12:39:03][350152501061951][324 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:39:03][350152501061951][324 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350152501061951\",\"model\":\"SM-A536J\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KDI\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5043\"}'\'' -e'"" [2025-08-26 12:39:07][350152501061951][4167 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2664791e-22f3-4fd4-8bca-88416f9c87ac","id":"QR_2664791e-22f3-4fd4-8bca-88416f9c87ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:39:07][350152501061951][4323 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=3343 [2025-08-26 12:39:07][350152501061951][4323 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-26 12:39:07][350152501061951][4323 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:40:03][351642485570646][1 ms][INFO] === Request start === [2025-08-26 12:40:03][351642485570646][1 ms][DEBUG] START check_scloud [2025-08-26 12:40:03][351642485570646][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:40:03][351642485570646][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 31416 11216 25269184 243528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:40:03][351642485570646][305 ms][DEBUG] targetPkg: running [2025-08-26 12:40:03][351642485570646][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 12:40:03][351642485570646][305 ms][DEBUG] START check_boot_completed [2025-08-26 12:40:03][351642485570646][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:40:03][351642485570646][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 12:40:03][351642485570646][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:40:03][351642485570646][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:40:03][351642485570646][384 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 12:40:03][351642485570646][384 ms][DEBUG] START check_internet [2025-08-26 12:40:03][351642485570646][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:40:04][351642485570646][836 ms][DEBUG] SU: done in 452 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.816/202.816/202.816/0.000 ms\n [2025-08-26 12:40:04][351642485570646][836 ms][DEBUG] check_internet: online [2025-08-26 12:40:04][351642485570646][836 ms][DEBUG] END check_internet in 452 ms [2025-08-26 12:40:04][351642485570646][836 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:40:04][351642485570646][836 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642485570646\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9830\"}'\'' -e'"" [2025-08-26 12:40:04][351642485570646][836 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:40:04][351642485570646][836 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642485570646\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9830\"}'\'' -e'"" [2025-08-26 12:40:07][351642485570646][4492 ms][DEBUG] proc_open done in 3655 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 12:40:07][351642485570646][4492 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-26 12:40:07][351642485570646][4492 ms][WARN] Detected error: Process with pid 31416 either refused to load frida-agent, or terminated during injection [2025-08-26 12:40:07][351642485570646][4492 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 12:40:07][351642485570646][4632 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 12:40:07][351642485570646][4632 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 12:40:07][351642485570646][4633 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 12:40:08][351642485570646][4757 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 12:40:08][351642485570646][4757 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 12:40:08][351642485570646][4929 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 12:40:10][351642485570646][6944 ms][DEBUG] START check_boot_completed [2025-08-26 12:40:10][351642485570646][6944 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:40:10][351642485570646][6991 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:40:10][351642485570646][6991 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:40:10][351642485570646][7039 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:40:10][351642485570646][7039 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 12:40:13][351642485570646][10053 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 12:40:13][351642485570646][10053 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642485570646\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9830\"}'\'' -e'"" [2025-08-26 12:40:16][351642485570646][13474 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 12:40:16][351642485570646][13630 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=107 [2025-08-26 12:40:16][351642485570646][13630 ms][DEBUG] END runCmdUntilRes#2 in 3577 ms [2025-08-26 12:40:16][351642485570646][13630 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 12:40:17][][0 ms][INFO] === Request start === [2025-08-26 12:40:17][][1 ms][DEBUG] START check_scloud [2025-08-26 12:40:17][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:40:17][][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 32703 11216 23779548 124920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:40:17][][261 ms][DEBUG] targetPkg: running [2025-08-26 12:40:17][][261 ms][DEBUG] END check_scloud in 260 ms [2025-08-26 12:40:17][][261 ms][DEBUG] START check_boot_completed [2025-08-26 12:40:17][][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:40:17][][307 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:40:17][][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:40:17][][370 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:40:17][][370 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:40:17][][370 ms][DEBUG] START check_internet [2025-08-26 12:40:17][][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:40:17][][604 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=114 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 114.880/114.880/114.880/0.000 ms\n [2025-08-26 12:40:17][][604 ms][DEBUG] check_internet: online [2025-08-26 12:40:17][][604 ms][DEBUG] END check_internet in 234 ms [2025-08-26 12:40:17][][604 ms][DEBUG] rawBody.length=1129 [2025-08-26 12:40:17][][604 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X5069Z8B\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2011\"}'\'' -e'"" [2025-08-26 12:40:17][][604 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:40:17][][604 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X5069Z8B\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2011\"}'\'' -e'"" [2025-08-26 12:40:21][][3806 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 12:40:21][][3962 ms][DEBUG] proc_open done in 3358 ms; code=255; res.len=107 [2025-08-26 12:40:21][][3963 ms][DEBUG] END runCmdUntilRes#1 in 3358 ms [2025-08-26 12:40:21][][3963 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 12:43:03][356019749211363][1 ms][INFO] === Request start === [2025-08-26 12:43:03][356019749211363][1 ms][DEBUG] START check_scloud [2025-08-26 12:43:03][356019749211363][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:43:03][356019749211363][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 32703 11216 23871624 138976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:43:03][356019749211363][307 ms][DEBUG] targetPkg: running [2025-08-26 12:43:03][356019749211363][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 12:43:03][356019749211363][307 ms][DEBUG] START check_boot_completed [2025-08-26 12:43:03][356019749211363][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:43:03][356019749211363][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:43:03][356019749211363][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:43:03][356019749211363][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:43:03][356019749211363][401 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 12:43:03][356019749211363][401 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:43:03][356019749211363][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019749211363\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1499\"}'\'' -e'"" [2025-08-26 12:43:03][356019749211363][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:43:03][356019749211363][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019749211363\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1499\"}'\'' -e'"" [2025-08-26 12:43:08][356019749211363][4946 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3b7c40a0-0ead-4356-bc1d-5e9b31387c0e","id":"QR_3b7c40a0-0ead-4356-bc1d-5e9b31387c0e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:43:08][356019749211363][5102 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-08-26 12:43:08][356019749211363][5103 ms][DEBUG] END runCmdUntilRes#1 in 4701 ms [2025-08-26 12:43:08][356019749211363][5103 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:45:04][350545469000244][1 ms][INFO] === Request start === [2025-08-26 12:45:04][350545469000244][1 ms][DEBUG] START check_scloud [2025-08-26 12:45:04][350545469000244][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:45:05][350545469000244][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 32703 11216 24011044 150792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:45:05][350545469000244][318 ms][DEBUG] targetPkg: running [2025-08-26 12:45:05][350545469000244][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-26 12:45:05][350545469000244][318 ms][DEBUG] START check_boot_completed [2025-08-26 12:45:05][350545469000244][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:45:05][350545469000244][349 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 12:45:05][350545469000244][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:45:05][350545469000244][398 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 12:45:05][350545469000244][398 ms][DEBUG] END check_boot_completed in 80 ms [2025-08-26 12:45:05][350545469000244][398 ms][DEBUG] rawBody.length=1158 [2025-08-26 12:45:05][350545469000244][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545469000244\",\"model\":\"SM-X610\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52XC03YFEJ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4421\"}'\'' -e'"" [2025-08-26 12:45:05][350545469000244][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:45:05][350545469000244][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545469000244\",\"model\":\"SM-X610\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52XC03YFEJ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4421\"}'\'' -e'"" [2025-08-26 12:45:09][350545469000244][4317 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_563f1d08-3c7d-4026-8376-4ca18d3e8f08","id":"QR_563f1d08-3c7d-4026-8376-4ca18d3e8f08","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:45:09][350545469000244][4473 ms][DEBUG] proc_open done in 4075 ms; code=255; res.len=3343 [2025-08-26 12:45:09][350545469000244][4473 ms][DEBUG] END runCmdUntilRes#1 in 4075 ms [2025-08-26 12:45:09][350545469000244][4473 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:48:04][356722918273987][1 ms][INFO] === Request start === [2025-08-26 12:48:04][356722918273987][1 ms][DEBUG] START check_scloud [2025-08-26 12:48:04][356722918273987][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:48:05][356722918273987][302 ms][DEBUG] SU: done in 300 ms; outu0_a118 32703 11216 24156288 162164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:48:05][356722918273987][302 ms][DEBUG] targetPkg: running [2025-08-26 12:48:05][356722918273987][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-26 12:48:05][356722918273987][302 ms][DEBUG] START check_boot_completed [2025-08-26 12:48:05][356722918273987][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:48:05][356722918273987][349 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:48:05][356722918273987][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:48:05][356722918273987][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:48:05][356722918273987][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:48:05][356722918273987][411 ms][DEBUG] START check_internet [2025-08-26 12:48:05][356722918273987][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:48:05][356722918273987][895 ms][DEBUG] SU: done in 485 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.391/202.391/202.391/0.000 ms\n [2025-08-26 12:48:05][356722918273987][896 ms][DEBUG] check_internet: online [2025-08-26 12:48:05][356722918273987][896 ms][DEBUG] END check_internet in 485 ms [2025-08-26 12:48:05][356722918273987][896 ms][DEBUG] rawBody.length=1149 [2025-08-26 12:48:05][356722918273987][896 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722918273987\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7653\"}'\'' -e'"" [2025-08-26 12:48:05][356722918273987][896 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:48:05][356722918273987][896 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722918273987\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7653\"}'\'' -e'"" [2025-08-26 12:48:13][356722918273987][8721 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_28771c56-b766-487a-b381-2ff273f2b309","id":"QR_28771c56-b766-487a-b381-2ff273f2b309","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:48:13][356722918273987][8878 ms][DEBUG] proc_open done in 7982 ms; code=255; res.len=3343 [2025-08-26 12:48:13][356722918273987][8878 ms][DEBUG] END runCmdUntilRes#1 in 7982 ms [2025-08-26 12:48:13][356722918273987][8878 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:49:03][353437173580322][0 ms][INFO] === Request start === [2025-08-26 12:49:03][353437173580322][1 ms][DEBUG] START check_scloud [2025-08-26 12:49:03][353437173580322][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:49:03][353437173580322][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 32703 11216 24288484 172860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:49:03][353437173580322][311 ms][DEBUG] targetPkg: running [2025-08-26 12:49:03][353437173580322][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 12:49:03][353437173580322][311 ms][DEBUG] START check_boot_completed [2025-08-26 12:49:03][353437173580322][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:49:03][353437173580322][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:49:03][353437173580322][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:49:03][353437173580322][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:49:03][353437173580322][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:49:03][353437173580322][420 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:49:03][353437173580322][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353437173580322\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1039\"}'\'' -e'"" [2025-08-26 12:49:03][353437173580322][421 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:49:03][353437173580322][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353437173580322\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1039\"}'\'' -e'"" [2025-08-26 12:49:07][353437173580322][4403 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_421aa2c6-3361-4bc9-9f0f-96bae63a1c53","id":"QR_421aa2c6-3361-4bc9-9f0f-96bae63a1c53","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:49:07][353437173580322][4560 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-08-26 12:49:07][353437173580322][4560 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-08-26 12:49:07][353437173580322][4560 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:50:03][351104342037913][0 ms][INFO] === Request start === [2025-08-26 12:50:03][351104342037913][1 ms][DEBUG] START check_scloud [2025-08-26 12:50:03][351104342037913][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:50:03][351104342037913][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 32703 11216 24453448 184912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:50:03][351104342037913][291 ms][DEBUG] targetPkg: running [2025-08-26 12:50:03][351104342037913][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-26 12:50:03][351104342037913][291 ms][DEBUG] START check_boot_completed [2025-08-26 12:50:03][351104342037913][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:50:03][351104342037913][322 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 12:50:03][351104342037913][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:50:03][351104342037913][385 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 12:50:03][351104342037913][385 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 12:50:03][351104342037913][385 ms][DEBUG] START check_internet [2025-08-26 12:50:03][351104342037913][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:50:04][351104342037913][900 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.013/202.013/202.013/0.000 ms\n [2025-08-26 12:50:04][351104342037913][900 ms][DEBUG] check_internet: online [2025-08-26 12:50:04][351104342037913][900 ms][DEBUG] END check_internet in 516 ms [2025-08-26 12:50:04][351104342037913][900 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:50:04][351104342037913][900 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351104342037913\",\"model\":\"SM-A166B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9623\"}'\'' -e'"" [2025-08-26 12:50:04][351104342037913][900 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:50:04][351104342037913][900 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351104342037913\",\"model\":\"SM-A166B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9623\"}'\'' -e'"" [2025-08-26 12:50:07][351104342037913][4586 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_843090ed-fe48-422d-a57a-296d1a6fc7c8","id":"QR_843090ed-fe48-422d-a57a-296d1a6fc7c8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:50:07][351104342037913][4743 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3343 [2025-08-26 12:50:07][351104342037913][4743 ms][DEBUG] END runCmdUntilRes#1 in 3843 ms [2025-08-26 12:50:07][351104342037913][4743 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:51:03][357674438370760][1 ms][INFO] === Request start === [2025-08-26 12:51:03][357674438370760][1 ms][DEBUG] START check_scloud [2025-08-26 12:51:03][357674438370760][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:51:03][357674438370760][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 32703 11216 24600108 195656 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:51:03][357674438370760][309 ms][DEBUG] targetPkg: running [2025-08-26 12:51:03][357674438370760][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 12:51:03][357674438370760][309 ms][DEBUG] START check_boot_completed [2025-08-26 12:51:03][357674438370760][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:51:03][357674438370760][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 12:51:03][357674438370760][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:51:04][357674438370760][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:51:04][357674438370760][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 12:51:04][357674438370760][387 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:51:04][357674438370760][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674438370760\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3692\"}'\'' -e'"" [2025-08-26 12:51:04][357674438370760][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:51:04][357674438370760][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674438370760\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3692\"}'\'' -e'"" [2025-08-26 12:51:08][357674438370760][4402 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4a722cd2-4f44-4597-a5c2-f39d01f296aa","id":"QR_4a722cd2-4f44-4597-a5c2-f39d01f296aa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:51:08][357674438370760][4558 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3343 [2025-08-26 12:51:08][357674438370760][4558 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-08-26 12:51:08][357674438370760][4558 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:51:11][350603387159343][0 ms][INFO] === Request start === [2025-08-26 12:51:11][350603387159343][1 ms][DEBUG] START check_scloud [2025-08-26 12:51:11][350603387159343][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:51:12][350603387159343][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 32703 11216 24730420 207504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:51:12][350603387159343][313 ms][DEBUG] targetPkg: running [2025-08-26 12:51:12][350603387159343][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-26 12:51:12][350603387159343][313 ms][DEBUG] START check_boot_completed [2025-08-26 12:51:12][350603387159343][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:51:12][350603387159343][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:51:12][350603387159343][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:51:12][350603387159343][422 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:51:12][350603387159343][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:51:12][350603387159343][422 ms][DEBUG] rawBody.length=1149 [2025-08-26 12:51:12][350603387159343][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603387159343\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1050\"}'\'' -e'"" [2025-08-26 12:51:12][350603387159343][422 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:51:12][350603387159343][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603387159343\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1050\"}'\'' -e'"" [2025-08-26 12:51:17][350603387159343][5421 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ce7d6161-7021-4d58-86ac-0a1141022174","id":"QR_ce7d6161-7021-4d58-86ac-0a1141022174","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:51:17][350603387159343][5577 ms][DEBUG] proc_open done in 5154 ms; code=255; res.len=3343 [2025-08-26 12:51:17][350603387159343][5577 ms][DEBUG] END runCmdUntilRes#1 in 5155 ms [2025-08-26 12:51:17][350603387159343][5577 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:53:03][352677531106432][0 ms][INFO] === Request start === [2025-08-26 12:53:03][352677531106432][1 ms][DEBUG] START check_scloud [2025-08-26 12:53:03][352677531106432][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:53:03][352677531106432][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 32703 11216 24877044 218356 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:53:03][352677531106432][306 ms][DEBUG] targetPkg: running [2025-08-26 12:53:03][352677531106432][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-26 12:53:03][352677531106432][306 ms][DEBUG] START check_boot_completed [2025-08-26 12:53:03][352677531106432][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:53:03][352677531106432][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:53:03][352677531106432][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:53:03][352677531106432][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:53:03][352677531106432][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 12:53:03][352677531106432][399 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:53:03][352677531106432][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531106432\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9771\"}'\'' -e'"" [2025-08-26 12:53:03][352677531106432][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:53:03][352677531106432][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677531106432\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9771\"}'\'' -e'"" [2025-08-26 12:53:07][352677531106432][4180 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f103d3b7-7c48-4889-afa0-c1cfe22c5bb9","id":"QR_f103d3b7-7c48-4889-afa0-c1cfe22c5bb9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:53:07][352677531106432][4336 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-26 12:53:07][352677531106432][4336 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-26 12:53:07][352677531106432][4336 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:56:03][354626221830221][1 ms][INFO] === Request start === [2025-08-26 12:56:03][354626221830221][1 ms][DEBUG] START check_scloud [2025-08-26 12:56:03][354626221830221][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:56:03][354626221830221][326 ms][DEBUG] SU: done in 324 ms; outu0_a118 32703 11216 25032792 230708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:56:03][354626221830221][326 ms][DEBUG] targetPkg: running [2025-08-26 12:56:03][354626221830221][326 ms][DEBUG] END check_scloud in 325 ms [2025-08-26 12:56:03][354626221830221][326 ms][DEBUG] START check_boot_completed [2025-08-26 12:56:03][354626221830221][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:56:03][354626221830221][373 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:56:03][354626221830221][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:56:03][354626221830221][435 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:56:03][354626221830221][435 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:56:03][354626221830221][435 ms][DEBUG] START check_internet [2025-08-26 12:56:03][354626221830221][435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:56:04][354626221830221][872 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.171/202.171/202.171/0.000 ms\n [2025-08-26 12:56:04][354626221830221][873 ms][DEBUG] check_internet: online [2025-08-26 12:56:04][354626221830221][873 ms][DEBUG] END check_internet in 438 ms [2025-08-26 12:56:04][354626221830221][873 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:56:04][354626221830221][873 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626221830221\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6396\"}'\'' -e'"" [2025-08-26 12:56:04][354626221830221][873 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:56:04][354626221830221][873 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354626221830221\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6396\"}'\'' -e'"" [2025-08-26 12:56:08][354626221830221][4684 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e532f2c7-d462-4f42-8fe4-44e04566353d","id":"QR_e532f2c7-d462-4f42-8fe4-44e04566353d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:56:08][354626221830221][4840 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-26 12:56:08][354626221830221][4840 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-26 12:56:08][354626221830221][4840 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:57:04][352334111694029][0 ms][INFO] === Request start === [2025-08-26 12:57:04][352334111694029][1 ms][DEBUG] START check_scloud [2025-08-26 12:57:04][352334111694029][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:57:04][352334111694029][340 ms][DEBUG] SU: done in 339 ms; outu0_a118 32703 11216 25162944 231456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:57:04][352334111694029][340 ms][DEBUG] targetPkg: running [2025-08-26 12:57:04][352334111694029][340 ms][DEBUG] END check_scloud in 340 ms [2025-08-26 12:57:04][352334111694029][340 ms][DEBUG] START check_boot_completed [2025-08-26 12:57:04][352334111694029][340 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:57:04][352334111694029][387 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:57:04][352334111694029][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:57:04][352334111694029][449 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:57:04][352334111694029][450 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:57:04][352334111694029][450 ms][DEBUG] rawBody.length=1149 [2025-08-26 12:57:04][352334111694029][450 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352334111694029\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5529\"}'\'' -e'"" [2025-08-26 12:57:04][352334111694029][450 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:57:04][352334111694029][450 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352334111694029\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5529\"}'\'' -e'"" [2025-08-26 12:57:08][352334111694029][4183 ms][DEBUG] proc_open done in 3733 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 12:57:08][352334111694029][4183 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-08-26 12:57:08][352334111694029][4183 ms][WARN] Detected error: Process with pid 32703 either refused to load frida-agent, or terminated during injection [2025-08-26 12:57:08][352334111694029][4183 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 12:57:08][352334111694029][4324 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 12:57:08][352334111694029][4324 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 12:57:08][352334111694029][4324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 12:57:08][352334111694029][4481 ms][DEBUG] SU: done in 157 ms; out [2025-08-26 12:57:08][352334111694029][4481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 12:57:09][352334111694029][4651 ms][DEBUG] SU: done in 171 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 12:57:11][352334111694029][6667 ms][DEBUG] START check_boot_completed [2025-08-26 12:57:11][352334111694029][6667 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:57:11][352334111694029][6714 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:57:11][352334111694029][6714 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:57:11][352334111694029][6760 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 12:57:11][352334111694029][6760 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 12:57:14][352334111694029][9775 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 12:57:14][352334111694029][9775 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352334111694029\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5529\"}'\'' -e'"" [2025-08-26 12:57:19][352334111694029][14649 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c7c810fc-6008-4e82-8d63-5de7eb70d9f3","id":"QR_c7c810fc-6008-4e82-8d63-5de7eb70d9f3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:57:19][352334111694029][14805 ms][DEBUG] proc_open done in 5030 ms; code=255; res.len=3343 [2025-08-26 12:57:19][352334111694029][14806 ms][DEBUG] END runCmdUntilRes#2 in 5030 ms [2025-08-26 12:57:19][352334111694029][14806 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:57:24][351240641259806][0 ms][INFO] === Request start === [2025-08-26 12:57:24][351240641259806][1 ms][DEBUG] START check_scloud [2025-08-26 12:57:24][351240641259806][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:57:24][351240641259806][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 2802 11216 23803612 125728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:57:24][351240641259806][254 ms][DEBUG] targetPkg: running [2025-08-26 12:57:24][351240641259806][254 ms][DEBUG] END check_scloud in 253 ms [2025-08-26 12:57:24][351240641259806][254 ms][DEBUG] START check_boot_completed [2025-08-26 12:57:24][351240641259806][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:57:24][351240641259806][300 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:57:24][351240641259806][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:57:24][351240641259806][348 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 12:57:24][351240641259806][348 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 12:57:24][351240641259806][348 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:57:24][351240641259806][348 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641259806\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2297\"}'\'' -e'"" [2025-08-26 12:57:24][351240641259806][349 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:57:24][351240641259806][349 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240641259806\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2297\"}'\'' -e'"" [2025-08-26 12:57:29][351240641259806][4893 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ca0a635-3ce4-453c-b9fb-dfd7cb4523e2","id":"QR_0ca0a635-3ce4-453c-b9fb-dfd7cb4523e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:57:29][351240641259806][5049 ms][DEBUG] proc_open done in 4700 ms; code=255; res.len=3343 [2025-08-26 12:57:29][351240641259806][5049 ms][DEBUG] END runCmdUntilRes#1 in 4701 ms [2025-08-26 12:57:29][351240641259806][5050 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:57:31][353402200576784][0 ms][INFO] === Request start === [2025-08-26 12:57:31][353402200576784][1 ms][DEBUG] START check_scloud [2025-08-26 12:57:31][353402200576784][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:57:31][353402200576784][232 ms][DEBUG] SU: done in 232 ms; outu0_a118 2802 11216 24006448 138756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:57:31][353402200576784][233 ms][DEBUG] targetPkg: running [2025-08-26 12:57:31][353402200576784][233 ms][DEBUG] END check_scloud in 232 ms [2025-08-26 12:57:31][353402200576784][233 ms][DEBUG] START check_boot_completed [2025-08-26 12:57:31][353402200576784][233 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:57:31][353402200576784][278 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 12:57:31][353402200576784][278 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:57:31][353402200576784][340 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:57:31][353402200576784][340 ms][DEBUG] END check_boot_completed in 107 ms [2025-08-26 12:57:31][353402200576784][340 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:57:31][353402200576784][340 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353402200576784\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9816\"}'\'' -e'"" [2025-08-26 12:57:31][353402200576784][340 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:57:31][353402200576784][340 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353402200576784\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9816\"}'\'' -e'"" [2025-08-26 12:57:35][353402200576784][3823 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6f0d7a2e-55ec-4ce6-8c53-860b9ebffd1b","id":"QR_6f0d7a2e-55ec-4ce6-8c53-860b9ebffd1b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:57:35][353402200576784][3980 ms][DEBUG] proc_open done in 3640 ms; code=255; res.len=3343 [2025-08-26 12:57:35][353402200576784][3980 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-08-26 12:57:35][353402200576784][3980 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:58:03][352549930037700][0 ms][INFO] === Request start === [2025-08-26 12:58:03][352549930037700][1 ms][DEBUG] START check_scloud [2025-08-26 12:58:03][352549930037700][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:58:03][352549930037700][253 ms][DEBUG] SU: done in 253 ms; outu0_a118 2802 11216 24016596 150976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:58:03][352549930037700][253 ms][DEBUG] targetPkg: running [2025-08-26 12:58:03][352549930037700][254 ms][DEBUG] END check_scloud in 253 ms [2025-08-26 12:58:03][352549930037700][254 ms][DEBUG] START check_boot_completed [2025-08-26 12:58:03][352549930037700][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:58:03][352549930037700][300 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:58:03][352549930037700][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:58:03][352549930037700][363 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:58:03][352549930037700][363 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:58:03][352549930037700][363 ms][DEBUG] START check_internet [2025-08-26 12:58:03][352549930037700][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:58:04][352549930037700][628 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=143 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 143.872/143.872/143.872/0.000 ms\n [2025-08-26 12:58:04][352549930037700][628 ms][DEBUG] check_internet: online [2025-08-26 12:58:04][352549930037700][628 ms][DEBUG] END check_internet in 266 ms [2025-08-26 12:58:04][352549930037700][628 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:58:04][352549930037700][629 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549930037700\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7826\"}'\'' -e'"" [2025-08-26 12:58:04][352549930037700][629 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:58:04][352549930037700][629 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549930037700\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7826\"}'\'' -e'"" [2025-08-26 12:58:08][352549930037700][5065 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_25453081-a528-4dc8-8f15-33aaa6b648aa","id":"QR_25453081-a528-4dc8-8f15-33aaa6b648aa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:58:08][352549930037700][5221 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-08-26 12:58:08][352549930037700][5221 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-08-26 12:58:08][352549930037700][5221 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:58:11][350938288972802][0 ms][INFO] === Request start === [2025-08-26 12:58:11][350938288972802][0 ms][DEBUG] START check_scloud [2025-08-26 12:58:11][350938288972802][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:58:11][350938288972802][301 ms][DEBUG] SU: done in 301 ms; outu0_a118 2802 11216 24171356 161344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:58:11][350938288972802][301 ms][DEBUG] targetPkg: running [2025-08-26 12:58:11][350938288972802][301 ms][DEBUG] END check_scloud in 301 ms [2025-08-26 12:58:11][350938288972802][301 ms][DEBUG] START check_boot_completed [2025-08-26 12:58:11][350938288972802][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:58:11][350938288972802][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 12:58:11][350938288972802][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:58:11][350938288972802][410 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 12:58:11][350938288972802][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 12:58:11][350938288972802][410 ms][DEBUG] START check_internet [2025-08-26 12:58:11][350938288972802][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 12:58:12][350938288972802][707 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=183 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 183.851/183.851/183.851/0.000 ms\n [2025-08-26 12:58:12][350938288972802][707 ms][DEBUG] check_internet: online [2025-08-26 12:58:12][350938288972802][708 ms][DEBUG] END check_internet in 297 ms [2025-08-26 12:58:12][350938288972802][708 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:58:12][350938288972802][708 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938288972802\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6990\"}'\'' -e'"" [2025-08-26 12:58:12][350938288972802][708 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:58:12][350938288972802][708 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938288972802\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6990\"}'\'' -e'"" [2025-08-26 12:58:15][350938288972802][4269 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1ef94d4e-2e58-41d1-bf72-567b1400f07d","id":"QR_1ef94d4e-2e58-41d1-bf72-567b1400f07d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:58:15][350938288972802][4425 ms][DEBUG] proc_open done in 3717 ms; code=255; res.len=3343 [2025-08-26 12:58:15][350938288972802][4425 ms][DEBUG] END runCmdUntilRes#1 in 3717 ms [2025-08-26 12:58:15][350938288972802][4425 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 12:59:03][354747951793296][0 ms][INFO] === Request start === [2025-08-26 12:59:03][354747951793296][1 ms][DEBUG] START check_scloud [2025-08-26 12:59:03][354747951793296][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 12:59:03][354747951793296][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 2802 11216 24295452 172500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 12:59:03][354747951793296][318 ms][DEBUG] targetPkg: running [2025-08-26 12:59:03][354747951793296][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-26 12:59:03][354747951793296][318 ms][DEBUG] START check_boot_completed [2025-08-26 12:59:03][354747951793296][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 12:59:03][354747951793296][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 12:59:03][354747951793296][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 12:59:03][354747951793296][442 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 12:59:03][354747951793296][443 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 12:59:03][354747951793296][443 ms][DEBUG] rawBody.length=1148 [2025-08-26 12:59:03][354747951793296][443 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747951793296\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5836\"}'\'' -e'"" [2025-08-26 12:59:03][354747951793296][443 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 12:59:03][354747951793296][443 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747951793296\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5836\"}'\'' -e'"" [2025-08-26 12:59:07][354747951793296][4379 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b24e6a04-dc59-47f1-b077-ef1e4c199671","id":"QR_b24e6a04-dc59-47f1-b077-ef1e4c199671","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 12:59:07][354747951793296][4535 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-08-26 12:59:07][354747951793296][4535 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-26 12:59:07][354747951793296][4535 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:00:05][354068192973864][0 ms][INFO] === Request start === [2025-08-26 13:00:05][354068192973864][1 ms][DEBUG] START check_scloud [2025-08-26 13:00:05][354068192973864][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:00:05][354068192973864][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 2802 11216 24452176 184672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:00:05][354068192973864][301 ms][DEBUG] targetPkg: running [2025-08-26 13:00:05][354068192973864][301 ms][DEBUG] END check_scloud in 301 ms [2025-08-26 13:00:05][354068192973864][301 ms][DEBUG] START check_boot_completed [2025-08-26 13:00:05][354068192973864][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:00:05][354068192973864][347 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 13:00:05][354068192973864][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:00:05][354068192973864][425 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 13:00:05][354068192973864][425 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-26 13:00:05][354068192973864][425 ms][DEBUG] START check_internet [2025-08-26 13:00:05][354068192973864][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:00:06][354068192973864][893 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.286/201.286/201.286/0.000 ms\n [2025-08-26 13:00:06][354068192973864][894 ms][DEBUG] check_internet: online [2025-08-26 13:00:06][354068192973864][894 ms][DEBUG] END check_internet in 468 ms [2025-08-26 13:00:06][354068192973864][894 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:00:06][354068192973864][894 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068192973864\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9666\"}'\'' -e'"" [2025-08-26 13:00:06][354068192973864][894 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:00:06][354068192973864][894 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068192973864\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9666\"}'\'' -e'"" [2025-08-26 13:00:10][354068192973864][5017 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8845ca6c-611a-4dae-bc9f-4f2de0ab53cb","id":"QR_8845ca6c-611a-4dae-bc9f-4f2de0ab53cb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:00:10][354068192973864][5174 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3343 [2025-08-26 13:00:10][354068192973864][5174 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-26 13:00:10][354068192973864][5174 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:01:31][355885149760154][1 ms][INFO] === Request start === [2025-08-26 13:01:31][355885149760154][1 ms][DEBUG] START check_scloud [2025-08-26 13:01:31][355885149760154][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:01:31][355885149760154][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 2802 11216 24617268 195668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:01:31][355885149760154][314 ms][DEBUG] targetPkg: running [2025-08-26 13:01:31][355885149760154][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-26 13:01:31][355885149760154][314 ms][DEBUG] START check_boot_completed [2025-08-26 13:01:31][355885149760154][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:01:31][355885149760154][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:01:31][355885149760154][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:01:31][355885149760154][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:01:31][355885149760154][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 13:01:31][355885149760154][407 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:01:31][355885149760154][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355885149760154\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1847\"}'\'' -e'"" [2025-08-26 13:01:31][355885149760154][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:01:31][355885149760154][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355885149760154\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1847\"}'\'' -e'"" [2025-08-26 13:01:35][355885149760154][4578 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_afef7368-72fa-4712-8007-462ac78e10fd","id":"QR_afef7368-72fa-4712-8007-462ac78e10fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:01:35][355885149760154][4734 ms][DEBUG] proc_open done in 4327 ms; code=255; res.len=3343 [2025-08-26 13:01:35][355885149760154][4734 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-26 13:01:35][355885149760154][4735 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:02:03][352677532186391][0 ms][INFO] === Request start === [2025-08-26 13:02:03][352677532186391][1 ms][DEBUG] START check_scloud [2025-08-26 13:02:03][352677532186391][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:02:03][352677532186391][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 2802 11216 24759832 206904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:02:03][352677532186391][285 ms][DEBUG] targetPkg: running [2025-08-26 13:02:03][352677532186391][285 ms][DEBUG] END check_scloud in 284 ms [2025-08-26 13:02:03][352677532186391][285 ms][DEBUG] START check_boot_completed [2025-08-26 13:02:03][352677532186391][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:02:03][352677532186391][316 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 13:02:03][352677532186391][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:02:03][352677532186391][363 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:02:03][352677532186391][363 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 13:02:03][352677532186391][363 ms][DEBUG] START check_internet [2025-08-26 13:02:03][352677532186391][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:02:04][352677532186391][675 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=214 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 214.529/214.529/214.529/0.000 ms\n [2025-08-26 13:02:04][352677532186391][675 ms][DEBUG] check_internet: online [2025-08-26 13:02:04][352677532186391][675 ms][DEBUG] END check_internet in 313 ms [2025-08-26 13:02:04][352677532186391][675 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:02:04][352677532186391][675 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532186391\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9551\"}'\'' -e'"" [2025-08-26 13:02:04][352677532186391][675 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:02:04][352677532186391][675 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532186391\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9551\"}'\'' -e'"" [2025-08-26 13:02:07][352677532186391][4268 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6bc8da17-73e9-4262-a5e4-fa4ffff3f86f","id":"QR_6bc8da17-73e9-4262-a5e4-fa4ffff3f86f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:02:07][352677532186391][4424 ms][DEBUG] proc_open done in 3749 ms; code=255; res.len=3343 [2025-08-26 13:02:07][352677532186391][4425 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-08-26 13:02:07][352677532186391][4425 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:04:03][350131655299104][1 ms][INFO] === Request start === [2025-08-26 13:04:03][350131655299104][1 ms][DEBUG] START check_scloud [2025-08-26 13:04:03][350131655299104][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:04:03][350131655299104][311 ms][DEBUG] SU: done in 309 ms; outu0_a118 2802 11216 24914684 217952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:04:03][350131655299104][311 ms][DEBUG] targetPkg: running [2025-08-26 13:04:03][350131655299104][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 13:04:03][350131655299104][311 ms][DEBUG] START check_boot_completed [2025-08-26 13:04:03][350131655299104][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:04:03][350131655299104][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:04:03][350131655299104][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:04:03][350131655299104][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:04:03][350131655299104][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 13:04:03][350131655299104][404 ms][DEBUG] START check_internet [2025-08-26 13:04:03][350131655299104][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:04:03][350131655299104][654 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=148 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 148.934/148.934/148.934/0.000 ms\n [2025-08-26 13:04:03][350131655299104][654 ms][DEBUG] check_internet: online [2025-08-26 13:04:03][350131655299104][654 ms][DEBUG] END check_internet in 250 ms [2025-08-26 13:04:03][350131655299104][655 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:04:03][350131655299104][655 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350131655299104\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEH\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2805\"}'\'' -e'"" [2025-08-26 13:04:03][350131655299104][655 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:04:03][350131655299104][655 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350131655299104\",\"model\":\"SM-A325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEH\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2805\"}'\'' -e'"" [2025-08-26 13:04:07][350131655299104][4544 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_71a76206-e8e7-4e10-a07b-1fbab1264d76","id":"QR_71a76206-e8e7-4e10-a07b-1fbab1264d76","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:04:07][350131655299104][4700 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-08-26 13:04:07][350131655299104][4700 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-08-26 13:04:07][350131655299104][4700 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:05:03][357967975950741][0 ms][INFO] === Request start === [2025-08-26 13:05:03][357967975950741][1 ms][DEBUG] START check_scloud [2025-08-26 13:05:03][357967975950741][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:05:03][357967975950741][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 2802 11216 25036640 229880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:05:03][357967975950741][311 ms][DEBUG] targetPkg: running [2025-08-26 13:05:03][357967975950741][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 13:05:03][357967975950741][311 ms][DEBUG] START check_boot_completed [2025-08-26 13:05:03][357967975950741][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:05:03][357967975950741][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:05:03][357967975950741][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:05:03][357967975950741][420 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 13:05:03][357967975950741][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:05:03][357967975950741][420 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:05:03][357967975950741][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967975950741\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4923\"}'\'' -e'"" [2025-08-26 13:05:03][357967975950741][420 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:05:03][357967975950741][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967975950741\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4923\"}'\'' -e'"" [2025-08-26 13:05:07][357967975950741][4450 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f06a5b1a-e3d4-4107-aca9-35f426d2273b","id":"QR_f06a5b1a-e3d4-4107-aca9-35f426d2273b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:05:08][357967975950741][4606 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-26 13:05:08][357967975950741][4606 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-26 13:05:08][357967975950741][4606 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:05:12][350915068718431][0 ms][INFO] === Request start === [2025-08-26 13:05:12][350915068718431][1 ms][DEBUG] START check_scloud [2025-08-26 13:05:12][350915068718431][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:05:12][350915068718431][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 2802 11216 25173096 240772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:05:12][350915068718431][288 ms][DEBUG] targetPkg: running [2025-08-26 13:05:12][350915068718431][288 ms][DEBUG] END check_scloud in 287 ms [2025-08-26 13:05:12][350915068718431][288 ms][DEBUG] START check_boot_completed [2025-08-26 13:05:12][350915068718431][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:05:12][350915068718431][333 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 13:05:12][350915068718431][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:05:12][350915068718431][427 ms][DEBUG] SU: done in 93 ms; out [2025-08-26 13:05:12][350915068718431][427 ms][DEBUG] END check_boot_completed in 138 ms [2025-08-26 13:05:12][350915068718431][427 ms][DEBUG] rawBody.length=1149 [2025-08-26 13:05:12][350915068718431][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915068718431\",\"model\":\"SM-A047M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1976\"}'\'' -e'"" [2025-08-26 13:05:12][350915068718431][427 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:05:12][350915068718431][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915068718431\",\"model\":\"SM-A047M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1976\"}'\'' -e'"" [2025-08-26 13:05:16][350915068718431][4176 ms][DEBUG] proc_open done in 3749 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-26 13:05:16][350915068718431][4176 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-08-26 13:05:16][350915068718431][4176 ms][WARN] Detected error: Process with pid 2802 either refused to load frida-agent, or terminated during injection [2025-08-26 13:05:16][350915068718431][4176 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 13:05:16][350915068718431][4317 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 13:05:16][350915068718431][4317 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 13:05:16][350915068718431][4317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 13:05:16][350915068718431][4458 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 13:05:16][350915068718431][4458 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 13:05:16][350915068718431][4613 ms][DEBUG] SU: done in 155 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 13:05:18][350915068718431][6628 ms][DEBUG] START check_boot_completed [2025-08-26 13:05:18][350915068718431][6628 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:05:18][350915068718431][6675 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:05:18][350915068718431][6675 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:05:19][350915068718431][6738 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:05:19][350915068718431][6738 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:05:22][350915068718431][9752 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 13:05:22][350915068718431][9753 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915068718431\",\"model\":\"SM-A047M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1976\"}'\'' -e'"" [2025-08-26 13:05:26][350915068718431][14361 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a4a0a331-9e82-44e1-b5c1-80df6cd96727","id":"QR_a4a0a331-9e82-44e1-b5c1-80df6cd96727","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:05:26][350915068718431][14517 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-08-26 13:05:26][350915068718431][14517 ms][DEBUG] END runCmdUntilRes#2 in 4765 ms [2025-08-26 13:05:26][350915068718431][14517 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:07:03][350824192288008][1 ms][INFO] === Request start === [2025-08-26 13:07:03][350824192288008][1 ms][DEBUG] START check_scloud [2025-08-26 13:07:03][350824192288008][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:07:04][350824192288008][283 ms][DEBUG] SU: done in 281 ms; outu0_a118 4241 11216 23748080 128044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:07:04][350824192288008][283 ms][DEBUG] targetPkg: running [2025-08-26 13:07:04][350824192288008][283 ms][DEBUG] END check_scloud in 282 ms [2025-08-26 13:07:04][350824192288008][283 ms][DEBUG] START check_boot_completed [2025-08-26 13:07:04][350824192288008][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:07:04][350824192288008][329 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:07:04][350824192288008][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:07:04][350824192288008][392 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:07:04][350824192288008][392 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:07:04][350824192288008][392 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:07:04][350824192288008][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824192288008\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1181\"}'\'' -e'"" [2025-08-26 13:07:04][350824192288008][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:07:04][350824192288008][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824192288008\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1181\"}'\'' -e'"" [2025-08-26 13:07:08][350824192288008][4078 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8e87af58-d488-416e-a82b-461a00591bcd","id":"QR_8e87af58-d488-416e-a82b-461a00591bcd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:07:08][350824192288008][4234 ms][DEBUG] proc_open done in 3843 ms; code=255; res.len=3343 [2025-08-26 13:07:08][350824192288008][4235 ms][DEBUG] END runCmdUntilRes#1 in 3843 ms [2025-08-26 13:07:08][350824192288008][4235 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:08:03][350040125315772][0 ms][INFO] === Request start === [2025-08-26 13:08:03][350040125315772][1 ms][DEBUG] START check_scloud [2025-08-26 13:08:03][350040125315772][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:08:04][350040125315772][326 ms][DEBUG] SU: done in 325 ms; outu0_a118 4241 11216 23868936 138844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:08:04][350040125315772][327 ms][DEBUG] targetPkg: running [2025-08-26 13:08:04][350040125315772][327 ms][DEBUG] END check_scloud in 326 ms [2025-08-26 13:08:04][350040125315772][327 ms][DEBUG] START check_boot_completed [2025-08-26 13:08:04][350040125315772][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:08:04][350040125315772][373 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:08:04][350040125315772][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:08:04][350040125315772][451 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 13:08:04][350040125315772][451 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 13:08:04][350040125315772][451 ms][DEBUG] START check_internet [2025-08-26 13:08:04][350040125315772][451 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:08:04][350040125315772][952 ms][DEBUG] SU: done in 501 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.495/202.495/202.495/0.000 ms\n [2025-08-26 13:08:04][350040125315772][952 ms][DEBUG] check_internet: online [2025-08-26 13:08:04][350040125315772][953 ms][DEBUG] END check_internet in 501 ms [2025-08-26 13:08:04][350040125315772][953 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:08:04][350040125315772][953 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350040125315772\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6004\"}'\'' -e'"" [2025-08-26 13:08:04][350040125315772][953 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:08:04][350040125315772][953 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350040125315772\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6004\"}'\'' -e'"" [2025-08-26 13:08:08][350040125315772][4731 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bf4945d1-28b8-435a-9665-40fd32d509c8","id":"QR_bf4945d1-28b8-435a-9665-40fd32d509c8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:08:08][350040125315772][4887 ms][DEBUG] proc_open done in 3935 ms; code=255; res.len=3343 [2025-08-26 13:08:08][350040125315772][4887 ms][DEBUG] END runCmdUntilRes#1 in 3935 ms [2025-08-26 13:08:08][350040125315772][4887 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:08:11][352221808802140][0 ms][INFO] === Request start === [2025-08-26 13:08:11][352221808802140][1 ms][DEBUG] START check_scloud [2025-08-26 13:08:11][352221808802140][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:08:11][352221808802140][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 4241 11216 24005328 150504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:08:11][352221808802140][324 ms][DEBUG] targetPkg: running [2025-08-26 13:08:11][352221808802140][324 ms][DEBUG] END check_scloud in 324 ms [2025-08-26 13:08:11][352221808802140][324 ms][DEBUG] START check_boot_completed [2025-08-26 13:08:11][352221808802140][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:08:11][352221808802140][371 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:08:11][352221808802140][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:08:11][352221808802140][449 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 13:08:11][352221808802140][449 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 13:08:11][352221808802140][449 ms][DEBUG] START check_internet [2025-08-26 13:08:11][352221808802140][449 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:08:11][352221808802140][761 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.896/202.896/202.896/0.000 ms\n [2025-08-26 13:08:11][352221808802140][761 ms][DEBUG] check_internet: online [2025-08-26 13:08:11][352221808802140][761 ms][DEBUG] END check_internet in 312 ms [2025-08-26 13:08:11][352221808802140][762 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:08:11][352221808802140][762 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352221808802140\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3105\"}'\'' -e'"" [2025-08-26 13:08:11][352221808802140][762 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:08:11][352221808802140][762 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352221808802140\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3105\"}'\'' -e'"" [2025-08-26 13:08:15][352221808802140][4714 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_57486b6d-ed18-48f8-817f-5f47b6d41931","id":"QR_57486b6d-ed18-48f8-817f-5f47b6d41931","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:08:15][352221808802140][4870 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-26 13:08:15][352221808802140][4870 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-26 13:08:15][352221808802140][4870 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:08:18][356356739696330][0 ms][INFO] === Request start === [2025-08-26 13:08:18][356356739696330][0 ms][DEBUG] START check_scloud [2025-08-26 13:08:18][356356739696330][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:08:18][356356739696330][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 4241 11216 24139672 161524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:08:18][356356739696330][312 ms][DEBUG] targetPkg: running [2025-08-26 13:08:18][356356739696330][312 ms][DEBUG] END check_scloud in 312 ms [2025-08-26 13:08:18][356356739696330][312 ms][DEBUG] START check_boot_completed [2025-08-26 13:08:18][356356739696330][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:08:18][356356739696330][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:08:18][356356739696330][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:08:18][356356739696330][421 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 13:08:18][356356739696330][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:08:18][356356739696330][421 ms][DEBUG] START check_internet [2025-08-26 13:08:18][356356739696330][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:08:19][356356739696330][749 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=220 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 220.479/220.479/220.479/0.000 ms\n [2025-08-26 13:08:19][356356739696330][749 ms][DEBUG] check_internet: online [2025-08-26 13:08:19][356356739696330][749 ms][DEBUG] END check_internet in 328 ms [2025-08-26 13:08:19][356356739696330][750 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:08:19][356356739696330][750 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356356739696330\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5402\"}'\'' -e'"" [2025-08-26 13:08:19][356356739696330][750 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:08:19][356356739696330][750 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356356739696330\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5402\"}'\'' -e'"" [2025-08-26 13:08:22][356356739696330][4405 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b78d60be-276d-4b96-803c-5237fd61d756","id":"QR_b78d60be-276d-4b96-803c-5237fd61d756","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:08:22][356356739696330][4561 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-26 13:08:22][356356739696330][4561 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-26 13:08:22][356356739696330][4561 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:08:25][357298580731304][0 ms][INFO] === Request start === [2025-08-26 13:08:25][357298580731304][1 ms][DEBUG] START check_scloud [2025-08-26 13:08:25][357298580731304][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:08:25][357298580731304][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 4241 11216 24261756 172472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:08:25][357298580731304][316 ms][DEBUG] targetPkg: running [2025-08-26 13:08:25][357298580731304][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-26 13:08:25][357298580731304][317 ms][DEBUG] START check_boot_completed [2025-08-26 13:08:25][357298580731304][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:08:25][357298580731304][363 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:08:25][357298580731304][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:08:25][357298580731304][410 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:08:25][357298580731304][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 13:08:25][357298580731304][410 ms][DEBUG] START check_internet [2025-08-26 13:08:25][357298580731304][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:08:26][357298580731304][675 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=178 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 178.650/178.650/178.650/0.000 ms\n [2025-08-26 13:08:26][357298580731304][676 ms][DEBUG] check_internet: online [2025-08-26 13:08:26][357298580731304][676 ms][DEBUG] END check_internet in 266 ms [2025-08-26 13:08:26][357298580731304][676 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:08:26][357298580731304][676 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357298580731304\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9662\"}'\'' -e'"" [2025-08-26 13:08:26][357298580731304][676 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:08:26][357298580731304][676 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357298580731304\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9662\"}'\'' -e'"" [2025-08-26 13:08:29][357298580731304][4378 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb795ed8-34c7-4bcb-aaff-25ff62d33597","id":"QR_eb795ed8-34c7-4bcb-aaff-25ff62d33597","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:08:30][357298580731304][4534 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-26 13:08:30][357298580731304][4534 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-26 13:08:30][357298580731304][4534 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:10:05][350455580852244][1 ms][INFO] === Request start === [2025-08-26 13:10:05][350455580852244][1 ms][DEBUG] START check_scloud [2025-08-26 13:10:05][350455580852244][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:10:05][350455580852244][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 4241 11216 24367320 184532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:10:05][350455580852244][316 ms][DEBUG] targetPkg: running [2025-08-26 13:10:05][350455580852244][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-26 13:10:05][350455580852244][316 ms][DEBUG] START check_boot_completed [2025-08-26 13:10:05][350455580852244][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:10:05][350455580852244][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:10:05][350455580852244][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:10:05][350455580852244][425 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:10:05][350455580852244][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:10:05][350455580852244][425 ms][DEBUG] START check_internet [2025-08-26 13:10:05][350455580852244][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:10:06][350455580852244][878 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.946/202.946/202.946/0.000 ms\n [2025-08-26 13:10:06][350455580852244][878 ms][DEBUG] check_internet: online [2025-08-26 13:10:06][350455580852244][878 ms][DEBUG] END check_internet in 454 ms [2025-08-26 13:10:06][350455580852244][878 ms][DEBUG] rawBody.length=1149 [2025-08-26 13:10:06][350455580852244][878 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455580852244\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4883\"}'\'' -e'"" [2025-08-26 13:10:06][350455580852244][879 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:10:06][350455580852244][879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455580852244\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4883\"}'\'' -e'"" [2025-08-26 13:10:11][350455580852244][5892 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c44ce7df-6134-48bd-8a94-3a1a1a35ac61","id":"QR_c44ce7df-6134-48bd-8a94-3a1a1a35ac61","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:10:11][350455580852244][6048 ms][DEBUG] proc_open done in 5170 ms; code=255; res.len=3343 [2025-08-26 13:10:11][350455580852244][6048 ms][DEBUG] END runCmdUntilRes#1 in 5170 ms [2025-08-26 13:10:11][350455580852244][6048 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:10:16][352350278938546][0 ms][INFO] === Request start === [2025-08-26 13:10:16][352350278938546][1 ms][DEBUG] START check_scloud [2025-08-26 13:10:16][352350278938546][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:10:16][352350278938546][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 4241 11216 24548832 195492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:10:16][352350278938546][279 ms][DEBUG] targetPkg: running [2025-08-26 13:10:16][352350278938546][279 ms][DEBUG] END check_scloud in 278 ms [2025-08-26 13:10:16][352350278938546][279 ms][DEBUG] START check_boot_completed [2025-08-26 13:10:16][352350278938546][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:10:16][352350278938546][326 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:10:16][352350278938546][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:10:16][352350278938546][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:10:16][352350278938546][372 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 13:10:16][352350278938546][372 ms][DEBUG] START check_internet [2025-08-26 13:10:16][352350278938546][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:10:16][352350278938546][654 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=175 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 175.370/175.370/175.370/0.000 ms\n [2025-08-26 13:10:16][352350278938546][654 ms][DEBUG] check_internet: online [2025-08-26 13:10:16][352350278938546][654 ms][DEBUG] END check_internet in 282 ms [2025-08-26 13:10:16][352350278938546][654 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:10:16][352350278938546][654 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350278938546\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9198\"}'\'' -e'"" [2025-08-26 13:10:16][352350278938546][654 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:10:16][352350278938546][654 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350278938546\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9198\"}'\'' -e'"" [2025-08-26 13:10:20][352350278938546][4465 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd6931b2-f31d-4f27-8b81-4ce6febfa4ec","id":"QR_dd6931b2-f31d-4f27-8b81-4ce6febfa4ec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:10:20][352350278938546][4621 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-26 13:10:20][352350278938546][4621 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-26 13:10:20][352350278938546][4621 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:13:03][350244311739643][1 ms][INFO] === Request start === [2025-08-26 13:13:03][350244311739643][1 ms][DEBUG] START check_scloud [2025-08-26 13:13:03][350244311739643][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:13:04][350244311739643][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 4241 11216 24672864 207732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:13:04][350244311739643][302 ms][DEBUG] targetPkg: running [2025-08-26 13:13:04][350244311739643][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-26 13:13:04][350244311739643][302 ms][DEBUG] START check_boot_completed [2025-08-26 13:13:04][350244311739643][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:13:04][350244311739643][333 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 13:13:04][350244311739643][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:13:04][350244311739643][380 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:13:04][350244311739643][380 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 13:13:04][350244311739643][380 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:13:04][350244311739643][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350244311739643\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5658\"}'\'' -e'"" [2025-08-26 13:13:04][350244311739643][380 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:13:04][350244311739643][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350244311739643\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5658\"}'\'' -e'"" [2025-08-26 13:13:07][350244311739643][4192 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4510b716-cc24-4896-ad5e-32cfba007817","id":"QR_4510b716-cc24-4896-ad5e-32cfba007817","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:13:08][350244311739643][4348 ms][DEBUG] proc_open done in 3968 ms; code=255; res.len=3343 [2025-08-26 13:13:08][350244311739643][4348 ms][DEBUG] END runCmdUntilRes#1 in 3968 ms [2025-08-26 13:13:08][350244311739643][4348 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:15:04][358104902198215][1 ms][INFO] === Request start === [2025-08-26 13:15:04][358104902198215][1 ms][DEBUG] START check_scloud [2025-08-26 13:15:04][358104902198215][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:15:04][358104902198215][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 4241 11216 24811332 218816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:15:04][358104902198215][315 ms][DEBUG] targetPkg: running [2025-08-26 13:15:04][358104902198215][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-26 13:15:04][358104902198215][315 ms][DEBUG] START check_boot_completed [2025-08-26 13:15:04][358104902198215][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:15:04][358104902198215][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:15:04][358104902198215][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:15:04][358104902198215][440 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 13:15:04][358104902198215][440 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 13:15:04][358104902198215][440 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:15:04][358104902198215][440 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902198215\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4425\"}'\'' -e'"" [2025-08-26 13:15:04][358104902198215][440 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:15:04][358104902198215][440 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902198215\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4425\"}'\'' -e'"" [2025-08-26 13:15:08][358104902198215][4376 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c1b8eba5-59db-4adc-8da9-9ebd6d594396","id":"QR_c1b8eba5-59db-4adc-8da9-9ebd6d594396","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:15:08][358104902198215][4532 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-08-26 13:15:08][358104902198215][4532 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-26 13:15:08][358104902198215][4532 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:15:10][353117552495918][0 ms][INFO] === Request start === [2025-08-26 13:15:10][353117552495918][1 ms][DEBUG] START check_scloud [2025-08-26 13:15:10][353117552495918][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:15:10][353117552495918][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 4241 11216 24939596 230740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:15:10][353117552495918][312 ms][DEBUG] targetPkg: running [2025-08-26 13:15:10][353117552495918][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-26 13:15:10][353117552495918][312 ms][DEBUG] START check_boot_completed [2025-08-26 13:15:10][353117552495918][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:15:10][353117552495918][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:15:10][353117552495918][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:15:10][353117552495918][406 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 13:15:10][353117552495918][406 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 13:15:10][353117552495918][406 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:15:10][353117552495918][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353117552495918\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6759\"}'\'' -e'"" [2025-08-26 13:15:10][353117552495918][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:15:10][353117552495918][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353117552495918\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6759\"}'\'' -e'"" [2025-08-26 13:15:14][353117552495918][3842 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-26 13:15:14][353117552495918][3998 ms][DEBUG] proc_open done in 3591 ms; code=255; res.len=115 [2025-08-26 13:15:14][353117552495918][3998 ms][DEBUG] END runCmdUntilRes#1 in 3592 ms [2025-08-26 13:15:14][353117552495918][3998 ms][INFO] SUCCESS response from frida (len=115) [2025-08-26 13:15:14][][0 ms][INFO] === Request start === [2025-08-26 13:15:14][][1 ms][DEBUG] START check_scloud [2025-08-26 13:15:14][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:15:14][][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 4241 11216 25096532 241564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:15:14][][300 ms][DEBUG] targetPkg: running [2025-08-26 13:15:14][][300 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 13:15:14][][300 ms][DEBUG] START check_boot_completed [2025-08-26 13:15:14][][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:15:14][][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:15:14][][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:15:14][][409 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 13:15:14][][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:15:14][][410 ms][DEBUG] rawBody.length=1129 [2025-08-26 13:15:14][][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW325P9QM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6885\"}'\'' -e'"" [2025-08-26 13:15:14][][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:15:14][][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW325P9QM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6885\"}'\'' -e'"" [2025-08-26 13:15:18][][4127 ms][DEBUG] proc_open done in 3717 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-26 13:15:18][][4127 ms][DEBUG] END runCmdUntilRes#1 in 3717 ms [2025-08-26 13:15:18][][4127 ms][WARN] Detected error: Process with pid 4241 either refused to load frida-agent, or terminated during injection [2025-08-26 13:15:18][][4127 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 13:15:18][][4283 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 13:15:18][][4284 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 13:15:18][][4284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 13:15:18][][4424 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 13:15:18][][4424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 13:15:19][][4580 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 13:15:21][][6595 ms][DEBUG] START check_boot_completed [2025-08-26 13:15:21][][6595 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:15:21][][6642 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:15:21][][6642 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:15:21][][6720 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 13:15:21][][6720 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 13:15:24][][9735 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 13:15:24][][9735 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW325P9QM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6885\"}'\'' -e'"" [2025-08-26 13:15:27][][12859 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 13:15:27][][13016 ms][DEBUG] proc_open done in 3280 ms; code=255; res.len=107 [2025-08-26 13:15:27][][13016 ms][DEBUG] END runCmdUntilRes#2 in 3281 ms [2025-08-26 13:15:27][][13016 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 13:16:03][350300272534405][0 ms][INFO] === Request start === [2025-08-26 13:16:03][350300272534405][1 ms][DEBUG] START check_scloud [2025-08-26 13:16:03][350300272534405][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:16:03][350300272534405][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 5864 11216 23716308 128280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:16:03][350300272534405][265 ms][DEBUG] targetPkg: running [2025-08-26 13:16:03][350300272534405][265 ms][DEBUG] END check_scloud in 264 ms [2025-08-26 13:16:03][350300272534405][265 ms][DEBUG] START check_boot_completed [2025-08-26 13:16:03][350300272534405][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:16:03][350300272534405][312 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:16:03][350300272534405][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:16:03][350300272534405][405 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 13:16:03][350300272534405][405 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 13:16:03][350300272534405][406 ms][DEBUG] START check_internet [2025-08-26 13:16:03][350300272534405][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:16:04][350300272534405][921 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.829/202.829/202.829/0.000 ms\n [2025-08-26 13:16:04][350300272534405][921 ms][DEBUG] check_internet: online [2025-08-26 13:16:04][350300272534405][921 ms][DEBUG] END check_internet in 516 ms [2025-08-26 13:16:04][350300272534405][921 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:16:04][350300272534405][921 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350300272534405\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9058\"}'\'' -e'"" [2025-08-26 13:16:04][350300272534405][921 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:16:04][350300272534405][921 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350300272534405\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9058\"}'\'' -e'"" [2025-08-26 13:16:08][350300272534405][5342 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf3a7643-c682-4bd0-b83f-8a8c76017aa8","id":"QR_cf3a7643-c682-4bd0-b83f-8a8c76017aa8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:16:09][350300272534405][5498 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=3343 [2025-08-26 13:16:09][350300272534405][5498 ms][DEBUG] END runCmdUntilRes#1 in 4576 ms [2025-08-26 13:16:09][350300272534405][5498 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:16:11][350013882944043][0 ms][INFO] === Request start === [2025-08-26 13:16:11][350013882944043][1 ms][DEBUG] START check_scloud [2025-08-26 13:16:11][350013882944043][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:16:11][350013882944043][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 5864 11216 23894328 138640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:16:11][350013882944043][313 ms][DEBUG] targetPkg: running [2025-08-26 13:16:11][350013882944043][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-26 13:16:11][350013882944043][314 ms][DEBUG] START check_boot_completed [2025-08-26 13:16:11][350013882944043][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:16:11][350013882944043][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:16:11][350013882944043][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:16:11][350013882944043][423 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:16:11][350013882944043][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:16:11][350013882944043][423 ms][DEBUG] START check_internet [2025-08-26 13:16:11][350013882944043][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:16:12][350013882944043][704 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=138 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 138.295/138.295/138.295/0.000 ms\n [2025-08-26 13:16:12][350013882944043][704 ms][DEBUG] check_internet: online [2025-08-26 13:16:12][350013882944043][704 ms][DEBUG] END check_internet in 281 ms [2025-08-26 13:16:12][350013882944043][704 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:16:12][350013882944043][704 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013882944043\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1910\"}'\'' -e'"" [2025-08-26 13:16:12][350013882944043][705 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:16:12][350013882944043][705 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013882944043\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1910\"}'\'' -e'"" [2025-08-26 13:16:19][350013882944043][7671 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b1142229-ccd6-4f49-8a57-5ea3ce140da1","id":"QR_b1142229-ccd6-4f49-8a57-5ea3ce140da1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:16:19][350013882944043][7827 ms][DEBUG] proc_open done in 7122 ms; code=255; res.len=3343 [2025-08-26 13:16:19][350013882944043][7827 ms][DEBUG] END runCmdUntilRes#1 in 7123 ms [2025-08-26 13:16:19][350013882944043][7827 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:16:21][352397457694952][0 ms][INFO] === Request start === [2025-08-26 13:16:21][352397457694952][1 ms][DEBUG] START check_scloud [2025-08-26 13:16:21][352397457694952][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:16:22][352397457694952][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 5864 11216 24073536 149684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:16:22][352397457694952][311 ms][DEBUG] targetPkg: running [2025-08-26 13:16:22][352397457694952][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 13:16:22][352397457694952][311 ms][DEBUG] START check_boot_completed [2025-08-26 13:16:22][352397457694952][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:16:22][352397457694952][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:16:22][352397457694952][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:16:22][352397457694952][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:16:22][352397457694952][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:16:22][352397457694952][420 ms][DEBUG] START check_internet [2025-08-26 13:16:22][352397457694952][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:16:22][352397457694952][748 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=214 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 214.457/214.457/214.457/0.000 ms\n [2025-08-26 13:16:22][352397457694952][748 ms][DEBUG] check_internet: online [2025-08-26 13:16:22][352397457694952][748 ms][DEBUG] END check_internet in 328 ms [2025-08-26 13:16:22][352397457694952][748 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:16:22][352397457694952][749 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397457694952\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1951\"}'\'' -e'"" [2025-08-26 13:16:22][352397457694952][749 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:16:22][352397457694952][749 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397457694952\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1951\"}'\'' -e'"" [2025-08-26 13:16:26][352397457694952][4372 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8dc86df4-8553-4961-9ee5-3e25ede0be6e","id":"QR_8dc86df4-8553-4961-9ee5-3e25ede0be6e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:16:26][352397457694952][4528 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-08-26 13:16:26][352397457694952][4528 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-26 13:16:26][352397457694952][4528 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:16:28][354097155458241][0 ms][INFO] === Request start === [2025-08-26 13:16:28][354097155458241][1 ms][DEBUG] START check_scloud [2025-08-26 13:16:28][354097155458241][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:16:29][354097155458241][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 5864 11216 24201764 160748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:16:29][354097155458241][295 ms][DEBUG] targetPkg: running [2025-08-26 13:16:29][354097155458241][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-26 13:16:29][354097155458241][295 ms][DEBUG] START check_boot_completed [2025-08-26 13:16:29][354097155458241][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:16:29][354097155458241][342 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:16:29][354097155458241][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:16:29][354097155458241][404 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:16:29][354097155458241][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:16:29][354097155458241][404 ms][DEBUG] START check_internet [2025-08-26 13:16:29][354097155458241][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:16:29][354097155458241][701 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=191 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 191.797/191.797/191.797/0.000 ms\n [2025-08-26 13:16:29][354097155458241][701 ms][DEBUG] check_internet: online [2025-08-26 13:16:29][354097155458241][701 ms][DEBUG] END check_internet in 297 ms [2025-08-26 13:16:29][354097155458241][701 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:16:29][354097155458241][701 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354097155458241\",\"model\":\"SM-A166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4922\"}'\'' -e'"" [2025-08-26 13:16:29][354097155458241][701 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:16:29][354097155458241][701 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354097155458241\",\"model\":\"SM-A166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4922\"}'\'' -e'"" [2025-08-26 13:16:32][354097155458241][4231 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ee1983d2-596a-48da-b311-1292dd9ca2e0","id":"QR_ee1983d2-596a-48da-b311-1292dd9ca2e0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:16:33][354097155458241][4387 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=3343 [2025-08-26 13:16:33][354097155458241][4387 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-08-26 13:16:33][354097155458241][4387 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:17:03][350100350013995][0 ms][INFO] === Request start === [2025-08-26 13:17:03][350100350013995][1 ms][DEBUG] START check_scloud [2025-08-26 13:17:03][350100350013995][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:17:04][350100350013995][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 5864 11216 24317632 172804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:17:04][350100350013995][302 ms][DEBUG] targetPkg: running [2025-08-26 13:17:04][350100350013995][302 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 13:17:04][350100350013995][302 ms][DEBUG] START check_boot_completed [2025-08-26 13:17:04][350100350013995][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:17:04][350100350013995][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:17:04][350100350013995][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:17:04][350100350013995][412 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 13:17:04][350100350013995][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:17:04][350100350013995][412 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:17:04][350100350013995][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100350013995\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1005\"}'\'' -e'"" [2025-08-26 13:17:04][350100350013995][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:17:04][350100350013995][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100350013995\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1005\"}'\'' -e'"" [2025-08-26 13:17:07][350100350013995][3957 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8273478b-a228-42b0-b279-fae95d1853c7","id":"QR_8273478b-a228-42b0-b279-fae95d1853c7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:17:07][350100350013995][4114 ms][DEBUG] proc_open done in 3701 ms; code=255; res.len=3343 [2025-08-26 13:17:07][350100350013995][4114 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-26 13:17:07][350100350013995][4114 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:17:11][353684123156535][1 ms][INFO] === Request start === [2025-08-26 13:17:11][353684123156535][1 ms][DEBUG] START check_scloud [2025-08-26 13:17:11][353684123156535][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:17:11][353684123156535][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 5864 11216 24468296 183568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:17:11][353684123156535][295 ms][DEBUG] targetPkg: running [2025-08-26 13:17:11][353684123156535][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-26 13:17:11][353684123156535][295 ms][DEBUG] START check_boot_completed [2025-08-26 13:17:11][353684123156535][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:17:11][353684123156535][342 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:17:11][353684123156535][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:17:12][353684123156535][420 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 13:17:12][353684123156535][420 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 13:17:12][353684123156535][420 ms][DEBUG] rawBody.length=1149 [2025-08-26 13:17:12][353684123156535][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684123156535\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7397\"}'\'' -e'"" [2025-08-26 13:17:12][353684123156535][420 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:17:12][353684123156535][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684123156535\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7397\"}'\'' -e'"" [2025-08-26 13:17:17][353684123156535][5825 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8da4fc7e-adc4-465e-a9aa-402ec59208de","id":"QR_8da4fc7e-adc4-465e-a9aa-402ec59208de","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:17:17][353684123156535][5981 ms][DEBUG] proc_open done in 5561 ms; code=255; res.len=3343 [2025-08-26 13:17:17][353684123156535][5981 ms][DEBUG] END runCmdUntilRes#1 in 5561 ms [2025-08-26 13:17:17][353684123156535][5981 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:23:03][352060489991651][1 ms][INFO] === Request start === [2025-08-26 13:23:03][352060489991651][1 ms][DEBUG] START check_scloud [2025-08-26 13:23:03][352060489991651][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:23:03][352060489991651][323 ms][DEBUG] SU: done in 322 ms; outu0_a118 5864 11216 24608600 195692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:23:03][352060489991651][323 ms][DEBUG] targetPkg: running [2025-08-26 13:23:03][352060489991651][323 ms][DEBUG] END check_scloud in 322 ms [2025-08-26 13:23:03][352060489991651][323 ms][DEBUG] START check_boot_completed [2025-08-26 13:23:03][352060489991651][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:23:03][352060489991651][354 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 13:23:03][352060489991651][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:23:03][352060489991651][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:23:03][352060489991651][401 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 13:23:03][352060489991651][401 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:23:03][352060489991651][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060489991651\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5178\"}'\'' -e'"" [2025-08-26 13:23:03][352060489991651][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:23:03][352060489991651][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060489991651\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5178\"}'\'' -e'"" [2025-08-26 13:23:08][352060489991651][5400 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_37fb0750-8142-4571-b786-9ddd4a8b4907","id":"QR_37fb0750-8142-4571-b786-9ddd4a8b4907","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:23:09][352060489991651][5556 ms][DEBUG] proc_open done in 5154 ms; code=255; res.len=3343 [2025-08-26 13:23:09][352060489991651][5556 ms][DEBUG] END runCmdUntilRes#1 in 5154 ms [2025-08-26 13:23:09][352060489991651][5556 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:23:11][355245258259748][0 ms][INFO] === Request start === [2025-08-26 13:23:11][355245258259748][1 ms][DEBUG] START check_scloud [2025-08-26 13:23:11][355245258259748][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:23:11][355245258259748][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 5864 11216 24775712 207484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:23:11][355245258259748][318 ms][DEBUG] targetPkg: running [2025-08-26 13:23:11][355245258259748][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-26 13:23:11][355245258259748][318 ms][DEBUG] START check_boot_completed [2025-08-26 13:23:11][355245258259748][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:23:11][355245258259748][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:23:11][355245258259748][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:23:11][355245258259748][427 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:23:11][355245258259748][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:23:11][355245258259748][427 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:23:11][355245258259748][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355245258259748\",\"model\":\"SM-A202F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"HUI\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5660\"}'\'' -e'"" [2025-08-26 13:23:11][355245258259748][427 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:23:11][355245258259748][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355245258259748\",\"model\":\"SM-A202F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"HUI\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5660\"}'\'' -e'"" [2025-08-26 13:23:15][355245258259748][3863 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b7a68d07-4dcb-4da3-82ed-136832316314","id":"QR_b7a68d07-4dcb-4da3-82ed-136832316314","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:23:15][355245258259748][4020 ms][DEBUG] proc_open done in 3593 ms; code=255; res.len=3343 [2025-08-26 13:23:15][355245258259748][4020 ms][DEBUG] END runCmdUntilRes#1 in 3593 ms [2025-08-26 13:23:15][355245258259748][4020 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:26:03][353291543863078][1 ms][INFO] === Request start === [2025-08-26 13:26:03][353291543863078][1 ms][DEBUG] START check_scloud [2025-08-26 13:26:03][353291543863078][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:26:03][353291543863078][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 5864 11216 24864864 218276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:26:03][353291543863078][308 ms][DEBUG] targetPkg: running [2025-08-26 13:26:03][353291543863078][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-26 13:26:03][353291543863078][308 ms][DEBUG] START check_boot_completed [2025-08-26 13:26:03][353291543863078][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:26:04][353291543863078][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:26:04][353291543863078][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:26:04][353291543863078][417 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:26:04][353291543863078][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:26:04][353291543863078][417 ms][DEBUG] START check_internet [2025-08-26 13:26:04][353291543863078][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:26:04][353291543863078][901 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.851/200.851/200.851/0.000 ms\n [2025-08-26 13:26:04][353291543863078][901 ms][DEBUG] check_internet: online [2025-08-26 13:26:04][353291543863078][901 ms][DEBUG] END check_internet in 484 ms [2025-08-26 13:26:04][353291543863078][901 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:26:04][353291543863078][901 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353291543863078\",\"model\":\"SM-M127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9365\"}'\'' -e'"" [2025-08-26 13:26:04][353291543863078][901 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:26:04][353291543863078][901 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353291543863078\",\"model\":\"SM-M127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9365\"}'\'' -e'"" [2025-08-26 13:26:11][353291543863078][7774 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1d5e388b-2499-499d-9848-3dc1b73a34a9","id":"QR_1d5e388b-2499-499d-9848-3dc1b73a34a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:26:11][353291543863078][7930 ms][DEBUG] proc_open done in 7029 ms; code=255; res.len=3343 [2025-08-26 13:26:11][353291543863078][7930 ms][DEBUG] END runCmdUntilRes#1 in 7029 ms [2025-08-26 13:26:11][353291543863078][7931 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:28:03][356923585179693][0 ms][INFO] === Request start === [2025-08-26 13:28:03][356923585179693][1 ms][DEBUG] START check_scloud [2025-08-26 13:28:03][356923585179693][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:28:03][356923585179693][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 5864 11216 25021636 230144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:28:03][356923585179693][293 ms][DEBUG] targetPkg: running [2025-08-26 13:28:03][356923585179693][293 ms][DEBUG] END check_scloud in 292 ms [2025-08-26 13:28:03][356923585179693][293 ms][DEBUG] START check_boot_completed [2025-08-26 13:28:03][356923585179693][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:28:03][356923585179693][324 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 13:28:03][356923585179693][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:28:03][356923585179693][387 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 13:28:03][356923585179693][387 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 13:28:03][356923585179693][387 ms][DEBUG] START check_internet [2025-08-26 13:28:03][356923585179693][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:28:03][356923585179693][699 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=183 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 183.353/183.353/183.353/0.000 ms\n [2025-08-26 13:28:03][356923585179693][699 ms][DEBUG] check_internet: online [2025-08-26 13:28:03][356923585179693][699 ms][DEBUG] END check_internet in 313 ms [2025-08-26 13:28:03][356923585179693][699 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:28:03][356923585179693][700 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356923585179693\",\"model\":\"SM-A156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5591\"}'\'' -e'"" [2025-08-26 13:28:03][356923585179693][700 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:28:03][356923585179693][700 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356923585179693\",\"model\":\"SM-A156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5591\"}'\'' -e'"" [2025-08-26 13:28:07][356923585179693][4667 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_94910510-6ea5-4acf-94d5-0ea27d97afea","id":"QR_94910510-6ea5-4acf-94d5-0ea27d97afea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:28:07][356923585179693][4823 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-08-26 13:28:07][356923585179693][4823 ms][DEBUG] END runCmdUntilRes#1 in 4123 ms [2025-08-26 13:28:07][356923585179693][4823 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:30:02][352844251711516][1 ms][INFO] === Request start === [2025-08-26 13:30:02][352844251711516][1 ms][DEBUG] START check_scloud [2025-08-26 13:30:02][352844251711516][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:30:02][352844251711516][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 5864 11216 25178412 241836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:30:02][352844251711516][269 ms][DEBUG] targetPkg: running [2025-08-26 13:30:02][352844251711516][269 ms][DEBUG] END check_scloud in 268 ms [2025-08-26 13:30:02][352844251711516][269 ms][DEBUG] START check_boot_completed [2025-08-26 13:30:02][352844251711516][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:30:02][352844251711516][316 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:30:02][352844251711516][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:30:02][352844251711516][363 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:30:02][352844251711516][363 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 13:30:02][352844251711516][363 ms][DEBUG] START check_internet [2025-08-26 13:30:02][352844251711516][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:30:03][352844251711516][831 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.401/203.401/203.401/0.000 ms\n [2025-08-26 13:30:03][352844251711516][831 ms][DEBUG] check_internet: online [2025-08-26 13:30:03][352844251711516][831 ms][DEBUG] END check_internet in 469 ms [2025-08-26 13:30:03][352844251711516][831 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:30:03][352844251711516][831 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352844251711516\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1237\"}'\'' -e'"" [2025-08-26 13:30:03][352844251711516][831 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:30:03][352844251711516][831 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352844251711516\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1237\"}'\'' -e'"" [2025-08-26 13:30:07][352844251711516][4580 ms][DEBUG] proc_open done in 3749 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-26 13:30:07][352844251711516][4580 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-08-26 13:30:07][352844251711516][4580 ms][WARN] Detected error: Process with pid 5864 either refused to load frida-agent, or terminated during injection [2025-08-26 13:30:07][352844251711516][4580 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 13:30:07][352844251711516][4721 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 13:30:07][352844251711516][4721 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 13:30:07][352844251711516][4721 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 13:30:07][352844251711516][4893 ms][DEBUG] SU: done in 172 ms; out [2025-08-26 13:30:07][352844251711516][4893 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 13:30:07][352844251711516][5033 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 13:30:09][352844251711516][7048 ms][DEBUG] START check_boot_completed [2025-08-26 13:30:09][352844251711516][7048 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:30:09][352844251711516][7095 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:30:09][352844251711516][7095 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:30:09][352844251711516][7142 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:30:09][352844251711516][7142 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 13:30:12][352844251711516][10157 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 13:30:12][352844251711516][10157 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352844251711516\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1237\"}'\'' -e'"" [2025-08-26 13:30:16][352844251711516][14140 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb37a541-775d-4f28-ae57-5da4e9f4d38f","id":"QR_cb37a541-775d-4f28-ae57-5da4e9f4d38f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:30:16][352844251711516][14297 ms][DEBUG] proc_open done in 4140 ms; code=255; res.len=3343 [2025-08-26 13:30:16][352844251711516][14297 ms][DEBUG] END runCmdUntilRes#2 in 4140 ms [2025-08-26 13:30:16][352844251711516][14297 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:32:03][352665185840646][1 ms][INFO] === Request start === [2025-08-26 13:32:03][352665185840646][1 ms][DEBUG] START check_scloud [2025-08-26 13:32:03][352665185840646][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:32:03][352665185840646][314 ms][DEBUG] SU: done in 312 ms; outu0_a118 7665 11216 23747028 128496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:32:03][352665185840646][314 ms][DEBUG] targetPkg: running [2025-08-26 13:32:03][352665185840646][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-26 13:32:03][352665185840646][314 ms][DEBUG] START check_boot_completed [2025-08-26 13:32:03][352665185840646][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:32:03][352665185840646][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:32:03][352665185840646][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:32:03][352665185840646][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:32:03][352665185840646][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 13:32:03][352665185840646][407 ms][DEBUG] START check_internet [2025-08-26 13:32:03][352665185840646][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:32:03][352665185840646][641 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=145 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 145.524/145.524/145.524/0.000 ms\n [2025-08-26 13:32:03][352665185840646][641 ms][DEBUG] check_internet: online [2025-08-26 13:32:03][352665185840646][641 ms][DEBUG] END check_internet in 234 ms [2025-08-26 13:32:03][352665185840646][641 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:32:03][352665185840646][641 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665185840646\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7045\"}'\'' -e'"" [2025-08-26 13:32:03][352665185840646][641 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:32:03][352665185840646][641 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665185840646\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7045\"}'\'' -e'"" [2025-08-26 13:32:07][352665185840646][4562 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_28a0a9d6-3b9f-4c10-9757-f26a81572b6d","id":"QR_28a0a9d6-3b9f-4c10-9757-f26a81572b6d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:32:07][352665185840646][4719 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-26 13:32:07][352665185840646][4719 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-26 13:32:07][352665185840646][4719 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:35:03][352600225446054][1 ms][INFO] === Request start === [2025-08-26 13:35:03][352600225446054][1 ms][DEBUG] START check_scloud [2025-08-26 13:35:03][352600225446054][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:35:04][352600225446054][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 7665 11216 23882220 139364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:35:04][352600225446054][308 ms][DEBUG] targetPkg: running [2025-08-26 13:35:04][352600225446054][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-26 13:35:04][352600225446054][308 ms][DEBUG] START check_boot_completed [2025-08-26 13:35:04][352600225446054][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:35:04][352600225446054][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 13:35:04][352600225446054][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:35:04][352600225446054][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:35:04][352600225446054][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 13:35:04][352600225446054][386 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:35:04][352600225446054][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600225446054\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9202\"}'\'' -e'"" [2025-08-26 13:35:04][352600225446054][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:35:04][352600225446054][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600225446054\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9202\"}'\'' -e'"" [2025-08-26 13:35:08][352600225446054][4245 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3d4e40de-fc0f-48cf-99d1-859d75ed2567","id":"QR_3d4e40de-fc0f-48cf-99d1-859d75ed2567","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:35:08][352600225446054][4401 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-26 13:35:08][352600225446054][4401 ms][DEBUG] END runCmdUntilRes#1 in 4015 ms [2025-08-26 13:35:08][352600225446054][4401 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:36:03][350938287169343][0 ms][INFO] === Request start === [2025-08-26 13:36:03][350938287169343][1 ms][DEBUG] START check_scloud [2025-08-26 13:36:03][350938287169343][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:36:04][350938287169343][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 7665 11216 24045200 151348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:36:04][350938287169343][320 ms][DEBUG] targetPkg: running [2025-08-26 13:36:04][350938287169343][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-26 13:36:04][350938287169343][320 ms][DEBUG] START check_boot_completed [2025-08-26 13:36:04][350938287169343][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:36:04][350938287169343][367 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:36:04][350938287169343][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:36:04][350938287169343][429 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:36:04][350938287169343][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:36:04][350938287169343][429 ms][DEBUG] START check_internet [2025-08-26 13:36:04][350938287169343][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:36:04][350938287169343][960 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.237/202.237/202.237/0.000 ms\n [2025-08-26 13:36:04][350938287169343][960 ms][DEBUG] check_internet: online [2025-08-26 13:36:04][350938287169343][960 ms][DEBUG] END check_internet in 531 ms [2025-08-26 13:36:04][350938287169343][960 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:36:04][350938287169343][961 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938287169343\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7619\"}'\'' -e'"" [2025-08-26 13:36:04][350938287169343][961 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:36:04][350938287169343][961 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938287169343\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7619\"}'\'' -e'"" [2025-08-26 13:36:08][350938287169343][4709 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2d027dc4-051c-4580-9959-f744c9160a6b","id":"QR_2d027dc4-051c-4580-9959-f744c9160a6b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:36:08][350938287169343][4865 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-26 13:36:08][350938287169343][4865 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-26 13:36:08][350938287169343][4865 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:36:11][358261911263701][0 ms][INFO] === Request start === [2025-08-26 13:36:11][358261911263701][1 ms][DEBUG] START check_scloud [2025-08-26 13:36:11][358261911263701][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:36:11][358261911263701][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 7665 11216 24210200 162396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:36:11][358261911263701][314 ms][DEBUG] targetPkg: running [2025-08-26 13:36:11][358261911263701][314 ms][DEBUG] END check_scloud in 314 ms [2025-08-26 13:36:11][358261911263701][314 ms][DEBUG] START check_boot_completed [2025-08-26 13:36:11][358261911263701][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:36:11][358261911263701][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:36:11][358261911263701][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:36:11][358261911263701][423 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:36:11][358261911263701][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:36:11][358261911263701][424 ms][DEBUG] START check_internet [2025-08-26 13:36:11][358261911263701][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:36:12][358261911263701][767 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=193 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 193.435/193.435/193.435/0.000 ms\n [2025-08-26 13:36:12][358261911263701][767 ms][DEBUG] check_internet: online [2025-08-26 13:36:12][358261911263701][767 ms][DEBUG] END check_internet in 344 ms [2025-08-26 13:36:12][358261911263701][767 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:36:12][358261911263701][767 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358261911263701\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7765\"}'\'' -e'"" [2025-08-26 13:36:12][358261911263701][768 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:36:12][358261911263701][768 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358261911263701\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7765\"}'\'' -e'"" [2025-08-26 13:36:15][358261911263701][4625 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e2c87d1f-3717-48f8-9937-903fdbd69a63","id":"QR_e2c87d1f-3717-48f8-9937-903fdbd69a63","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:36:16][358261911263701][4782 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-26 13:36:16][358261911263701][4782 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-26 13:36:16][358261911263701][4782 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:36:17][351781753369891][0 ms][INFO] === Request start === [2025-08-26 13:36:17][351781753369891][1 ms][DEBUG] START check_scloud [2025-08-26 13:36:17][351781753369891][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:36:17][351781753369891][320 ms][DEBUG] SU: done in 320 ms; outu0_a118 7665 11216 24348576 173224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:36:17][351781753369891][321 ms][DEBUG] targetPkg: running [2025-08-26 13:36:17][351781753369891][321 ms][DEBUG] END check_scloud in 320 ms [2025-08-26 13:36:17][351781753369891][321 ms][DEBUG] START check_boot_completed [2025-08-26 13:36:17][351781753369891][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:36:17][351781753369891][367 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:36:17][351781753369891][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:36:17][351781753369891][430 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:36:17][351781753369891][430 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:36:17][351781753369891][430 ms][DEBUG] START check_internet [2025-08-26 13:36:17][351781753369891][430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:36:18][351781753369891][649 ms][DEBUG] SU: done in 218 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=107 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 107.775/107.775/107.775/0.000 ms\n [2025-08-26 13:36:18][351781753369891][649 ms][DEBUG] check_internet: online [2025-08-26 13:36:18][351781753369891][649 ms][DEBUG] END check_internet in 219 ms [2025-08-26 13:36:18][351781753369891][649 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:36:18][351781753369891][649 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351781753369891\",\"model\":\"SM-A253J\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KDI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5223\"}'\'' -e'"" [2025-08-26 13:36:18][351781753369891][649 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:36:18][351781753369891][649 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351781753369891\",\"model\":\"SM-A253J\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KDI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5223\"}'\'' -e'"" [2025-08-26 13:36:21][351781753369891][4101 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_425a32e5-af09-479a-a5b0-449af0c42b4b","id":"QR_425a32e5-af09-479a-a5b0-449af0c42b4b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:36:21][351781753369891][4257 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=3343 [2025-08-26 13:36:21][351781753369891][4257 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-08-26 13:36:21][351781753369891][4257 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:37:02][352961651114636][0 ms][INFO] === Request start === [2025-08-26 13:37:02][352961651114636][1 ms][DEBUG] START check_scloud [2025-08-26 13:37:02][352961651114636][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:37:02][352961651114636][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 7665 11216 24427580 185552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:37:02][352961651114636][306 ms][DEBUG] targetPkg: running [2025-08-26 13:37:02][352961651114636][306 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 13:37:02][352961651114636][306 ms][DEBUG] START check_boot_completed [2025-08-26 13:37:02][352961651114636][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:37:02][352961651114636][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:37:02][352961651114636][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:37:02][352961651114636][415 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:37:02][352961651114636][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:37:02][352961651114636][416 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:37:02][352961651114636][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352961651114636\",\"model\":\"SM-M336K\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9237\"}'\'' -e'"" [2025-08-26 13:37:02][352961651114636][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:37:02][352961651114636][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352961651114636\",\"model\":\"SM-M336K\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9237\"}'\'' -e'"" [2025-08-26 13:37:06][352961651114636][3977 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e316338b-3fc8-4c43-bfd3-17995016d9a5","id":"QR_e316338b-3fc8-4c43-bfd3-17995016d9a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:37:06][352961651114636][4133 ms][DEBUG] proc_open done in 3717 ms; code=255; res.len=3343 [2025-08-26 13:37:06][352961651114636][4133 ms][DEBUG] END runCmdUntilRes#1 in 3717 ms [2025-08-26 13:37:06][352961651114636][4133 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:37:08][355100981527269][1 ms][INFO] === Request start === [2025-08-26 13:37:08][355100981527269][1 ms][DEBUG] START check_scloud [2025-08-26 13:37:08][355100981527269][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:37:09][355100981527269][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 7665 11216 24551620 196388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:37:09][355100981527269][255 ms][DEBUG] targetPkg: running [2025-08-26 13:37:09][355100981527269][255 ms][DEBUG] END check_scloud in 254 ms [2025-08-26 13:37:09][355100981527269][255 ms][DEBUG] START check_boot_completed [2025-08-26 13:37:09][355100981527269][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:37:09][355100981527269][302 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:37:09][355100981527269][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:37:09][355100981527269][348 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:37:09][355100981527269][348 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 13:37:09][355100981527269][348 ms][DEBUG] rawBody.length=1149 [2025-08-26 13:37:09][355100981527269][348 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355100981527269\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1147\"}'\'' -e'"" [2025-08-26 13:37:09][355100981527269][348 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:37:09][355100981527269][348 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355100981527269\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1147\"}'\'' -e'"" [2025-08-26 13:37:14][355100981527269][5394 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_66932700-58e3-4212-ab77-81a0ed3fb7f6","id":"QR_66932700-58e3-4212-ab77-81a0ed3fb7f6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:37:14][355100981527269][5550 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-08-26 13:37:14][355100981527269][5550 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-08-26 13:37:14][355100981527269][5551 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:37:19][357699981116278][0 ms][INFO] === Request start === [2025-08-26 13:37:19][357699981116278][1 ms][DEBUG] START check_scloud [2025-08-26 13:37:19][357699981116278][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:37:19][357699981116278][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 7665 11216 24714700 208256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:37:19][357699981116278][305 ms][DEBUG] targetPkg: running [2025-08-26 13:37:19][357699981116278][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 13:37:19][357699981116278][305 ms][DEBUG] START check_boot_completed [2025-08-26 13:37:19][357699981116278][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:37:19][357699981116278][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:37:19][357699981116278][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:37:19][357699981116278][414 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:37:19][357699981116278][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:37:19][357699981116278][414 ms][DEBUG] rawBody.length=1149 [2025-08-26 13:37:19][357699981116278][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357699981116278\",\"model\":\"SM-A066M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2447\"}'\'' -e'"" [2025-08-26 13:37:19][357699981116278][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:37:19][357699981116278][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357699981116278\",\"model\":\"SM-A066M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2447\"}'\'' -e'"" [2025-08-26 13:37:24][357699981116278][5147 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dc47f9bd-d051-4f62-8cd7-3b1cab9cdfd0","id":"QR_dc47f9bd-d051-4f62-8cd7-3b1cab9cdfd0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:37:24][357699981116278][5304 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-08-26 13:37:24][357699981116278][5304 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-08-26 13:37:24][357699981116278][5304 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:38:03][350938283901962][0 ms][INFO] === Request start === [2025-08-26 13:38:03][350938283901962][1 ms][DEBUG] START check_scloud [2025-08-26 13:38:03][350938283901962][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:38:03][350938283901962][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 7665 11216 24791656 219264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:38:03][350938283901962][307 ms][DEBUG] targetPkg: running [2025-08-26 13:38:03][350938283901962][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 13:38:03][350938283901962][307 ms][DEBUG] START check_boot_completed [2025-08-26 13:38:03][350938283901962][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:38:03][350938283901962][338 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 13:38:03][350938283901962][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:38:03][350938283901962][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:38:03][350938283901962][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 13:38:03][350938283901962][385 ms][DEBUG] START check_internet [2025-08-26 13:38:03][350938283901962][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:38:04][350938283901962][730 ms][DEBUG] SU: done in 345 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=231 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 231.081/231.081/231.081/0.000 ms\n [2025-08-26 13:38:04][350938283901962][730 ms][DEBUG] check_internet: online [2025-08-26 13:38:04][350938283901962][730 ms][DEBUG] END check_internet in 345 ms [2025-08-26 13:38:04][350938283901962][730 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:38:04][350938283901962][730 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938283901962\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3351\"}'\'' -e'"" [2025-08-26 13:38:04][350938283901962][730 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:38:04][350938283901962][730 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938283901962\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3351\"}'\'' -e'"" [2025-08-26 13:38:08][350938283901962][4556 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f8e42566-3a72-4426-a39a-4bc2b4210766","id":"QR_f8e42566-3a72-4426-a39a-4bc2b4210766","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:38:08][350938283901962][4712 ms][DEBUG] proc_open done in 3982 ms; code=255; res.len=3343 [2025-08-26 13:38:08][350938283901962][4712 ms][DEBUG] END runCmdUntilRes#1 in 3982 ms [2025-08-26 13:38:08][350938283901962][4712 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:38:10][353809895625876][0 ms][INFO] === Request start === [2025-08-26 13:38:10][353809895625876][1 ms][DEBUG] START check_scloud [2025-08-26 13:38:10][353809895625876][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:38:10][353809895625876][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 7665 11216 24940272 231256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:38:10][353809895625876][266 ms][DEBUG] targetPkg: running [2025-08-26 13:38:10][353809895625876][266 ms][DEBUG] END check_scloud in 265 ms [2025-08-26 13:38:10][353809895625876][266 ms][DEBUG] START check_boot_completed [2025-08-26 13:38:10][353809895625876][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:38:11][353809895625876][312 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:38:11][353809895625876][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:38:11][353809895625876][360 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:38:11][353809895625876][360 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 13:38:11][353809895625876][360 ms][DEBUG] START check_internet [2025-08-26 13:38:11][353809895625876][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:38:11][353809895625876][687 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=209 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 209.155/209.155/209.155/0.000 ms\n [2025-08-26 13:38:11][353809895625876][688 ms][DEBUG] check_internet: online [2025-08-26 13:38:11][353809895625876][688 ms][DEBUG] END check_internet in 328 ms [2025-08-26 13:38:11][353809895625876][688 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:38:11][353809895625876][688 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809895625876\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1584\"}'\'' -e'"" [2025-08-26 13:38:11][353809895625876][688 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:38:11][353809895625876][688 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809895625876\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MWD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1584\"}'\'' -e'"" [2025-08-26 13:38:15][353809895625876][4468 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_afd41d36-4106-4ae9-b540-2e56c671f083","id":"QR_afd41d36-4106-4ae9-b540-2e56c671f083","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:38:15][353809895625876][4624 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-26 13:38:15][353809895625876][4624 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-26 13:38:15][353809895625876][4624 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:38:16][350244314683160][0 ms][INFO] === Request start === [2025-08-26 13:38:16][350244314683160][1 ms][DEBUG] START check_scloud [2025-08-26 13:38:16][350244314683160][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:38:17][350244314683160][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 7665 11216 25115640 243080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:38:17][350244314683160][308 ms][DEBUG] targetPkg: running [2025-08-26 13:38:17][350244314683160][308 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 13:38:17][350244314683160][308 ms][DEBUG] START check_boot_completed [2025-08-26 13:38:17][350244314683160][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:38:17][350244314683160][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:38:17][350244314683160][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:38:17][350244314683160][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:38:17][350244314683160][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:38:17][350244314683160][418 ms][DEBUG] START check_internet [2025-08-26 13:38:17][350244314683160][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:38:17][350244314683160][714 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=192 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 192.934/192.934/192.934/0.000 ms\n [2025-08-26 13:38:17][350244314683160][714 ms][DEBUG] check_internet: online [2025-08-26 13:38:17][350244314683160][714 ms][DEBUG] END check_internet in 297 ms [2025-08-26 13:38:17][350244314683160][714 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:38:17][350244314683160][714 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350244314683160\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5617\"}'\'' -e'"" [2025-08-26 13:38:17][350244314683160][714 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:38:17][350244314683160][714 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350244314683160\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5617\"}'\'' -e'"" [2025-08-26 13:38:21][350244314683160][4463 ms][DEBUG] proc_open done in 3749 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-26 13:38:21][350244314683160][4463 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-08-26 13:38:21][350244314683160][4463 ms][WARN] Detected error: Process with pid 7665 either refused to load frida-agent, or terminated during injection [2025-08-26 13:38:21][350244314683160][4463 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 13:38:21][350244314683160][4620 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 13:38:21][350244314683160][4620 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 13:38:21][350244314683160][4620 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 13:38:21][350244314683160][4745 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 13:38:21][350244314683160][4745 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 13:38:21][350244314683160][4901 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 13:38:23][350244314683160][6916 ms][DEBUG] START check_boot_completed [2025-08-26 13:38:23][350244314683160][6916 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:38:23][350244314683160][6963 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:38:23][350244314683160][6963 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:38:23][350244314683160][7041 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 13:38:23][350244314683160][7041 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 13:38:26][350244314683160][10056 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 13:38:26][350244314683160][10056 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350244314683160\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5617\"}'\'' -e'"" [2025-08-26 13:38:30][350244314683160][13305 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-26 13:38:30][350244314683160][13461 ms][DEBUG] proc_open done in 3405 ms; code=255; res.len=101 [2025-08-26 13:38:30][350244314683160][13461 ms][DEBUG] END runCmdUntilRes#2 in 3406 ms [2025-08-26 13:38:30][350244314683160][13461 ms][INFO] SUCCESS response from frida (len=101) [2025-08-26 13:38:30][][0 ms][INFO] === Request start === [2025-08-26 13:38:30][][1 ms][DEBUG] START check_scloud [2025-08-26 13:38:30][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:38:30][][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 8947 11216 23791836 125572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:38:30][][249 ms][DEBUG] targetPkg: running [2025-08-26 13:38:30][][249 ms][DEBUG] END check_scloud in 248 ms [2025-08-26 13:38:30][][249 ms][DEBUG] START check_boot_completed [2025-08-26 13:38:30][][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:38:30][][296 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:38:30][][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:38:30][][358 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:38:30][][358 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:38:30][][358 ms][DEBUG] START check_internet [2025-08-26 13:38:30][][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:38:31][][576 ms][DEBUG] SU: done in 218 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=114 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 114.107/114.107/114.107/0.000 ms\n [2025-08-26 13:38:31][][576 ms][DEBUG] check_internet: online [2025-08-26 13:38:31][][577 ms][DEBUG] END check_internet in 218 ms [2025-08-26 13:38:31][][577 ms][DEBUG] rawBody.length=1129 [2025-08-26 13:38:31][][577 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8XA036RTK\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5652\"}'\'' -e'"" [2025-08-26 13:38:31][][577 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:38:31][][577 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8XA036RTK\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5652\"}'\'' -e'"" [2025-08-26 13:38:35][][4654 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-26 13:38:35][][4810 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=101 [2025-08-26 13:38:35][][4810 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-26 13:38:35][][4810 ms][INFO] SUCCESS response from frida (len=101) [2025-08-26 13:39:02][358212584990492][0 ms][INFO] === Request start === [2025-08-26 13:39:02][358212584990492][0 ms][DEBUG] START check_scloud [2025-08-26 13:39:02][358212584990492][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:39:02][358212584990492][285 ms][DEBUG] SU: done in 285 ms; outu0_a118 8947 11216 23840952 139120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:39:02][358212584990492][285 ms][DEBUG] targetPkg: running [2025-08-26 13:39:02][358212584990492][285 ms][DEBUG] END check_scloud in 285 ms [2025-08-26 13:39:02][358212584990492][285 ms][DEBUG] START check_boot_completed [2025-08-26 13:39:02][358212584990492][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:39:02][358212584990492][316 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 13:39:02][358212584990492][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:39:02][358212584990492][363 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:39:02][358212584990492][363 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 13:39:02][358212584990492][363 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:39:02][358212584990492][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212584990492\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SEK\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4985\"}'\'' -e'"" [2025-08-26 13:39:02][358212584990492][363 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:39:02][358212584990492][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212584990492\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SEK\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4985\"}'\'' -e'"" [2025-08-26 13:39:06][358212584990492][3753 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f288b768-0eac-4e1e-a238-719966608f59","id":"QR_f288b768-0eac-4e1e-a238-719966608f59","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:39:06][358212584990492][3909 ms][DEBUG] proc_open done in 3546 ms; code=255; res.len=3343 [2025-08-26 13:39:06][358212584990492][3909 ms][DEBUG] END runCmdUntilRes#1 in 3546 ms [2025-08-26 13:39:06][358212584990492][3909 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:40:04][353568697551488][1 ms][INFO] === Request start === [2025-08-26 13:40:04][353568697551488][1 ms][DEBUG] START check_scloud [2025-08-26 13:40:04][353568697551488][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:40:04][353568697551488][284 ms][DEBUG] SU: done in 282 ms; outu0_a118 8947 11216 23950620 150744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:40:04][353568697551488][284 ms][DEBUG] targetPkg: running [2025-08-26 13:40:04][353568697551488][284 ms][DEBUG] END check_scloud in 283 ms [2025-08-26 13:40:04][353568697551488][284 ms][DEBUG] START check_boot_completed [2025-08-26 13:40:04][353568697551488][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:40:04][353568697551488][331 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:40:04][353568697551488][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:40:04][353568697551488][393 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:40:04][353568697551488][393 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:40:04][353568697551488][393 ms][DEBUG] START check_internet [2025-08-26 13:40:04][353568697551488][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:40:05][353568697551488][815 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.521/197.521/197.521/0.000 ms\n [2025-08-26 13:40:05][353568697551488][815 ms][DEBUG] check_internet: online [2025-08-26 13:40:05][353568697551488][815 ms][DEBUG] END check_internet in 422 ms [2025-08-26 13:40:05][353568697551488][815 ms][DEBUG] rawBody.length=1149 [2025-08-26 13:40:05][353568697551488][815 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353568697551488\",\"model\":\"SM-A235M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6781\"}'\'' -e'"" [2025-08-26 13:40:05][353568697551488][815 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:40:05][353568697551488][815 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353568697551488\",\"model\":\"SM-A235M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6781\"}'\'' -e'"" [2025-08-26 13:40:13][353568697551488][9047 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b463f615-34db-488b-9469-b5a832876471","id":"QR_b463f615-34db-488b-9469-b5a832876471","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:40:13][353568697551488][9203 ms][DEBUG] proc_open done in 8388 ms; code=255; res.len=3343 [2025-08-26 13:40:13][353568697551488][9203 ms][DEBUG] END runCmdUntilRes#1 in 8388 ms [2025-08-26 13:40:13][353568697551488][9203 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:41:05][354314902979027][0 ms][INFO] === Request start === [2025-08-26 13:41:05][354314902979027][1 ms][DEBUG] START check_scloud [2025-08-26 13:41:05][354314902979027][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:41:05][354314902979027][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 8947 11216 24055220 161924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:41:05][354314902979027][313 ms][DEBUG] targetPkg: running [2025-08-26 13:41:05][354314902979027][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-26 13:41:05][354314902979027][313 ms][DEBUG] START check_boot_completed [2025-08-26 13:41:05][354314902979027][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:41:05][354314902979027][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:41:05][354314902979027][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:41:05][354314902979027][422 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:41:05][354314902979027][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:41:05][354314902979027][422 ms][DEBUG] rawBody.length=1149 [2025-08-26 13:41:05][354314902979027][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354314902979027\",\"model\":\"SM-A245M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7200\"}'\'' -e'"" [2025-08-26 13:41:05][354314902979027][422 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:41:05][354314902979027][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354314902979027\",\"model\":\"SM-A245M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7200\"}'\'' -e'"" [2025-08-26 13:41:10][354314902979027][5842 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c8913a9-b2c2-4206-8978-2d8edcdd02db","id":"QR_9c8913a9-b2c2-4206-8978-2d8edcdd02db","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:41:11][354314902979027][5998 ms][DEBUG] proc_open done in 5576 ms; code=255; res.len=3343 [2025-08-26 13:41:11][354314902979027][5999 ms][DEBUG] END runCmdUntilRes#1 in 5576 ms [2025-08-26 13:41:11][354314902979027][5999 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:43:03][356007110149288][1 ms][INFO] === Request start === [2025-08-26 13:43:03][356007110149288][1 ms][DEBUG] START check_scloud [2025-08-26 13:43:03][356007110149288][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:43:03][356007110149288][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 8947 11216 24236204 173168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:43:03][356007110149288][308 ms][DEBUG] targetPkg: running [2025-08-26 13:43:03][356007110149288][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-26 13:43:03][356007110149288][308 ms][DEBUG] START check_boot_completed [2025-08-26 13:43:03][356007110149288][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:43:03][356007110149288][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 13:43:03][356007110149288][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:43:03][356007110149288][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:43:03][356007110149288][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 13:43:03][356007110149288][386 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:43:03][356007110149288][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356007110149288\",\"model\":\"SM-G980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3331\"}'\'' -e'"" [2025-08-26 13:43:03][356007110149288][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:43:03][356007110149288][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356007110149288\",\"model\":\"SM-G980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3331\"}'\'' -e'"" [2025-08-26 13:43:07][356007110149288][4088 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_24f125f7-cd68-4531-bf43-91fefbe3f4fd","id":"QR_24f125f7-cd68-4531-bf43-91fefbe3f4fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:43:07][356007110149288][4244 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-26 13:43:07][356007110149288][4245 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-26 13:43:07][356007110149288][4245 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:43:09][352501912094100][0 ms][INFO] === Request start === [2025-08-26 13:43:09][352501912094100][1 ms][DEBUG] START check_scloud [2025-08-26 13:43:09][352501912094100][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:43:09][352501912094100][289 ms][DEBUG] SU: done in 289 ms; outu0_a118 8947 11216 24399156 184948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:43:09][352501912094100][289 ms][DEBUG] targetPkg: running [2025-08-26 13:43:09][352501912094100][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-26 13:43:09][352501912094100][290 ms][DEBUG] START check_boot_completed [2025-08-26 13:43:09][352501912094100][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:43:09][352501912094100][336 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:43:09][352501912094100][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:43:09][352501912094100][399 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 13:43:09][352501912094100][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:43:09][352501912094100][399 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:43:09][352501912094100][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501912094100\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4104\"}'\'' -e'"" [2025-08-26 13:43:09][352501912094100][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:43:09][352501912094100][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501912094100\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4104\"}'\'' -e'"" [2025-08-26 13:43:12][352501912094100][3882 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d529280-2643-417d-83ee-53ec28660c9a","id":"QR_7d529280-2643-417d-83ee-53ec28660c9a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:43:13][352501912094100][4038 ms][DEBUG] proc_open done in 3639 ms; code=255; res.len=3343 [2025-08-26 13:43:13][352501912094100][4038 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-08-26 13:43:13][352501912094100][4038 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:46:03][358799694615811][1 ms][INFO] === Request start === [2025-08-26 13:46:03][358799694615811][1 ms][DEBUG] START check_scloud [2025-08-26 13:46:03][358799694615811][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:46:03][358799694615811][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 8947 11216 24502772 196652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:46:03][358799694615811][297 ms][DEBUG] targetPkg: running [2025-08-26 13:46:03][358799694615811][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-26 13:46:03][358799694615811][298 ms][DEBUG] START check_boot_completed [2025-08-26 13:46:03][358799694615811][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:46:03][358799694615811][344 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:46:03][358799694615811][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:46:03][358799694615811][407 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:46:03][358799694615811][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:46:03][358799694615811][407 ms][DEBUG] START check_internet [2025-08-26 13:46:03][358799694615811][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:46:04][358799694615811][844 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=152 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 152.091/152.091/152.091/0.000 ms\n [2025-08-26 13:46:04][358799694615811][844 ms][DEBUG] check_internet: online [2025-08-26 13:46:04][358799694615811][844 ms][DEBUG] END check_internet in 437 ms [2025-08-26 13:46:04][358799694615811][844 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:46:04][358799694615811][844 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799694615811\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1051\"}'\'' -e'"" [2025-08-26 13:46:04][358799694615811][844 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:46:04][358799694615811][844 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799694615811\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1051\"}'\'' -e'"" [2025-08-26 13:46:08][358799694615811][4655 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d3671629-42ab-44d5-8ce7-22aa49b73421","id":"QR_d3671629-42ab-44d5-8ce7-22aa49b73421","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:46:08][358799694615811][4812 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-26 13:46:08][358799694615811][4812 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-26 13:46:08][358799694615811][4812 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:46:10][356969643391317][0 ms][INFO] === Request start === [2025-08-26 13:46:10][356969643391317][1 ms][DEBUG] START check_scloud [2025-08-26 13:46:10][356969643391317][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:46:10][356969643391317][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 8947 11216 24682108 208420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:46:10][356969643391317][299 ms][DEBUG] targetPkg: running [2025-08-26 13:46:10][356969643391317][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-26 13:46:10][356969643391317][299 ms][DEBUG] START check_boot_completed [2025-08-26 13:46:10][356969643391317][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:46:10][356969643391317][345 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 13:46:10][356969643391317][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:46:11][356969643391317][438 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 13:46:11][356969643391317][439 ms][DEBUG] END check_boot_completed in 139 ms [2025-08-26 13:46:11][356969643391317][439 ms][DEBUG] START check_internet [2025-08-26 13:46:11][356969643391317][439 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:46:11][356969643391317][704 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.081/141.081/141.081/0.000 ms\n [2025-08-26 13:46:11][356969643391317][704 ms][DEBUG] check_internet: online [2025-08-26 13:46:11][356969643391317][704 ms][DEBUG] END check_internet in 265 ms [2025-08-26 13:46:11][356969643391317][704 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:46:11][356969643391317][704 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356969643391317\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8840\"}'\'' -e'"" [2025-08-26 13:46:11][356969643391317][704 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:46:11][356969643391317][704 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356969643391317\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8840\"}'\'' -e'"" [2025-08-26 13:46:14][356969643391317][4203 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4d07a008-9051-4f99-bf49-1d44a9a7b0bf","id":"QR_4d07a008-9051-4f99-bf49-1d44a9a7b0bf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:46:15][356969643391317][4359 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=3343 [2025-08-26 13:46:15][356969643391317][4359 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-26 13:46:15][356969643391317][4359 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:46:17][354747951727351][0 ms][INFO] === Request start === [2025-08-26 13:46:17][354747951727351][1 ms][DEBUG] START check_scloud [2025-08-26 13:46:17][354747951727351][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:46:17][354747951727351][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 8947 11216 24805308 219264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:46:17][354747951727351][258 ms][DEBUG] targetPkg: running [2025-08-26 13:46:17][354747951727351][258 ms][DEBUG] END check_scloud in 258 ms [2025-08-26 13:46:17][354747951727351][258 ms][DEBUG] START check_boot_completed [2025-08-26 13:46:17][354747951727351][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:46:17][354747951727351][305 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:46:17][354747951727351][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:46:17][354747951727351][367 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:46:17][354747951727351][368 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:46:17][354747951727351][368 ms][DEBUG] START check_internet [2025-08-26 13:46:17][354747951727351][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:46:18][354747951727351][649 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=161 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 161.160/161.160/161.160/0.000 ms\n [2025-08-26 13:46:18][354747951727351][649 ms][DEBUG] check_internet: online [2025-08-26 13:46:18][354747951727351][649 ms][DEBUG] END check_internet in 281 ms [2025-08-26 13:46:18][354747951727351][649 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:46:18][354747951727351][649 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747951727351\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4036\"}'\'' -e'"" [2025-08-26 13:46:18][354747951727351][649 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:46:18][354747951727351][649 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747951727351\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4036\"}'\'' -e'"" [2025-08-26 13:46:21][354747951727351][4335 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e6614df4-f661-45bf-a27b-01c2be2fb192","id":"QR_e6614df4-f661-45bf-a27b-01c2be2fb192","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:46:21][354747951727351][4491 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3343 [2025-08-26 13:46:21][354747951727351][4491 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-08-26 13:46:21][354747951727351][4492 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:46:25][352177396141285][0 ms][INFO] === Request start === [2025-08-26 13:46:25][352177396141285][1 ms][DEBUG] START check_scloud [2025-08-26 13:46:25][352177396141285][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:46:25][352177396141285][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 8947 11216 24948896 231284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:46:25][352177396141285][314 ms][DEBUG] targetPkg: running [2025-08-26 13:46:25][352177396141285][314 ms][DEBUG] END check_scloud in 314 ms [2025-08-26 13:46:25][352177396141285][314 ms][DEBUG] START check_boot_completed [2025-08-26 13:46:25][352177396141285][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:46:25][352177396141285][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:46:25][352177396141285][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:46:26][352177396141285][423 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:46:26][352177396141285][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:46:26][352177396141285][424 ms][DEBUG] START check_internet [2025-08-26 13:46:26][352177396141285][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:46:26][352177396141285][689 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=150 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 150.134/150.134/150.134/0.000 ms\n [2025-08-26 13:46:26][352177396141285][689 ms][DEBUG] check_internet: online [2025-08-26 13:46:26][352177396141285][689 ms][DEBUG] END check_internet in 265 ms [2025-08-26 13:46:26][352177396141285][689 ms][DEBUG] rawBody.length=1149 [2025-08-26 13:46:26][352177396141285][689 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177396141285\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9426\"}'\'' -e'"" [2025-08-26 13:46:26][352177396141285][689 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:46:26][352177396141285][689 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352177396141285\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9426\"}'\'' -e'"" [2025-08-26 13:46:31][352177396141285][5750 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fd42944a-5741-404b-b677-ad2ef7e720a3","id":"QR_fd42944a-5741-404b-b677-ad2ef7e720a3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:46:31][352177396141285][5906 ms][DEBUG] proc_open done in 5218 ms; code=255; res.len=3343 [2025-08-26 13:46:31][352177396141285][5907 ms][DEBUG] END runCmdUntilRes#1 in 5218 ms [2025-08-26 13:46:31][352177396141285][5907 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:47:03][351797845831938][0 ms][INFO] === Request start === [2025-08-26 13:47:03][351797845831938][1 ms][DEBUG] START check_scloud [2025-08-26 13:47:03][351797845831938][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:47:03][351797845831938][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 8947 11216 25077052 242692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:47:03][351797845831938][309 ms][DEBUG] targetPkg: running [2025-08-26 13:47:03][351797845831938][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 13:47:03][351797845831938][309 ms][DEBUG] START check_boot_completed [2025-08-26 13:47:03][351797845831938][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:47:03][351797845831938][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:47:03][351797845831938][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:47:03][351797845831938][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:47:03][351797845831938][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:47:03][351797845831938][419 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:47:03][351797845831938][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351797845831938\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7766\"}'\'' -e'"" [2025-08-26 13:47:03][351797845831938][419 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:47:03][351797845831938][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351797845831938\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7766\"}'\'' -e'"" [2025-08-26 13:47:07][351797845831938][4074 ms][DEBUG] proc_open done in 3655 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-26 13:47:07][351797845831938][4074 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-26 13:47:07][351797845831938][4074 ms][WARN] Detected error: Process with pid 8947 either refused to load frida-agent, or terminated during injection [2025-08-26 13:47:07][351797845831938][4074 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 13:47:07][351797845831938][4214 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 13:47:07][351797845831938][4214 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 13:47:07][351797845831938][4215 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 13:47:07][351797845831938][4356 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 13:47:07][351797845831938][4356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 13:47:08][351797845831938][4511 ms][DEBUG] SU: done in 155 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 13:47:10][351797845831938][6526 ms][DEBUG] START check_boot_completed [2025-08-26 13:47:10][351797845831938][6526 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:47:10][351797845831938][6573 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:47:10][351797845831938][6573 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:47:10][351797845831938][6651 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 13:47:10][351797845831938][6651 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 13:47:13][351797845831938][9666 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 13:47:13][351797845831938][9666 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351797845831938\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7766\"}'\'' -e'"" [2025-08-26 13:47:16][351797845831938][13384 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4acc2e36-a573-45ca-8f6e-3a9b0f16fd28","id":"QR_4acc2e36-a573-45ca-8f6e-3a9b0f16fd28","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:47:17][351797845831938][13540 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3343 [2025-08-26 13:47:17][351797845831938][13540 ms][DEBUG] END runCmdUntilRes#2 in 3874 ms [2025-08-26 13:47:17][351797845831938][13540 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:47:20][359938615175385][0 ms][INFO] === Request start === [2025-08-26 13:47:20][359938615175385][1 ms][DEBUG] START check_scloud [2025-08-26 13:47:20][359938615175385][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:47:21][359938615175385][238 ms][DEBUG] SU: done in 237 ms; outu0_a118 10207 11216 23750364 125960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:47:21][359938615175385][238 ms][DEBUG] targetPkg: running [2025-08-26 13:47:21][359938615175385][238 ms][DEBUG] END check_scloud in 237 ms [2025-08-26 13:47:21][359938615175385][238 ms][DEBUG] START check_boot_completed [2025-08-26 13:47:21][359938615175385][238 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:47:21][359938615175385][269 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 13:47:21][359938615175385][269 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:47:21][359938615175385][316 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:47:21][359938615175385][316 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 13:47:21][359938615175385][316 ms][DEBUG] rawBody.length=1149 [2025-08-26 13:47:21][359938615175385][316 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359938615175385\",\"model\":\"SM-G990W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1969\"}'\'' -e'"" [2025-08-26 13:47:21][359938615175385][316 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:47:21][359938615175385][316 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359938615175385\",\"model\":\"SM-G990W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1969\"}'\'' -e'"" [2025-08-26 13:47:26][359938615175385][5190 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_674ff81b-0b72-4540-b9fa-c416148512a0","id":"QR_674ff81b-0b72-4540-b9fa-c416148512a0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:47:26][359938615175385][5346 ms][DEBUG] proc_open done in 5030 ms; code=255; res.len=3343 [2025-08-26 13:47:26][359938615175385][5346 ms][DEBUG] END runCmdUntilRes#1 in 5030 ms [2025-08-26 13:47:26][359938615175385][5346 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:47:31][350070122567927][0 ms][INFO] === Request start === [2025-08-26 13:47:31][350070122567927][0 ms][DEBUG] START check_scloud [2025-08-26 13:47:31][350070122567927][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:47:31][350070122567927][241 ms][DEBUG] SU: done in 240 ms; outu0_a118 10207 11216 23926832 139404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:47:31][350070122567927][241 ms][DEBUG] targetPkg: running [2025-08-26 13:47:31][350070122567927][241 ms][DEBUG] END check_scloud in 241 ms [2025-08-26 13:47:31][350070122567927][241 ms][DEBUG] START check_boot_completed [2025-08-26 13:47:31][350070122567927][241 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:47:31][350070122567927][303 ms][DEBUG] ADB: done in 62 ms; out [2025-08-26 13:47:31][350070122567927][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:47:31][350070122567927][383 ms][DEBUG] SU: done in 80 ms; out [2025-08-26 13:47:31][350070122567927][383 ms][DEBUG] END check_boot_completed in 142 ms [2025-08-26 13:47:31][350070122567927][383 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:47:31][350070122567927][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350070122567927\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8423\"}'\'' -e'"" [2025-08-26 13:47:31][350070122567927][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:47:31][350070122567927][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350070122567927\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8423\"}'\'' -e'"" [2025-08-26 13:47:35][350070122567927][3990 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c6801a42-d96e-4821-9295-b3d867964d0d","id":"QR_c6801a42-d96e-4821-9295-b3d867964d0d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:47:35][350070122567927][4146 ms][DEBUG] proc_open done in 3762 ms; code=255; res.len=3343 [2025-08-26 13:47:35][350070122567927][4146 ms][DEBUG] END runCmdUntilRes#1 in 3762 ms [2025-08-26 13:47:35][350070122567927][4146 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:48:05][350209362976048][1 ms][INFO] === Request start === [2025-08-26 13:48:05][350209362976048][1 ms][DEBUG] START check_scloud [2025-08-26 13:48:05][350209362976048][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:48:05][350209362976048][281 ms][DEBUG] SU: done in 279 ms; outu0_a118 10207 11216 23992204 151740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:48:05][350209362976048][281 ms][DEBUG] targetPkg: running [2025-08-26 13:48:05][350209362976048][281 ms][DEBUG] END check_scloud in 280 ms [2025-08-26 13:48:05][350209362976048][281 ms][DEBUG] START check_boot_completed [2025-08-26 13:48:05][350209362976048][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:48:05][350209362976048][327 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:48:05][350209362976048][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:48:05][350209362976048][405 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 13:48:05][350209362976048][406 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 13:48:05][350209362976048][406 ms][DEBUG] START check_internet [2025-08-26 13:48:05][350209362976048][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:48:05][350209362976048][718 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=182 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 182.489/182.489/182.489/0.000 ms\n [2025-08-26 13:48:05][350209362976048][718 ms][DEBUG] check_internet: online [2025-08-26 13:48:05][350209362976048][718 ms][DEBUG] END check_internet in 312 ms [2025-08-26 13:48:05][350209362976048][718 ms][DEBUG] rawBody.length=1149 [2025-08-26 13:48:05][350209362976048][718 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350209362976048\",\"model\":\"SM-S918W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8023\"}'\'' -e'"" [2025-08-26 13:48:05][350209362976048][718 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:48:05][350209362976048][719 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350209362976048\",\"model\":\"SM-S918W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8023\"}'\'' -e'"" [2025-08-26 13:48:10][350209362976048][5763 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_41744710-67e5-4ba5-9849-4cb693d9875a","id":"QR_41744710-67e5-4ba5-9849-4cb693d9875a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:48:11][350209362976048][5920 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-08-26 13:48:11][350209362976048][5920 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-08-26 13:48:11][350209362976048][5920 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:48:15][351031121667422][0 ms][INFO] === Request start === [2025-08-26 13:48:15][351031121667422][1 ms][DEBUG] START check_scloud [2025-08-26 13:48:15][351031121667422][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:48:16][351031121667422][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 10207 11216 24145044 162044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:48:16][351031121667422][302 ms][DEBUG] targetPkg: running [2025-08-26 13:48:16][351031121667422][302 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 13:48:16][351031121667422][303 ms][DEBUG] START check_boot_completed [2025-08-26 13:48:16][351031121667422][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:48:16][351031121667422][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:48:16][351031121667422][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:48:16][351031121667422][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:48:16][351031121667422][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 13:48:16][351031121667422][396 ms][DEBUG] START check_internet [2025-08-26 13:48:16][351031121667422][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:48:16][351031121667422][630 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=145 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 145.190/145.190/145.190/0.000 ms\n [2025-08-26 13:48:16][351031121667422][630 ms][DEBUG] check_internet: online [2025-08-26 13:48:16][351031121667422][631 ms][DEBUG] END check_internet in 235 ms [2025-08-26 13:48:16][351031121667422][631 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:48:16][351031121667422][631 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351031121667422\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5713\"}'\'' -e'"" [2025-08-26 13:48:16][351031121667422][631 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:48:16][351031121667422][631 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351031121667422\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5713\"}'\'' -e'"" [2025-08-26 13:48:20][351031121667422][4660 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6886b5ba-b69f-4db8-a41a-2a3f74f9e847","id":"QR_6886b5ba-b69f-4db8-a41a-2a3f74f9e847","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:48:20][351031121667422][4817 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-26 13:48:20][351031121667422][4817 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-26 13:48:20][351031121667422][4817 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:48:24][353182770074416][0 ms][INFO] === Request start === [2025-08-26 13:48:24][353182770074416][1 ms][DEBUG] START check_scloud [2025-08-26 13:48:24][353182770074416][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:48:24][353182770074416][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 10207 11216 24320412 172976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:48:24][353182770074416][300 ms][DEBUG] targetPkg: running [2025-08-26 13:48:24][353182770074416][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-26 13:48:24][353182770074416][300 ms][DEBUG] START check_boot_completed [2025-08-26 13:48:24][353182770074416][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:48:24][353182770074416][329 ms][DEBUG] ADB: done in 29 ms; out [2025-08-26 13:48:24][353182770074416][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:48:24][353182770074416][376 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:48:24][353182770074416][376 ms][DEBUG] END check_boot_completed in 76 ms [2025-08-26 13:48:24][353182770074416][376 ms][DEBUG] START check_internet [2025-08-26 13:48:24][353182770074416][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:48:25][353182770074416][657 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=144 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 144.673/144.673/144.673/0.000 ms\n [2025-08-26 13:48:25][353182770074416][657 ms][DEBUG] check_internet: online [2025-08-26 13:48:25][353182770074416][657 ms][DEBUG] END check_internet in 281 ms [2025-08-26 13:48:25][353182770074416][657 ms][DEBUG] rawBody.length=1149 [2025-08-26 13:48:25][353182770074416][657 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182770074416\",\"model\":\"SM-S918U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PCT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9244\"}'\'' -e'"" [2025-08-26 13:48:25][353182770074416][658 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:48:25][353182770074416][658 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182770074416\",\"model\":\"SM-S918U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PCT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9244\"}'\'' -e'"" [2025-08-26 13:48:29][353182770074416][5297 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a5486a8-5567-41b3-9420-60c454e15e57","id":"QR_1a5486a8-5567-41b3-9420-60c454e15e57","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:48:29][353182770074416][5453 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-08-26 13:48:29][353182770074416][5453 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-08-26 13:48:29][353182770074416][5453 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:48:35][356826103147466][0 ms][INFO] === Request start === [2025-08-26 13:48:35][356826103147466][1 ms][DEBUG] START check_scloud [2025-08-26 13:48:35][356826103147466][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:48:36][356826103147466][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 10207 11216 24428032 184828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:48:36][356826103147466][258 ms][DEBUG] targetPkg: running [2025-08-26 13:48:36][356826103147466][258 ms][DEBUG] END check_scloud in 258 ms [2025-08-26 13:48:36][356826103147466][258 ms][DEBUG] START check_boot_completed [2025-08-26 13:48:36][356826103147466][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:48:36][356826103147466][305 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:48:36][356826103147466][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:48:36][356826103147466][353 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 13:48:36][356826103147466][353 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 13:48:36][356826103147466][353 ms][DEBUG] START check_internet [2025-08-26 13:48:36][356826103147466][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:48:36][356826103147466][680 ms][DEBUG] SU: done in 327 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.202/202.202/202.202/0.000 ms\n [2025-08-26 13:48:36][356826103147466][680 ms][DEBUG] check_internet: online [2025-08-26 13:48:36][356826103147466][680 ms][DEBUG] END check_internet in 328 ms [2025-08-26 13:48:36][356826103147466][680 ms][DEBUG] rawBody.length=1149 [2025-08-26 13:48:36][356826103147466][680 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356826103147466\",\"model\":\"SM-A505W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1883\"}'\'' -e'"" [2025-08-26 13:48:36][356826103147466][681 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:48:36][356826103147466][681 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356826103147466\",\"model\":\"SM-A505W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1883\"}'\'' -e'"" [2025-08-26 13:48:40][356826103147466][4944 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3fb0c643-f565-4a15-a6df-f1cadf0fbe3d","id":"QR_3fb0c643-f565-4a15-a6df-f1cadf0fbe3d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:48:40][356826103147466][5101 ms][DEBUG] proc_open done in 4420 ms; code=255; res.len=3343 [2025-08-26 13:48:40][356826103147466][5101 ms][DEBUG] END runCmdUntilRes#1 in 4420 ms [2025-08-26 13:48:40][356826103147466][5101 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:49:03][359156947998529][1 ms][INFO] === Request start === [2025-08-26 13:49:03][359156947998529][1 ms][DEBUG] START check_scloud [2025-08-26 13:49:03][359156947998529][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:49:03][359156947998529][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 10207 11216 24525468 196052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:49:03][359156947998529][306 ms][DEBUG] targetPkg: running [2025-08-26 13:49:03][359156947998529][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-26 13:49:03][359156947998529][306 ms][DEBUG] START check_boot_completed [2025-08-26 13:49:03][359156947998529][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:49:03][359156947998529][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:49:03][359156947998529][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:49:03][359156947998529][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:49:03][359156947998529][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 13:49:03][359156947998529][399 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:49:03][359156947998529][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947998529\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3334\"}'\'' -e'"" [2025-08-26 13:49:03][359156947998529][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:49:03][359156947998529][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947998529\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3334\"}'\'' -e'"" [2025-08-26 13:49:07][359156947998529][4023 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_812391ba-4a95-4e6f-bf00-b6536b08d147","id":"QR_812391ba-4a95-4e6f-bf00-b6536b08d147","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:49:07][359156947998529][4179 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-08-26 13:49:07][359156947998529][4179 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-26 13:49:07][359156947998529][4179 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:49:10][359496120462673][0 ms][INFO] === Request start === [2025-08-26 13:49:10][359496120462673][1 ms][DEBUG] START check_scloud [2025-08-26 13:49:10][359496120462673][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:49:11][359496120462673][304 ms][DEBUG] SU: done in 304 ms; outu0_a118 10207 11216 24689368 207944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:49:11][359496120462673][305 ms][DEBUG] targetPkg: running [2025-08-26 13:49:11][359496120462673][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 13:49:11][359496120462673][305 ms][DEBUG] START check_boot_completed [2025-08-26 13:49:11][359496120462673][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:49:11][359496120462673][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:49:11][359496120462673][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:49:11][359496120462673][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:49:11][359496120462673][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 13:49:11][359496120462673][398 ms][DEBUG] rawBody.length=1149 [2025-08-26 13:49:11][359496120462673][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359496120462673\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4610\"}'\'' -e'"" [2025-08-26 13:49:11][359496120462673][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:49:11][359496120462673][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359496120462673\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4610\"}'\'' -e'"" [2025-08-26 13:49:19][359496120462673][8568 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_72dea69d-7dfc-4083-83b2-c633143f9f5b","id":"QR_72dea69d-7dfc-4083-83b2-c633143f9f5b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:49:19][359496120462673][8724 ms][DEBUG] proc_open done in 8326 ms; code=255; res.len=3343 [2025-08-26 13:49:19][359496120462673][8724 ms][DEBUG] END runCmdUntilRes#1 in 8326 ms [2025-08-26 13:49:19][359496120462673][8724 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:49:25][353026642926875][0 ms][INFO] === Request start === [2025-08-26 13:49:25][353026642926875][1 ms][DEBUG] START check_scloud [2025-08-26 13:49:25][353026642926875][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:49:25][353026642926875][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 10207 11216 24807228 218568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:49:25][353026642926875][308 ms][DEBUG] targetPkg: running [2025-08-26 13:49:25][353026642926875][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 13:49:25][353026642926875][309 ms][DEBUG] START check_boot_completed [2025-08-26 13:49:25][353026642926875][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:49:26][353026642926875][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:49:26][353026642926875][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:49:26][353026642926875][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:49:26][353026642926875][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:49:26][353026642926875][418 ms][DEBUG] rawBody.length=1149 [2025-08-26 13:49:26][353026642926875][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353026642926875\",\"model\":\"SM-A166U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1922\"}'\'' -e'"" [2025-08-26 13:49:26][353026642926875][418 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:49:26][353026642926875][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353026642926875\",\"model\":\"SM-A166U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1922\"}'\'' -e'"" [2025-08-26 13:49:30][353026642926875][5104 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dc1c75ba-4227-41c4-83fa-bd4a9bd8ea93","id":"QR_dc1c75ba-4227-41c4-83fa-bd4a9bd8ea93","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:49:30][353026642926875][5260 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-08-26 13:49:30][353026642926875][5260 ms][DEBUG] END runCmdUntilRes#1 in 4842 ms [2025-08-26 13:49:30][353026642926875][5260 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:50:04][351406752465322][0 ms][INFO] === Request start === [2025-08-26 13:50:04][351406752465322][1 ms][DEBUG] START check_scloud [2025-08-26 13:50:04][351406752465322][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:50:04][351406752465322][268 ms][DEBUG] SU: done in 268 ms; outu0_a118 10207 11216 24932992 230536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:50:04][351406752465322][269 ms][DEBUG] targetPkg: running [2025-08-26 13:50:04][351406752465322][269 ms][DEBUG] END check_scloud in 268 ms [2025-08-26 13:50:04][351406752465322][269 ms][DEBUG] START check_boot_completed [2025-08-26 13:50:04][351406752465322][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:50:04][351406752465322][315 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:50:04][351406752465322][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:50:04][351406752465322][362 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:50:04][351406752465322][362 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 13:50:04][351406752465322][362 ms][DEBUG] START check_internet [2025-08-26 13:50:04][351406752465322][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:50:05][351406752465322][800 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.991/201.991/201.991/0.000 ms\n [2025-08-26 13:50:05][351406752465322][800 ms][DEBUG] check_internet: online [2025-08-26 13:50:05][351406752465322][800 ms][DEBUG] END check_internet in 437 ms [2025-08-26 13:50:05][351406752465322][800 ms][DEBUG] rawBody.length=1149 [2025-08-26 13:50:05][351406752465322][800 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351406752465322\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7472\"}'\'' -e'"" [2025-08-26 13:50:05][351406752465322][800 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:50:05][351406752465322][800 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351406752465322\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7472\"}'\'' -e'"" [2025-08-26 13:50:09][351406752465322][5642 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3360c8f9-043f-4965-ba43-78d8bef81158","id":"QR_3360c8f9-043f-4965-ba43-78d8bef81158","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:50:10][351406752465322][5798 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-08-26 13:50:10][351406752465322][5798 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-08-26 13:50:10][351406752465322][5798 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:50:14][354454657143500][0 ms][INFO] === Request start === [2025-08-26 13:50:14][354454657143500][1 ms][DEBUG] START check_scloud [2025-08-26 13:50:14][354454657143500][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:50:15][354454657143500][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 10207 11216 25119624 242356 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:50:15][354454657143500][288 ms][DEBUG] targetPkg: running [2025-08-26 13:50:15][354454657143500][288 ms][DEBUG] END check_scloud in 288 ms [2025-08-26 13:50:15][354454657143500][288 ms][DEBUG] START check_boot_completed [2025-08-26 13:50:15][354454657143500][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:50:15][354454657143500][335 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:50:15][354454657143500][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:50:15][354454657143500][397 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:50:15][354454657143500][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:50:15][354454657143500][397 ms][DEBUG] START check_internet [2025-08-26 13:50:15][354454657143500][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:50:15][354454657143500][679 ms][DEBUG] SU: done in 282 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=140 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 140.646/140.646/140.646/0.000 ms\n [2025-08-26 13:50:15][354454657143500][679 ms][DEBUG] check_internet: online [2025-08-26 13:50:15][354454657143500][679 ms][DEBUG] END check_internet in 282 ms [2025-08-26 13:50:15][354454657143500][679 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:50:15][354454657143500][680 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354454657143500\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6718\"}'\'' -e'"" [2025-08-26 13:50:15][354454657143500][680 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:50:15][354454657143500][680 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354454657143500\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6718\"}'\'' -e'"" [2025-08-26 13:50:19][354454657143500][4318 ms][DEBUG] proc_open done in 3639 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 13:50:19][354454657143500][4318 ms][DEBUG] END runCmdUntilRes#1 in 3639 ms [2025-08-26 13:50:19][354454657143500][4318 ms][WARN] Detected error: Process with pid 10207 either refused to load frida-agent, or terminated during injection [2025-08-26 13:50:19][354454657143500][4319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 13:50:19][354454657143500][4490 ms][DEBUG] SU: done in 171 ms; out [2025-08-26 13:50:19][354454657143500][4490 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 13:50:19][354454657143500][4490 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 13:50:19][354454657143500][4631 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 13:50:19][354454657143500][4631 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 13:50:19][354454657143500][4787 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 13:50:21][354454657143500][6802 ms][DEBUG] START check_boot_completed [2025-08-26 13:50:21][354454657143500][6802 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:50:21][354454657143500][6849 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:50:21][354454657143500][6849 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:50:21][354454657143500][6896 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:50:21][354454657143500][6896 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 13:50:24][354454657143500][9910 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 13:50:24][354454657143500][9911 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354454657143500\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6718\"}'\'' -e'"" [2025-08-26 13:50:28][354454657143500][13660 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67459fb1-3817-4f31-858b-4e03d5c1fcef","id":"QR_67459fb1-3817-4f31-858b-4e03d5c1fcef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:50:28][354454657143500][13816 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-26 13:50:28][354454657143500][13816 ms][DEBUG] END runCmdUntilRes#2 in 3906 ms [2025-08-26 13:50:28][354454657143500][13816 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:50:31][354255813242452][0 ms][INFO] === Request start === [2025-08-26 13:50:31][354255813242452][1 ms][DEBUG] START check_scloud [2025-08-26 13:50:31][354255813242452][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:50:31][354255813242452][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 11904 11216 23803612 125132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:50:31][354255813242452][256 ms][DEBUG] targetPkg: running [2025-08-26 13:50:31][354255813242452][256 ms][DEBUG] END check_scloud in 255 ms [2025-08-26 13:50:31][354255813242452][256 ms][DEBUG] START check_boot_completed [2025-08-26 13:50:31][354255813242452][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:50:31][354255813242452][302 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:50:31][354255813242452][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:50:31][354255813242452][349 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:50:31][354255813242452][349 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 13:50:31][354255813242452][349 ms][DEBUG] START check_internet [2025-08-26 13:50:31][354255813242452][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:50:31][354255813242452][615 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=171 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 171.682/171.682/171.682/0.000 ms\n [2025-08-26 13:50:31][354255813242452][615 ms][DEBUG] check_internet: online [2025-08-26 13:50:31][354255813242452][615 ms][DEBUG] END check_internet in 266 ms [2025-08-26 13:50:31][354255813242452][615 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:50:31][354255813242452][615 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255813242452\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3696\"}'\'' -e'"" [2025-08-26 13:50:31][354255813242452][615 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:50:31][354255813242452][615 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255813242452\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3696\"}'\'' -e'"" [2025-08-26 13:50:35][354255813242452][4379 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8092c1c5-424b-4772-a105-938d8a592cbb","id":"QR_8092c1c5-424b-4772-a105-938d8a592cbb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:50:35][354255813242452][4536 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-08-26 13:50:35][354255813242452][4536 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-08-26 13:50:35][354255813242452][4536 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:51:04][353096464187575][1 ms][INFO] === Request start === [2025-08-26 13:51:04][353096464187575][1 ms][DEBUG] START check_scloud [2025-08-26 13:51:04][353096464187575][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:51:04][353096464187575][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 11904 11216 23875000 138720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:51:04][353096464187575][298 ms][DEBUG] targetPkg: running [2025-08-26 13:51:04][353096464187575][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-26 13:51:04][353096464187575][298 ms][DEBUG] START check_boot_completed [2025-08-26 13:51:04][353096464187575][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:51:04][353096464187575][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:51:04][353096464187575][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:51:04][353096464187575][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:51:04][353096464187575][391 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 13:51:04][353096464187575][392 ms][DEBUG] rawBody.length=1149 [2025-08-26 13:51:04][353096464187575][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353096464187575\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4759\"}'\'' -e'"" [2025-08-26 13:51:04][353096464187575][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:51:04][353096464187575][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353096464187575\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4759\"}'\'' -e'"" [2025-08-26 13:51:09][353096464187575][5186 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e4ce2fed-a317-42e3-829e-27b0e3c2854a","id":"QR_e4ce2fed-a317-42e3-829e-27b0e3c2854a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:51:09][353096464187575][5343 ms][DEBUG] proc_open done in 4951 ms; code=255; res.len=3343 [2025-08-26 13:51:09][353096464187575][5343 ms][DEBUG] END runCmdUntilRes#1 in 4951 ms [2025-08-26 13:51:09][353096464187575][5343 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:52:03][352501916794358][0 ms][INFO] === Request start === [2025-08-26 13:52:03][352501916794358][1 ms][DEBUG] START check_scloud [2025-08-26 13:52:03][352501916794358][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:52:03][352501916794358][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 11904 11216 24010388 150040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:52:03][352501916794358][254 ms][DEBUG] targetPkg: running [2025-08-26 13:52:03][352501916794358][254 ms][DEBUG] END check_scloud in 253 ms [2025-08-26 13:52:03][352501916794358][254 ms][DEBUG] START check_boot_completed [2025-08-26 13:52:03][352501916794358][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:52:03][352501916794358][301 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:52:03][352501916794358][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:52:03][352501916794358][347 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:52:03][352501916794358][347 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 13:52:03][352501916794358][347 ms][DEBUG] START check_internet [2025-08-26 13:52:03][352501916794358][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:52:04][352501916794358][676 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=230 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 230.063/230.063/230.063/0.000 ms\n [2025-08-26 13:52:04][352501916794358][676 ms][DEBUG] check_internet: online [2025-08-26 13:52:04][352501916794358][676 ms][DEBUG] END check_internet in 328 ms [2025-08-26 13:52:04][352501916794358][676 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:52:04][352501916794358][676 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501916794358\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2975\"}'\'' -e'"" [2025-08-26 13:52:04][352501916794358][676 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:52:04][352501916794358][676 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352501916794358\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2975\"}'\'' -e'"" [2025-08-26 13:52:08][352501916794358][4706 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_af71b976-f95b-4155-adc4-0474a99f579d","id":"QR_af71b976-f95b-4155-adc4-0474a99f579d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:52:08][352501916794358][4862 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-26 13:52:08][352501916794358][4862 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-26 13:52:08][352501916794358][4862 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:54:03][356414813894964][1 ms][INFO] === Request start === [2025-08-26 13:54:03][356414813894964][1 ms][DEBUG] START check_scloud [2025-08-26 13:54:03][356414813894964][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:54:04][356414813894964][286 ms][DEBUG] SU: done in 284 ms; outu0_a118 11904 11216 24127148 161284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:54:04][356414813894964][286 ms][DEBUG] targetPkg: running [2025-08-26 13:54:04][356414813894964][286 ms][DEBUG] END check_scloud in 285 ms [2025-08-26 13:54:04][356414813894964][286 ms][DEBUG] START check_boot_completed [2025-08-26 13:54:04][356414813894964][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:54:04][356414813894964][332 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:54:04][356414813894964][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:54:04][356414813894964][395 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:54:04][356414813894964][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:54:04][356414813894964][395 ms][DEBUG] START check_internet [2025-08-26 13:54:04][356414813894964][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:54:04][356414813894964][723 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.203/199.203/199.203/0.000 ms\n [2025-08-26 13:54:04][356414813894964][723 ms][DEBUG] check_internet: online [2025-08-26 13:54:04][356414813894964][723 ms][DEBUG] END check_internet in 328 ms [2025-08-26 13:54:04][356414813894964][723 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:54:04][356414813894964][723 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414813894964\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7520\"}'\'' -e'"" [2025-08-26 13:54:04][356414813894964][723 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:54:04][356414813894964][723 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414813894964\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7520\"}'\'' -e'"" [2025-08-26 13:54:08][356414813894964][4597 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4127ef89-5b81-4463-9ca2-c7b316126a65","id":"QR_4127ef89-5b81-4463-9ca2-c7b316126a65","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:54:08][356414813894964][4753 ms][DEBUG] proc_open done in 4029 ms; code=255; res.len=3343 [2025-08-26 13:54:08][356414813894964][4753 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-26 13:54:08][356414813894964][4753 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:54:11][352350274828089][0 ms][INFO] === Request start === [2025-08-26 13:54:11][352350274828089][1 ms][DEBUG] START check_scloud [2025-08-26 13:54:11][352350274828089][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:54:11][352350274828089][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 11904 11216 24284020 172120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:54:11][352350274828089][302 ms][DEBUG] targetPkg: running [2025-08-26 13:54:11][352350274828089][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-26 13:54:11][352350274828089][302 ms][DEBUG] START check_boot_completed [2025-08-26 13:54:11][352350274828089][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:54:11][352350274828089][349 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:54:11][352350274828089][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:54:11][352350274828089][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:54:11][352350274828089][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 13:54:11][352350274828089][411 ms][DEBUG] START check_internet [2025-08-26 13:54:11][352350274828089][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:54:11][352350274828089][772 ms][DEBUG] SU: done in 360 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=230 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 230.253/230.253/230.253/0.000 ms\n [2025-08-26 13:54:11][352350274828089][772 ms][DEBUG] check_internet: online [2025-08-26 13:54:11][352350274828089][772 ms][DEBUG] END check_internet in 361 ms [2025-08-26 13:54:11][352350274828089][772 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:54:11][352350274828089][772 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350274828089\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4526\"}'\'' -e'"" [2025-08-26 13:54:11][352350274828089][772 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:54:11][352350274828089][772 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350274828089\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4526\"}'\'' -e'"" [2025-08-26 13:54:15][352350274828089][4410 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a9ab9b58-4535-4fab-af8f-92dd7c3630a2","id":"QR_a9ab9b58-4535-4fab-af8f-92dd7c3630a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:54:15][352350274828089][4566 ms][DEBUG] proc_open done in 3794 ms; code=255; res.len=3343 [2025-08-26 13:54:15][352350274828089][4567 ms][DEBUG] END runCmdUntilRes#1 in 3794 ms [2025-08-26 13:54:15][352350274828089][4567 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:55:03][355859838422962][0 ms][INFO] === Request start === [2025-08-26 13:55:03][355859838422962][1 ms][DEBUG] START check_scloud [2025-08-26 13:55:03][355859838422962][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:55:04][355859838422962][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 11904 11216 24377268 184096 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:55:04][355859838422962][313 ms][DEBUG] targetPkg: running [2025-08-26 13:55:04][355859838422962][313 ms][DEBUG] END check_scloud in 313 ms [2025-08-26 13:55:04][355859838422962][313 ms][DEBUG] START check_boot_completed [2025-08-26 13:55:04][355859838422962][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:55:04][355859838422962][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:55:04][355859838422962][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:55:04][355859838422962][454 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 13:55:04][355859838422962][454 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-26 13:55:04][355859838422962][454 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:55:04][355859838422962][454 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859838422962\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3241\"}'\'' -e'"" [2025-08-26 13:55:04][355859838422962][454 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:55:04][355859838422962][454 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859838422962\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3241\"}'\'' -e'"" [2025-08-26 13:55:07][355859838422962][4172 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1fc940ea-43d5-4e98-b1b1-b9c53ede67ab","id":"QR_1fc940ea-43d5-4e98-b1b1-b9c53ede67ab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:55:08][355859838422962][4328 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-08-26 13:55:08][355859838422962][4328 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-26 13:55:08][355859838422962][4328 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:55:10][350013885049782][0 ms][INFO] === Request start === [2025-08-26 13:55:10][350013885049782][1 ms][DEBUG] START check_scloud [2025-08-26 13:55:10][350013885049782][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:55:10][350013885049782][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 11904 11216 24519868 195100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:55:10][350013885049782][256 ms][DEBUG] targetPkg: running [2025-08-26 13:55:10][350013885049782][256 ms][DEBUG] END check_scloud in 255 ms [2025-08-26 13:55:10][350013885049782][256 ms][DEBUG] START check_boot_completed [2025-08-26 13:55:10][350013885049782][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:55:10][350013885049782][301 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 13:55:10][350013885049782][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:55:10][350013885049782][363 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 13:55:10][350013885049782][363 ms][DEBUG] END check_boot_completed in 107 ms [2025-08-26 13:55:10][350013885049782][363 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:55:10][350013885049782][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013885049782\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1031\"}'\'' -e'"" [2025-08-26 13:55:10][350013885049782][364 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:55:10][350013885049782][364 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013885049782\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1031\"}'\'' -e'"" [2025-08-26 13:55:14][350013885049782][4268 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7e5928b3-e635-4e75-8a83-0c8599440e1b","id":"QR_7e5928b3-e635-4e75-8a83-0c8599440e1b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:55:15][350013885049782][4425 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-08-26 13:55:15][350013885049782][4425 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-26 13:55:15][350013885049782][4425 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:56:03][356769545319428][0 ms][INFO] === Request start === [2025-08-26 13:56:03][356769545319428][1 ms][DEBUG] START check_scloud [2025-08-26 13:56:03][356769545319428][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:56:04][356769545319428][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 11904 11216 24625532 207016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:56:04][356769545319428][324 ms][DEBUG] targetPkg: running [2025-08-26 13:56:04][356769545319428][324 ms][DEBUG] END check_scloud in 323 ms [2025-08-26 13:56:04][356769545319428][324 ms][DEBUG] START check_boot_completed [2025-08-26 13:56:04][356769545319428][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:56:04][356769545319428][371 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:56:04][356769545319428][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:56:04][356769545319428][419 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 13:56:04][356769545319428][419 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 13:56:04][356769545319428][419 ms][DEBUG] START check_internet [2025-08-26 13:56:04][356769545319428][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:56:04][356769545319428][870 ms][DEBUG] SU: done in 451 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.502/201.502/201.502/0.000 ms\n [2025-08-26 13:56:04][356769545319428][870 ms][DEBUG] check_internet: online [2025-08-26 13:56:04][356769545319428][870 ms][DEBUG] END check_internet in 452 ms [2025-08-26 13:56:04][356769545319428][870 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:56:04][356769545319428][870 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356769545319428\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5829\"}'\'' -e'"" [2025-08-26 13:56:04][356769545319428][870 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:56:04][356769545319428][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356769545319428\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5829\"}'\'' -e'"" [2025-08-26 13:56:08][356769545319428][4682 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_99d50546-5cb4-4586-bf6f-a430df6df4a8","id":"QR_99d50546-5cb4-4586-bf6f-a430df6df4a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:56:08][356769545319428][4838 ms][DEBUG] proc_open done in 3968 ms; code=255; res.len=3343 [2025-08-26 13:56:08][356769545319428][4838 ms][DEBUG] END runCmdUntilRes#1 in 3968 ms [2025-08-26 13:56:08][356769545319428][4838 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:56:11][356769545383366][1 ms][INFO] === Request start === [2025-08-26 13:56:11][356769545383366][1 ms][DEBUG] START check_scloud [2025-08-26 13:56:11][356769545383366][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:56:11][356769545383366][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 11904 11216 24772100 217640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:56:11][356769545383366][320 ms][DEBUG] targetPkg: running [2025-08-26 13:56:11][356769545383366][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-26 13:56:11][356769545383366][320 ms][DEBUG] START check_boot_completed [2025-08-26 13:56:11][356769545383366][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:56:11][356769545383366][366 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 13:56:11][356769545383366][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:56:11][356769545383366][415 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 13:56:11][356769545383366][415 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 13:56:11][356769545383366][415 ms][DEBUG] START check_internet [2025-08-26 13:56:11][356769545383366][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:56:11][356769545383366][726 ms][DEBUG] SU: done in 310 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.668/200.668/200.668/0.000 ms\n [2025-08-26 13:56:11][356769545383366][726 ms][DEBUG] check_internet: online [2025-08-26 13:56:11][356769545383366][726 ms][DEBUG] END check_internet in 311 ms [2025-08-26 13:56:11][356769545383366][726 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:56:11][356769545383366][726 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356769545383366\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9200\"}'\'' -e'"" [2025-08-26 13:56:11][356769545383366][726 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:56:11][356769545383366][726 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356769545383366\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9200\"}'\'' -e'"" [2025-08-26 13:56:15][356769545383366][4725 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8cd20fcb-3c8f-468e-87b2-d5ca88b9a847","id":"QR_8cd20fcb-3c8f-468e-87b2-d5ca88b9a847","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:56:16][356769545383366][4881 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-26 13:56:16][356769545383366][4881 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-26 13:56:16][356769545383366][4881 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:56:18][352397459641100][0 ms][INFO] === Request start === [2025-08-26 13:56:18][352397459641100][1 ms][DEBUG] START check_scloud [2025-08-26 13:56:18][352397459641100][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:56:18][352397459641100][249 ms][DEBUG] SU: done in 249 ms; outu0_a118 11904 11216 24905668 229516 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:56:18][352397459641100][250 ms][DEBUG] targetPkg: running [2025-08-26 13:56:18][352397459641100][250 ms][DEBUG] END check_scloud in 249 ms [2025-08-26 13:56:18][352397459641100][250 ms][DEBUG] START check_boot_completed [2025-08-26 13:56:18][352397459641100][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:56:18][352397459641100][281 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 13:56:18][352397459641100][281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:56:18][352397459641100][328 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:56:18][352397459641100][328 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 13:56:18][352397459641100][328 ms][DEBUG] START check_internet [2025-08-26 13:56:18][352397459641100][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:56:19][352397459641100][656 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.229/223.229/223.229/0.000 ms\n [2025-08-26 13:56:19][352397459641100][656 ms][DEBUG] check_internet: online [2025-08-26 13:56:19][352397459641100][656 ms][DEBUG] END check_internet in 328 ms [2025-08-26 13:56:19][352397459641100][656 ms][DEBUG] rawBody.length=1148 [2025-08-26 13:56:19][352397459641100][656 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397459641100\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4477\"}'\'' -e'"" [2025-08-26 13:56:19][352397459641100][656 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:56:19][352397459641100][656 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397459641100\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4477\"}'\'' -e'"" [2025-08-26 13:56:22][352397459641100][4155 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a1b3e8df-b36b-47d2-90a8-1d5174413726","id":"QR_a1b3e8df-b36b-47d2-90a8-1d5174413726","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:56:22][352397459641100][4311 ms][DEBUG] proc_open done in 3654 ms; code=255; res.len=3343 [2025-08-26 13:56:22][352397459641100][4311 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-26 13:56:22][352397459641100][4311 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 13:58:04][357576775624990][0 ms][INFO] === Request start === [2025-08-26 13:58:04][357576775624990][1 ms][DEBUG] START check_scloud [2025-08-26 13:58:04][357576775624990][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 13:58:05][357576775624990][334 ms][DEBUG] SU: done in 333 ms; outu0_a118 11904 11216 25037792 222740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 13:58:05][357576775624990][334 ms][DEBUG] targetPkg: running [2025-08-26 13:58:05][357576775624990][334 ms][DEBUG] END check_scloud in 333 ms [2025-08-26 13:58:05][357576775624990][334 ms][DEBUG] START check_boot_completed [2025-08-26 13:58:05][357576775624990][334 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:58:05][357576775624990][379 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 13:58:05][357576775624990][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:58:05][357576775624990][426 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:58:05][357576775624990][426 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-26 13:58:05][357576775624990][426 ms][DEBUG] START check_internet [2025-08-26 13:58:05][357576775624990][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 13:58:05][357576775624990][739 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=208 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 208.997/208.997/208.997/0.000 ms\n [2025-08-26 13:58:05][357576775624990][739 ms][DEBUG] check_internet: online [2025-08-26 13:58:05][357576775624990][739 ms][DEBUG] END check_internet in 313 ms [2025-08-26 13:58:05][357576775624990][739 ms][DEBUG] rawBody.length=1149 [2025-08-26 13:58:05][357576775624990][739 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576775624990\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9327\"}'\'' -e'"" [2025-08-26 13:58:05][357576775624990][739 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 13:58:05][357576775624990][739 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576775624990\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9327\"}'\'' -e'"" [2025-08-26 13:58:09][357576775624990][4972 ms][DEBUG] proc_open done in 4233 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 13:58:09][357576775624990][4972 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-26 13:58:09][357576775624990][4972 ms][WARN] Detected error: Process with pid 11904 either refused to load frida-agent, or terminated during injection [2025-08-26 13:58:09][357576775624990][4972 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 13:58:09][357576775624990][5099 ms][DEBUG] SU: done in 127 ms; out [2025-08-26 13:58:09][357576775624990][5099 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 13:58:09][357576775624990][5099 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 13:58:10][357576775624990][5238 ms][DEBUG] SU: done in 138 ms; out [2025-08-26 13:58:10][357576775624990][5238 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 13:58:10][357576775624990][5394 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 13:58:12][357576775624990][7409 ms][DEBUG] START check_boot_completed [2025-08-26 13:58:12][357576775624990][7409 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 13:58:12][357576775624990][7456 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 13:58:12][357576775624990][7456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 13:58:12][357576775624990][7503 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 13:58:12][357576775624990][7503 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 13:58:15][357576775624990][10517 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 13:58:15][357576775624990][10518 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576775624990\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9327\"}'\'' -e'"" [2025-08-26 13:58:20][357576775624990][15595 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_264b3c00-625a-42ff-ad0a-06c7816c33e7","id":"QR_264b3c00-625a-42ff-ad0a-06c7816c33e7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 13:58:20][357576775624990][15751 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3343 [2025-08-26 13:58:20][357576775624990][15751 ms][DEBUG] END runCmdUntilRes#2 in 5233 ms [2025-08-26 13:58:20][357576775624990][15751 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:00:04][351161648669112][1 ms][INFO] === Request start === [2025-08-26 14:00:04][351161648669112][1 ms][DEBUG] START check_scloud [2025-08-26 14:00:04][351161648669112][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:00:04][351161648669112][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 14640 11216 23673812 128460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:00:04][351161648669112][304 ms][DEBUG] targetPkg: running [2025-08-26 14:00:04][351161648669112][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-26 14:00:04][351161648669112][305 ms][DEBUG] START check_boot_completed [2025-08-26 14:00:04][351161648669112][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:00:04][351161648669112][335 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 14:00:04][351161648669112][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:00:04][351161648669112][382 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:00:04][351161648669112][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 14:00:04][351161648669112][383 ms][DEBUG] START check_internet [2025-08-26 14:00:04][351161648669112][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:00:05][351161648669112][898 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.925/201.925/201.925/0.000 ms\n [2025-08-26 14:00:05][351161648669112][898 ms][DEBUG] check_internet: online [2025-08-26 14:00:05][351161648669112][898 ms][DEBUG] END check_internet in 516 ms [2025-08-26 14:00:05][351161648669112][898 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:00:05][351161648669112][898 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351161648669112\",\"model\":\"SM-A235F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8404\"}'\'' -e'"" [2025-08-26 14:00:05][351161648669112][898 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:00:05][351161648669112][898 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351161648669112\",\"model\":\"SM-A235F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8404\"}'\'' -e'"" [2025-08-26 14:00:09][351161648669112][4975 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_023ee169-6fb5-4ea0-8a52-0d678d212665","id":"QR_023ee169-6fb5-4ea0-8a52-0d678d212665","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:00:09][351161648669112][5131 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-26 14:00:09][351161648669112][5131 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-26 14:00:09][351161648669112][5131 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:03:03][354068195206932][1 ms][INFO] === Request start === [2025-08-26 14:03:03][354068195206932][1 ms][DEBUG] START check_scloud [2025-08-26 14:03:03][354068195206932][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:03:03][354068195206932][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 14640 11216 23805960 139460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:03:03][354068195206932][293 ms][DEBUG] targetPkg: running [2025-08-26 14:03:03][354068195206932][293 ms][DEBUG] END check_scloud in 292 ms [2025-08-26 14:03:03][354068195206932][293 ms][DEBUG] START check_boot_completed [2025-08-26 14:03:03][354068195206932][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:03:03][354068195206932][324 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 14:03:03][354068195206932][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:03:03][354068195206932][371 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:03:03][354068195206932][371 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 14:03:03][354068195206932][371 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:03:03][354068195206932][371 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195206932\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5124\"}'\'' -e'"" [2025-08-26 14:03:03][354068195206932][371 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:03:03][354068195206932][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195206932\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5124\"}'\'' -e'"" [2025-08-26 14:03:07][354068195206932][4276 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4c862092-6715-4fa1-94a4-5c2c3e60ce47","id":"QR_4c862092-6715-4fa1-94a4-5c2c3e60ce47","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:03:08][354068195206932][4432 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-08-26 14:03:08][354068195206932][4432 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-26 14:03:08][354068195206932][4432 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:03:10][351681593729835][0 ms][INFO] === Request start === [2025-08-26 14:03:10][351681593729835][1 ms][DEBUG] START check_scloud [2025-08-26 14:03:10][351681593729835][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:03:10][351681593729835][247 ms][DEBUG] SU: done in 246 ms; outu0_a118 14640 11216 23944400 151292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:03:10][351681593729835][247 ms][DEBUG] targetPkg: running [2025-08-26 14:03:10][351681593729835][247 ms][DEBUG] END check_scloud in 247 ms [2025-08-26 14:03:10][351681593729835][247 ms][DEBUG] START check_boot_completed [2025-08-26 14:03:10][351681593729835][248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:03:10][351681593729835][293 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:03:10][351681593729835][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:03:10][351681593729835][340 ms][DEBUG] SU: done in 46 ms; out [2025-08-26 14:03:10][351681593729835][340 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 14:03:10][351681593729835][340 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:03:10][351681593729835][340 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681593729835\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7600\"}'\'' -e'"" [2025-08-26 14:03:10][351681593729835][340 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:03:10][351681593729835][340 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681593729835\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7600\"}'\'' -e'"" [2025-08-26 14:03:14][351681593729835][3886 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c47432b9-1789-4082-9010-49baa8d2eb53","id":"QR_c47432b9-1789-4082-9010-49baa8d2eb53","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:03:14][351681593729835][4042 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-08-26 14:03:14][351681593729835][4042 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-26 14:03:14][351681593729835][4042 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:03:18][352958241519753][0 ms][INFO] === Request start === [2025-08-26 14:03:18][352958241519753][1 ms][DEBUG] START check_scloud [2025-08-26 14:03:18][352958241519753][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:03:18][352958241519753][320 ms][DEBUG] SU: done in 320 ms; outu0_a118 14640 11216 24123800 162336 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:03:18][352958241519753][320 ms][DEBUG] targetPkg: running [2025-08-26 14:03:18][352958241519753][320 ms][DEBUG] END check_scloud in 320 ms [2025-08-26 14:03:18][352958241519753][321 ms][DEBUG] START check_boot_completed [2025-08-26 14:03:18][352958241519753][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:03:19][352958241519753][367 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:03:19][352958241519753][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:03:19][352958241519753][414 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:03:19][352958241519753][414 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 14:03:19][352958241519753][414 ms][DEBUG] rawBody.length=1158 [2025-08-26 14:03:19][352958241519753][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352958241519753\",\"model\":\"SM-P610\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52R40E2N4X\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"DBT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2532\"}'\'' -e'"" [2025-08-26 14:03:19][352958241519753][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:03:19][352958241519753][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352958241519753\",\"model\":\"SM-P610\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52R40E2N4X\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"DBT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2532\"}'\'' -e'"" [2025-08-26 14:03:23][352958241519753][4960 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c9f66406-ce39-4770-9f95-af7331b507d6","id":"QR_c9f66406-ce39-4770-9f95-af7331b507d6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:03:23][352958241519753][5116 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-08-26 14:03:23][352958241519753][5116 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-08-26 14:03:23][352958241519753][5116 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:03:26][357576771727128][0 ms][INFO] === Request start === [2025-08-26 14:03:26][357576771727128][1 ms][DEBUG] START check_scloud [2025-08-26 14:03:26][357576771727128][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:03:26][357576771727128][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 14640 11216 24237692 174240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:03:26][357576771727128][307 ms][DEBUG] targetPkg: running [2025-08-26 14:03:26][357576771727128][307 ms][DEBUG] END check_scloud in 307 ms [2025-08-26 14:03:26][357576771727128][307 ms][DEBUG] START check_boot_completed [2025-08-26 14:03:26][357576771727128][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:03:26][357576771727128][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:03:26][357576771727128][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:03:26][357576771727128][416 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 14:03:26][357576771727128][416 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-26 14:03:26][357576771727128][416 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:03:26][357576771727128][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576771727128\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4224\"}'\'' -e'"" [2025-08-26 14:03:26][357576771727128][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:03:26][357576771727128][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576771727128\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4224\"}'\'' -e'"" [2025-08-26 14:03:30][357576771727128][3946 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e3cc1f12-611f-4cc1-84c8-565dd2866ca8","id":"QR_e3cc1f12-611f-4cc1-84c8-565dd2866ca8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:03:30][357576771727128][4102 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=3343 [2025-08-26 14:03:30][357576771727128][4102 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-08-26 14:03:30][357576771727128][4102 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:04:03][352060487932251][0 ms][INFO] === Request start === [2025-08-26 14:04:03][352060487932251][1 ms][DEBUG] START check_scloud [2025-08-26 14:04:03][352060487932251][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:04:03][352060487932251][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 14640 11216 24336024 185204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:04:03][352060487932251][265 ms][DEBUG] targetPkg: running [2025-08-26 14:04:03][352060487932251][265 ms][DEBUG] END check_scloud in 264 ms [2025-08-26 14:04:03][352060487932251][265 ms][DEBUG] START check_boot_completed [2025-08-26 14:04:03][352060487932251][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:04:03][352060487932251][310 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 14:04:03][352060487932251][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:04:03][352060487932251][372 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 14:04:03][352060487932251][372 ms][DEBUG] END check_boot_completed in 107 ms [2025-08-26 14:04:03][352060487932251][372 ms][DEBUG] START check_internet [2025-08-26 14:04:03][352060487932251][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:04:03][352060487932251][669 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=156 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 156.339/156.339/156.339/0.000 ms\n [2025-08-26 14:04:03][352060487932251][669 ms][DEBUG] check_internet: online [2025-08-26 14:04:03][352060487932251][669 ms][DEBUG] END check_internet in 296 ms [2025-08-26 14:04:03][352060487932251][669 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:04:03][352060487932251][669 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060487932251\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8834\"}'\'' -e'"" [2025-08-26 14:04:03][352060487932251][669 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:04:03][352060487932251][669 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060487932251\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8834\"}'\'' -e'"" [2025-08-26 14:04:07][352060487932251][4199 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4a09602d-dec5-4ff7-ae66-15ff8e9258d4","id":"QR_4a09602d-dec5-4ff7-ae66-15ff8e9258d4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:04:07][352060487932251][4355 ms][DEBUG] proc_open done in 3687 ms; code=255; res.len=3343 [2025-08-26 14:04:07][352060487932251][4356 ms][DEBUG] END runCmdUntilRes#1 in 3687 ms [2025-08-26 14:04:07][352060487932251][4356 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:05:03][352665189772357][0 ms][INFO] === Request start === [2025-08-26 14:05:03][352665189772357][1 ms][DEBUG] START check_scloud [2025-08-26 14:05:03][352665189772357][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:05:04][352665189772357][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 14640 11216 24443132 196004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:05:04][352665189772357][300 ms][DEBUG] targetPkg: running [2025-08-26 14:05:04][352665189772357][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-26 14:05:04][352665189772357][300 ms][DEBUG] START check_boot_completed [2025-08-26 14:05:04][352665189772357][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:05:04][352665189772357][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:05:04][352665189772357][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:05:04][352665189772357][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:05:04][352665189772357][393 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-26 14:05:04][352665189772357][393 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:05:04][352665189772357][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665189772357\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6071\"}'\'' -e'"" [2025-08-26 14:05:04][352665189772357][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:05:04][352665189772357][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665189772357\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6071\"}'\'' -e'"" [2025-08-26 14:05:08][352665189772357][4392 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1c1487af-33a8-49b3-8a9b-620d09e3b55c","id":"QR_1c1487af-33a8-49b3-8a9b-620d09e3b55c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:05:08][352665189772357][4548 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-26 14:05:08][352665189772357][4548 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-26 14:05:08][352665189772357][4548 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:06:05][355773110113266][1 ms][INFO] === Request start === [2025-08-26 14:06:05][355773110113266][1 ms][DEBUG] START check_scloud [2025-08-26 14:06:05][355773110113266][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:06:05][355773110113266][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 14640 11216 24585632 207836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:06:05][355773110113266][297 ms][DEBUG] targetPkg: running [2025-08-26 14:06:05][355773110113266][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-26 14:06:05][355773110113266][297 ms][DEBUG] START check_boot_completed [2025-08-26 14:06:05][355773110113266][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:06:05][355773110113266][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:06:05][355773110113266][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:06:05][355773110113266][406 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 14:06:05][355773110113266][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 14:06:05][355773110113266][406 ms][DEBUG] START check_internet [2025-08-26 14:06:05][355773110113266][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:06:06][355773110113266][844 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.471/200.471/200.471/0.000 ms\n [2025-08-26 14:06:06][355773110113266][844 ms][DEBUG] check_internet: online [2025-08-26 14:06:06][355773110113266][844 ms][DEBUG] END check_internet in 438 ms [2025-08-26 14:06:06][355773110113266][844 ms][DEBUG] rawBody.length=1149 [2025-08-26 14:06:06][355773110113266][844 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355773110113266\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4288\"}'\'' -e'"" [2025-08-26 14:06:06][355773110113266][844 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:06:06][355773110113266][844 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355773110113266\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4288\"}'\'' -e'"" [2025-08-26 14:06:10][355773110113266][5686 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_592555cc-57f2-49f3-80e5-745871301c65","id":"QR_592555cc-57f2-49f3-80e5-745871301c65","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:06:11][355773110113266][5842 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-08-26 14:06:11][355773110113266][5842 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-08-26 14:06:11][355773110113266][5842 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:06:15][352549938072675][0 ms][INFO] === Request start === [2025-08-26 14:06:15][352549938072675][1 ms][DEBUG] START check_scloud [2025-08-26 14:06:15][352549938072675][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:06:16][352549938072675][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 14640 11216 24709672 218452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:06:16][352549938072675][295 ms][DEBUG] targetPkg: running [2025-08-26 14:06:16][352549938072675][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-26 14:06:16][352549938072675][295 ms][DEBUG] START check_boot_completed [2025-08-26 14:06:16][352549938072675][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:06:16][352549938072675][342 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 14:06:16][352549938072675][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:06:16][352549938072675][435 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 14:06:16][352549938072675][435 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 14:06:16][352549938072675][436 ms][DEBUG] START check_internet [2025-08-26 14:06:16][352549938072675][436 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:06:16][352549938072675][795 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.036/202.036/202.036/0.000 ms\n [2025-08-26 14:06:16][352549938072675][795 ms][DEBUG] check_internet: online [2025-08-26 14:06:16][352549938072675][795 ms][DEBUG] END check_internet in 360 ms [2025-08-26 14:06:16][352549938072675][795 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:06:16][352549938072675][795 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549938072675\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7049\"}'\'' -e'"" [2025-08-26 14:06:16][352549938072675][795 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:06:16][352549938072675][795 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549938072675\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7049\"}'\'' -e'"" [2025-08-26 14:06:21][352549938072675][5137 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_615791d1-c67e-4df7-87a9-2b395dbea467","id":"QR_615791d1-c67e-4df7-87a9-2b395dbea467","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:06:21][352549938072675][5293 ms][DEBUG] proc_open done in 4498 ms; code=255; res.len=3343 [2025-08-26 14:06:21][352549938072675][5294 ms][DEBUG] END runCmdUntilRes#1 in 4498 ms [2025-08-26 14:06:21][352549938072675][5294 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:10:03][352927941318881][1 ms][INFO] === Request start === [2025-08-26 14:10:03][352927941318881][1 ms][DEBUG] START check_scloud [2025-08-26 14:10:03][352927941318881][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:10:03][352927941318881][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 14640 11216 24835816 230208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:10:03][352927941318881][257 ms][DEBUG] targetPkg: running [2025-08-26 14:10:03][352927941318881][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-26 14:10:03][352927941318881][257 ms][DEBUG] START check_boot_completed [2025-08-26 14:10:03][352927941318881][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:10:03][352927941318881][289 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 14:10:03][352927941318881][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:10:03][352927941318881][337 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 14:10:03][352927941318881][337 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 14:10:03][352927941318881][337 ms][DEBUG] START check_internet [2025-08-26 14:10:03][352927941318881][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:10:04][352927941318881][867 ms][DEBUG] SU: done in 530 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.844/202.844/202.844/0.000 ms\n [2025-08-26 14:10:04][352927941318881][867 ms][DEBUG] check_internet: online [2025-08-26 14:10:04][352927941318881][867 ms][DEBUG] END check_internet in 530 ms [2025-08-26 14:10:04][352927941318881][867 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:10:04][352927941318881][867 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927941318881\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9686\"}'\'' -e'"" [2025-08-26 14:10:04][352927941318881][867 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:10:04][352927941318881][867 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927941318881\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9686\"}'\'' -e'"" [2025-08-26 14:10:08][352927941318881][4678 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f63bf09f-53d9-4810-9670-6031c70c44bc","id":"QR_f63bf09f-53d9-4810-9670-6031c70c44bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:10:08][352927941318881][4834 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-26 14:10:08][352927941318881][4834 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-26 14:10:08][352927941318881][4834 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:10:10][350013885373984][0 ms][INFO] === Request start === [2025-08-26 14:10:10][350013885373984][1 ms][DEBUG] START check_scloud [2025-08-26 14:10:10][350013885373984][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:10:11][350013885373984][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 14640 11216 24984432 241168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:10:11][350013885373984][310 ms][DEBUG] targetPkg: running [2025-08-26 14:10:11][350013885373984][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 14:10:11][350013885373984][310 ms][DEBUG] START check_boot_completed [2025-08-26 14:10:11][350013885373984][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:10:11][350013885373984][357 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 14:10:11][350013885373984][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:10:11][350013885373984][419 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 14:10:11][350013885373984][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 14:10:11][350013885373984][419 ms][DEBUG] START check_internet [2025-08-26 14:10:11][350013885373984][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:10:11][350013885373984][732 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.840/201.840/201.840/0.000 ms\n [2025-08-26 14:10:11][350013885373984][732 ms][DEBUG] check_internet: online [2025-08-26 14:10:11][350013885373984][732 ms][DEBUG] END check_internet in 312 ms [2025-08-26 14:10:11][350013885373984][732 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:10:11][350013885373984][732 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013885373984\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7612\"}'\'' -e'"" [2025-08-26 14:10:11][350013885373984][732 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:10:11][350013885373984][732 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013885373984\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7612\"}'\'' -e'"" [2025-08-26 14:10:15][350013885373984][4496 ms][DEBUG] proc_open done in 3764 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 14:10:15][350013885373984][4496 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-08-26 14:10:15][350013885373984][4496 ms][WARN] Detected error: Process with pid 14640 either refused to load frida-agent, or terminated during injection [2025-08-26 14:10:15][350013885373984][4496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 14:10:15][350013885373984][4653 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 14:10:15][350013885373984][4653 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 14:10:15][350013885373984][4653 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 14:10:15][350013885373984][4778 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 14:10:15][350013885373984][4778 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 14:10:15][350013885373984][4934 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 14:10:17][350013885373984][6949 ms][DEBUG] START check_boot_completed [2025-08-26 14:10:17][350013885373984][6949 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:10:17][350013885373984][6996 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 14:10:17][350013885373984][6996 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:10:17][350013885373984][7058 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 14:10:17][350013885373984][7058 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 14:10:20][350013885373984][10073 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 14:10:20][350013885373984][10073 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013885373984\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7612\"}'\'' -e'"" [2025-08-26 14:10:24][350013885373984][13666 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0f388dfc-0dcb-4d2b-ae5a-c936f9360ee1","id":"QR_0f388dfc-0dcb-4d2b-ae5a-c936f9360ee1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:10:24][350013885373984][13822 ms][DEBUG] proc_open done in 3749 ms; code=255; res.len=3343 [2025-08-26 14:10:24][350013885373984][13822 ms][DEBUG] END runCmdUntilRes#2 in 3749 ms [2025-08-26 14:10:24][350013885373984][13822 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:11:04][354730481563942][1 ms][INFO] === Request start === [2025-08-26 14:11:04][354730481563942][1 ms][DEBUG] START check_scloud [2025-08-26 14:11:04][354730481563942][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:11:04][354730481563942][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 16333 11216 23689684 128444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:11:04][354730481563942][313 ms][DEBUG] targetPkg: running [2025-08-26 14:11:04][354730481563942][314 ms][DEBUG] END check_scloud in 312 ms [2025-08-26 14:11:04][354730481563942][314 ms][DEBUG] START check_boot_completed [2025-08-26 14:11:04][354730481563942][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:11:04][354730481563942][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:11:04][354730481563942][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:11:05][354730481563942][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:11:05][354730481563942][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 14:11:05][354730481563942][407 ms][DEBUG] rawBody.length=1149 [2025-08-26 14:11:05][354730481563942][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354730481563942\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5601\"}'\'' -e'"" [2025-08-26 14:11:05][354730481563942][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:11:05][354730481563942][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354730481563942\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5601\"}'\'' -e'"" [2025-08-26 14:11:09][354730481563942][5312 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ce591bd-3210-42c8-b71d-07df2eb7aef9","id":"QR_0ce591bd-3210-42c8-b71d-07df2eb7aef9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:11:10][354730481563942][5468 ms][DEBUG] proc_open done in 5061 ms; code=255; res.len=3343 [2025-08-26 14:11:10][354730481563942][5468 ms][DEBUG] END runCmdUntilRes#1 in 5061 ms [2025-08-26 14:11:10][354730481563942][5468 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:14:03][352351116610578][1 ms][INFO] === Request start === [2025-08-26 14:14:03][352351116610578][1 ms][DEBUG] START check_scloud [2025-08-26 14:14:03][352351116610578][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:14:04][352351116610578][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 16333 11216 23793160 139036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:14:04][352351116610578][308 ms][DEBUG] targetPkg: running [2025-08-26 14:14:04][352351116610578][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-26 14:14:04][352351116610578][308 ms][DEBUG] START check_boot_completed [2025-08-26 14:14:04][352351116610578][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:14:04][352351116610578][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 14:14:04][352351116610578][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:14:04][352351116610578][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:14:04][352351116610578][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 14:14:04][352351116610578][386 ms][DEBUG] START check_internet [2025-08-26 14:14:04][352351116610578][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:14:04][352351116610578][667 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=166 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 166.832/166.832/166.832/0.000 ms\n [2025-08-26 14:14:04][352351116610578][667 ms][DEBUG] check_internet: online [2025-08-26 14:14:04][352351116610578][667 ms][DEBUG] END check_internet in 281 ms [2025-08-26 14:14:04][352351116610578][667 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:14:04][352351116610578][667 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352351116610578\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1941\"}'\'' -e'"" [2025-08-26 14:14:04][352351116610578][667 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:14:04][352351116610578][667 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352351116610578\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1941\"}'\'' -e'"" [2025-08-26 14:14:08][352351116610578][4494 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a4cf84f1-b993-4cc2-bc54-78b76ba64760","id":"QR_a4cf84f1-b993-4cc2-bc54-78b76ba64760","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:14:08][352351116610578][4650 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-26 14:14:08][352351116610578][4650 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-26 14:14:08][352351116610578][4650 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:14:12][350315592555534][0 ms][INFO] === Request start === [2025-08-26 14:14:12][350315592555534][1 ms][DEBUG] START check_scloud [2025-08-26 14:14:12][350315592555534][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:14:12][350315592555534][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 16333 11216 23929552 150852 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:14:12][350315592555534][315 ms][DEBUG] targetPkg: running [2025-08-26 14:14:12][350315592555534][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-26 14:14:12][350315592555534][315 ms][DEBUG] START check_boot_completed [2025-08-26 14:14:12][350315592555534][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:14:12][350315592555534][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 14:14:12][350315592555534][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:14:12][350315592555534][410 ms][DEBUG] SU: done in 49 ms; out [2025-08-26 14:14:12][350315592555534][410 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 14:14:12][350315592555534][410 ms][DEBUG] START check_internet [2025-08-26 14:14:12][350315592555534][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:14:12][350315592555534][676 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=149 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 149.282/149.282/149.282/0.000 ms\n [2025-08-26 14:14:12][350315592555534][676 ms][DEBUG] check_internet: online [2025-08-26 14:14:12][350315592555534][676 ms][DEBUG] END check_internet in 265 ms [2025-08-26 14:14:12][350315592555534][676 ms][DEBUG] rawBody.length=1149 [2025-08-26 14:14:12][350315592555534][676 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350315592555534\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7249\"}'\'' -e'"" [2025-08-26 14:14:12][350315592555534][676 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:14:12][350315592555534][676 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350315592555534\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7249\"}'\'' -e'"" [2025-08-26 14:14:18][350315592555534][5829 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0d1afd2b-186d-483c-91b0-4866c010e3a1","id":"QR_0d1afd2b-186d-483c-91b0-4866c010e3a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:14:18][350315592555534][5985 ms][DEBUG] proc_open done in 5309 ms; code=255; res.len=3343 [2025-08-26 14:14:18][350315592555534][5985 ms][DEBUG] END runCmdUntilRes#1 in 5309 ms [2025-08-26 14:14:18][350315592555534][5985 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:14:24][355820493036646][0 ms][INFO] === Request start === [2025-08-26 14:14:24][355820493036646][1 ms][DEBUG] START check_scloud [2025-08-26 14:14:24][355820493036646][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:14:24][355820493036646][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 16333 11216 24043252 161944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:14:24][355820493036646][312 ms][DEBUG] targetPkg: running [2025-08-26 14:14:24][355820493036646][312 ms][DEBUG] END check_scloud in 312 ms [2025-08-26 14:14:24][355820493036646][312 ms][DEBUG] START check_boot_completed [2025-08-26 14:14:24][355820493036646][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:14:24][355820493036646][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:14:24][355820493036646][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:14:24][355820493036646][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 14:14:24][355820493036646][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 14:14:24][355820493036646][422 ms][DEBUG] START check_internet [2025-08-26 14:14:24][355820493036646][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:14:25][355820493036646][890 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.588/202.588/202.588/0.000 ms\n [2025-08-26 14:14:25][355820493036646][890 ms][DEBUG] check_internet: online [2025-08-26 14:14:25][355820493036646][890 ms][DEBUG] END check_internet in 469 ms [2025-08-26 14:14:25][355820493036646][890 ms][DEBUG] rawBody.length=1158 [2025-08-26 14:14:25][355820493036646][891 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355820493036646\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9PT10WCF7T\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4284\"}'\'' -e'"" [2025-08-26 14:14:25][355820493036646][891 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:14:25][355820493036646][891 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355820493036646\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9PT10WCF7T\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4284\"}'\'' -e'"" [2025-08-26 14:14:28][355820493036646][4561 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_34314848-5135-4366-a42f-2d2e7a7f749b","id":"QR_34314848-5135-4366-a42f-2d2e7a7f749b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:14:29][355820493036646][4717 ms][DEBUG] proc_open done in 3826 ms; code=255; res.len=3343 [2025-08-26 14:14:29][355820493036646][4717 ms][DEBUG] END runCmdUntilRes#1 in 3826 ms [2025-08-26 14:14:29][355820493036646][4717 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:14:31][350178739354652][0 ms][INFO] === Request start === [2025-08-26 14:14:31][350178739354652][1 ms][DEBUG] START check_scloud [2025-08-26 14:14:31][350178739354652][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:14:31][350178739354652][279 ms][DEBUG] SU: done in 279 ms; outu0_a118 16333 11216 24169340 172780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:14:31][350178739354652][279 ms][DEBUG] targetPkg: running [2025-08-26 14:14:31][350178739354652][280 ms][DEBUG] END check_scloud in 279 ms [2025-08-26 14:14:31][350178739354652][280 ms][DEBUG] START check_boot_completed [2025-08-26 14:14:31][350178739354652][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:14:31][350178739354652][326 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 14:14:31][350178739354652][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:14:31][350178739354652][389 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 14:14:31][350178739354652][389 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 14:14:31][350178739354652][389 ms][DEBUG] START check_internet [2025-08-26 14:14:31][350178739354652][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:14:32][350178739354652][654 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=150 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 150.032/150.032/150.032/0.000 ms\n [2025-08-26 14:14:32][350178739354652][654 ms][DEBUG] check_internet: online [2025-08-26 14:14:32][350178739354652][654 ms][DEBUG] END check_internet in 266 ms [2025-08-26 14:14:32][350178739354652][654 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:14:32][350178739354652][655 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178739354652\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9972\"}'\'' -e'"" [2025-08-26 14:14:32][350178739354652][655 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:14:32][350178739354652][655 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350178739354652\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9972\"}'\'' -e'"" [2025-08-26 14:14:35][350178739354652][4200 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f90aba6a-25f5-4e88-9215-f9c013a535ab","id":"QR_f90aba6a-25f5-4e88-9215-f9c013a535ab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:14:35][350178739354652][4356 ms][DEBUG] proc_open done in 3701 ms; code=255; res.len=3343 [2025-08-26 14:14:35][350178739354652][4357 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-26 14:14:35][350178739354652][4357 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:15:03][352294621171845][0 ms][INFO] === Request start === [2025-08-26 14:15:03][352294621171845][1 ms][DEBUG] START check_scloud [2025-08-26 14:15:03][352294621171845][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:15:03][352294621171845][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 16333 11216 24287256 184932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:15:03][352294621171845][317 ms][DEBUG] targetPkg: running [2025-08-26 14:15:03][352294621171845][317 ms][DEBUG] END check_scloud in 317 ms [2025-08-26 14:15:03][352294621171845][317 ms][DEBUG] START check_boot_completed [2025-08-26 14:15:03][352294621171845][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:15:04][352294621171845][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 14:15:04][352294621171845][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:15:04][352294621171845][427 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 14:15:04][352294621171845][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 14:15:04][352294621171845][427 ms][DEBUG] rawBody.length=1147 [2025-08-26 14:15:04][352294621171845][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352294621171845\",\"model\":\"SM-P619\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8650\"}'\'' -e'"" [2025-08-26 14:15:04][352294621171845][427 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:15:04][352294621171845][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352294621171845\",\"model\":\"SM-P619\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8650\"}'\'' -e'"" [2025-08-26 14:15:07][352294621171845][4191 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9cbbed3-05eb-4531-a835-1ee6d77abe7f","id":"QR_d9cbbed3-05eb-4531-a835-1ee6d77abe7f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:15:08][352294621171845][4347 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-08-26 14:15:08][352294621171845][4347 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-08-26 14:15:08][352294621171845][4347 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:15:10][352852950264844][0 ms][INFO] === Request start === [2025-08-26 14:15:10][352852950264844][1 ms][DEBUG] START check_scloud [2025-08-26 14:15:10][352852950264844][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:15:10][352852950264844][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 16333 11216 24417440 196696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:15:10][352852950264844][296 ms][DEBUG] targetPkg: running [2025-08-26 14:15:10][352852950264844][296 ms][DEBUG] END check_scloud in 296 ms [2025-08-26 14:15:10][352852950264844][296 ms][DEBUG] START check_boot_completed [2025-08-26 14:15:10][352852950264844][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:15:11][352852950264844][343 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:15:11][352852950264844][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:15:11][352852950264844][405 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 14:15:11][352852950264844][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 14:15:11][352852950264844][406 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:15:11][352852950264844][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352852950264844\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7786\"}'\'' -e'"" [2025-08-26 14:15:11][352852950264844][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:15:11][352852950264844][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352852950264844\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PKD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7786\"}'\'' -e'"" [2025-08-26 14:15:14][352852950264844][4311 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_411d3caa-f6ab-4eb7-9a4e-8d6735409b5e","id":"QR_411d3caa-f6ab-4eb7-9a4e-8d6735409b5e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:15:15][352852950264844][4467 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-08-26 14:15:15][352852950264844][4467 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-26 14:15:15][352852950264844][4467 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:17:03][351234161836465][1 ms][INFO] === Request start === [2025-08-26 14:17:03][351234161836465][1 ms][DEBUG] START check_scloud [2025-08-26 14:17:03][351234161836465][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:17:03][351234161836465][292 ms][DEBUG] SU: done in 290 ms; outu0_a118 16333 11216 24525024 208024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:17:03][351234161836465][292 ms][DEBUG] targetPkg: running [2025-08-26 14:17:03][351234161836465][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-26 14:17:03][351234161836465][292 ms][DEBUG] START check_boot_completed [2025-08-26 14:17:03][351234161836465][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:17:04][351234161836465][336 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 14:17:04][351234161836465][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:17:04][351234161836465][430 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 14:17:04][351234161836465][430 ms][DEBUG] END check_boot_completed in 138 ms [2025-08-26 14:17:04][351234161836465][430 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:17:04][351234161836465][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234161836465\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8450\"}'\'' -e'"" [2025-08-26 14:17:04][351234161836465][430 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:17:04][351234161836465][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234161836465\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8450\"}'\'' -e'"" [2025-08-26 14:17:07][351234161836465][4226 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_149fca90-912b-4b2a-b025-ce51ca436983","id":"QR_149fca90-912b-4b2a-b025-ce51ca436983","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:17:08][351234161836465][4382 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-08-26 14:17:08][351234161836465][4382 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-26 14:17:08][351234161836465][4382 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:18:03][351681596593501][0 ms][INFO] === Request start === [2025-08-26 14:18:03][351681596593501][1 ms][DEBUG] START check_scloud [2025-08-26 14:18:03][351681596593501][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:18:04][351681596593501][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 16333 11216 24675780 218884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:18:04][351681596593501][303 ms][DEBUG] targetPkg: running [2025-08-26 14:18:04][351681596593501][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 14:18:04][351681596593501][303 ms][DEBUG] START check_boot_completed [2025-08-26 14:18:04][351681596593501][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:18:04][351681596593501][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:18:04][351681596593501][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:18:04][351681596593501][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:18:04][351681596593501][396 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 14:18:04][351681596593501][396 ms][DEBUG] START check_internet [2025-08-26 14:18:04][351681596593501][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:18:04][351681596593501][755 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=233 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 233.190/233.190/233.190/0.000 ms\n [2025-08-26 14:18:04][351681596593501][756 ms][DEBUG] check_internet: online [2025-08-26 14:18:04][351681596593501][756 ms][DEBUG] END check_internet in 359 ms [2025-08-26 14:18:04][351681596593501][756 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:18:04][351681596593501][756 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681596593501\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7898\"}'\'' -e'"" [2025-08-26 14:18:04][351681596593501][756 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:18:04][351681596593501][756 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681596593501\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7898\"}'\'' -e'"" [2025-08-26 14:18:08][351681596593501][4379 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_19ee49f7-cb3a-42e1-a4ea-47787d435109","id":"QR_19ee49f7-cb3a-42e1-a4ea-47787d435109","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:18:08][351681596593501][4536 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-08-26 14:18:08][351681596593501][4536 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-26 14:18:08][351681596593501][4536 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:18:12][354883102716561][0 ms][INFO] === Request start === [2025-08-26 14:18:12][354883102716561][1 ms][DEBUG] START check_scloud [2025-08-26 14:18:12][354883102716561][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:18:12][354883102716561][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 16333 11216 24799948 230964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:18:12][354883102716561][309 ms][DEBUG] targetPkg: running [2025-08-26 14:18:12][354883102716561][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 14:18:12][354883102716561][309 ms][DEBUG] START check_boot_completed [2025-08-26 14:18:12][354883102716561][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:18:12][354883102716561][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:18:12][354883102716561][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:18:12][354883102716561][404 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 14:18:12][354883102716561][404 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 14:18:12][354883102716561][404 ms][DEBUG] START check_internet [2025-08-26 14:18:12][354883102716561][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:18:12][354883102716561][715 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=196 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 196.790/196.790/196.790/0.000 ms\n [2025-08-26 14:18:12][354883102716561][716 ms][DEBUG] check_internet: online [2025-08-26 14:18:12][354883102716561][716 ms][DEBUG] END check_internet in 312 ms [2025-08-26 14:18:12][354883102716561][716 ms][DEBUG] rawBody.length=1149 [2025-08-26 14:18:12][354883102716561][716 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354883102716561\",\"model\":\"SM-A305G\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1538\"}'\'' -e'"" [2025-08-26 14:18:12][354883102716561][716 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:18:12][354883102716561][716 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354883102716561\",\"model\":\"SM-A305G\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1538\"}'\'' -e'"" [2025-08-26 14:18:17][354883102716561][5355 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0377fb87-a1b2-4747-a81d-67bfcf22d755","id":"QR_0377fb87-a1b2-4747-a81d-67bfcf22d755","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:18:17][354883102716561][5511 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-08-26 14:18:17][354883102716561][5511 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-08-26 14:18:17][354883102716561][5511 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:20:03][356908780617126][1 ms][INFO] === Request start === [2025-08-26 14:20:03][356908780617126][1 ms][DEBUG] START check_scloud [2025-08-26 14:20:03][356908780617126][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:20:03][356908780617126][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 16333 11216 24942476 242128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:20:03][356908780617126][303 ms][DEBUG] targetPkg: running [2025-08-26 14:20:03][356908780617126][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 14:20:03][356908780617126][303 ms][DEBUG] START check_boot_completed [2025-08-26 14:20:03][356908780617126][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:20:03][356908780617126][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:20:03][356908780617126][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:20:03][356908780617126][398 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 14:20:03][356908780617126][398 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 14:20:03][356908780617126][398 ms][DEBUG] START check_internet [2025-08-26 14:20:03][356908780617126][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:20:04][356908780617126][819 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=152 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 152.598/152.598/152.598/0.000 ms\n [2025-08-26 14:20:04][356908780617126][819 ms][DEBUG] check_internet: online [2025-08-26 14:20:04][356908780617126][820 ms][DEBUG] END check_internet in 422 ms [2025-08-26 14:20:04][356908780617126][820 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:20:04][356908780617126][820 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356908780617126\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6083\"}'\'' -e'"" [2025-08-26 14:20:04][356908780617126][820 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:20:04][356908780617126][820 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356908780617126\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6083\"}'\'' -e'"" [2025-08-26 14:20:12][356908780617126][8910 ms][DEBUG] proc_open done in 8090 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 14:20:12][356908780617126][8910 ms][DEBUG] END runCmdUntilRes#1 in 8090 ms [2025-08-26 14:20:12][356908780617126][8910 ms][WARN] Detected error: Process with pid 16333 either refused to load frida-agent, or terminated during injection [2025-08-26 14:20:12][356908780617126][8910 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 14:20:12][356908780617126][9113 ms][DEBUG] SU: done in 203 ms; out [2025-08-26 14:20:12][356908780617126][9113 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 14:20:12][356908780617126][9113 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 14:20:12][356908780617126][9332 ms][DEBUG] SU: done in 219 ms; out [2025-08-26 14:20:12][356908780617126][9332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 14:20:13][356908780617126][9769 ms][DEBUG] SU: done in 437 ms; out [2025-08-26 14:20:15][356908780617126][11784 ms][DEBUG] START check_boot_completed [2025-08-26 14:20:15][356908780617126][11784 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:20:15][356908780617126][11831 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 14:20:15][356908780617126][11831 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:20:15][356908780617126][11880 ms][DEBUG] SU: done in 49 ms; out [2025-08-26 14:20:15][356908780617126][11880 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-26 14:20:18][356908780617126][14893 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 14:20:18][356908780617126][14893 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356908780617126\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6083\"}'\'' -e'"" [2025-08-26 14:20:19][356908780617126][16377 ms][DEBUG] proc_open done in 1484 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-26 14:20:19][356908780617126][16377 ms][DEBUG] END runCmdUntilRes#2 in 1484 ms [2025-08-26 14:20:19][356908780617126][16377 ms][WARN] Detected error 2; Reboot the device [2025-08-26 14:20:19][356908780617126][16377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-26 14:20:20][356908780617126][16986 ms][DEBUG] SU: done in 609 ms; out [2025-08-26 14:21:03][356908780617126][0 ms][INFO] === Request start === [2025-08-26 14:21:03][356908780617126][1 ms][DEBUG] START check_scloud [2025-08-26 14:21:03][356908780617126][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:21:03][356908780617126][33 ms][DEBUG] SU: done in 32 ms; out [2025-08-26 14:21:03][356908780617126][33 ms][WARN] targetPkg: not running, restarting [2025-08-26 14:21:03][356908780617126][33 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 14:21:03][356908780617126][64 ms][DEBUG] SU: done in 31 ms; out [2025-08-26 14:21:03][356908780617126][64 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 14:21:03][356908780617126][95 ms][DEBUG] SU: done in 31 ms; out [2025-08-26 14:21:05][356908780617126][2110 ms][DEBUG] END check_scloud in 2110 ms [2025-08-26 14:21:05][356908780617126][2110 ms][DEBUG] START check_boot_completed [2025-08-26 14:21:05][356908780617126][2110 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:21:21][356908780617126][18381 ms][DEBUG] ADB: done in 16271 ms; out [2025-08-26 14:21:21][356908780617126][18381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:21:21][356908780617126][18444 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 14:21:21][356908780617126][18444 ms][DEBUG] END check_boot_completed in 16334 ms [2025-08-26 14:21:21][356908780617126][18444 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:21:21][356908780617126][18444 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356908780617126\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4763\"}'\'' -e'"" [2025-08-26 14:21:21][356908780617126][18444 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:21:21][356908780617126][18444 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356908780617126\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4763\"}'\'' -e'"" [2025-08-26 14:21:33][356908780617126][30453 ms][DEBUG] proc_open done in 12008 ms (timeout); code=0; out.len=0 err.len=11 [2025-08-26 14:21:33][356908780617126][30453 ms][DEBUG] END runCmdUntilRes#1 in 12008 ms [2025-08-26 14:21:33][356908780617126][30453 ms][ERROR] NO RESULT; code=124 out errtimeout 12s [2025-08-26 14:22:03][356908780617126][0 ms][INFO] === Request start === [2025-08-26 14:22:03][356908780617126][1 ms][DEBUG] START check_scloud [2025-08-26 14:22:03][356908780617126][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:22:03][356908780617126][399 ms][DEBUG] SU: done in 398 ms; out [2025-08-26 14:22:03][356908780617126][399 ms][WARN] targetPkg: not running, restarting [2025-08-26 14:22:03][356908780617126][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 14:22:03][356908780617126][539 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 14:22:03][356908780617126][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 14:22:03][356908780617126][805 ms][DEBUG] SU: done in 265 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 14:22:05][356908780617126][2820 ms][DEBUG] END check_scloud in 2819 ms [2025-08-26 14:22:05][356908780617126][2820 ms][DEBUG] START check_boot_completed [2025-08-26 14:22:05][356908780617126][2820 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:22:05][356908780617126][2867 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 14:22:05][356908780617126][2867 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:22:06][356908780617126][3023 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 14:22:06][356908780617126][3023 ms][DEBUG] END check_boot_completed in 203 ms [2025-08-26 14:22:06][356908780617126][3023 ms][DEBUG] START check_internet [2025-08-26 14:22:06][356908780617126][3023 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:22:06][356908780617126][3429 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=107 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 107.928/107.928/107.928/0.000 ms\n [2025-08-26 14:22:06][356908780617126][3430 ms][DEBUG] check_internet: online [2025-08-26 14:22:06][356908780617126][3430 ms][DEBUG] END check_internet in 406 ms [2025-08-26 14:22:06][356908780617126][3430 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:22:06][356908780617126][3430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356908780617126\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6390\"}'\'' -e'"" [2025-08-26 14:22:06][356908780617126][3430 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:22:06][356908780617126][3430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356908780617126\",\"model\":\"SM-A536E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6390\"}'\'' -e'"" [2025-08-26 14:22:13][356908780617126][10209 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e0d30098-ba52-430c-a127-341833dd749e","id":"QR_e0d30098-ba52-430c-a127-341833dd749e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:22:13][356908780617126][10365 ms][DEBUG] proc_open done in 6935 ms; code=255; res.len=3343 [2025-08-26 14:22:13][356908780617126][10365 ms][DEBUG] END runCmdUntilRes#1 in 6935 ms [2025-08-26 14:22:13][356908780617126][10365 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:22:15][356019743095168][1 ms][INFO] === Request start === [2025-08-26 14:22:15][356019743095168][1 ms][DEBUG] START check_scloud [2025-08-26 14:22:15][356019743095168][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:22:16][356019743095168][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 11726 5016 23738420 112772 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:22:16][356019743095168][298 ms][DEBUG] targetPkg: running [2025-08-26 14:22:16][356019743095168][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-26 14:22:16][356019743095168][298 ms][DEBUG] START check_boot_completed [2025-08-26 14:22:16][356019743095168][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:22:16][356019743095168][345 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 14:22:16][356019743095168][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:22:16][356019743095168][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:22:16][356019743095168][392 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 14:22:16][356019743095168][392 ms][DEBUG] START check_internet [2025-08-26 14:22:16][356019743095168][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:22:16][356019743095168][610 ms][DEBUG] SU: done in 219 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=107 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 107.662/107.662/107.662/0.000 ms\n [2025-08-26 14:22:16][356019743095168][611 ms][DEBUG] check_internet: online [2025-08-26 14:22:16][356019743095168][611 ms][DEBUG] END check_internet in 219 ms [2025-08-26 14:22:16][356019743095168][611 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:22:16][356019743095168][611 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019743095168\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3231\"}'\'' -e'"" [2025-08-26 14:22:16][356019743095168][611 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:22:16][356019743095168][611 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019743095168\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3231\"}'\'' -e'"" [2025-08-26 14:22:21][356019743095168][5109 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab8dded4-dc22-4e19-b2cb-0946b001debb","id":"QR_ab8dded4-dc22-4e19-b2cb-0946b001debb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:22:21][356019743095168][5265 ms][DEBUG] proc_open done in 4654 ms; code=255; res.len=3343 [2025-08-26 14:22:21][356019743095168][5265 ms][DEBUG] END runCmdUntilRes#1 in 4654 ms [2025-08-26 14:22:21][356019743095168][5265 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:22:23][355857111468744][0 ms][INFO] === Request start === [2025-08-26 14:22:23][355857111468744][1 ms][DEBUG] START check_scloud [2025-08-26 14:22:23][355857111468744][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:22:23][355857111468744][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 11726 5016 23931144 118716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:22:23][355857111468744][285 ms][DEBUG] targetPkg: running [2025-08-26 14:22:23][355857111468744][285 ms][DEBUG] END check_scloud in 285 ms [2025-08-26 14:22:23][355857111468744][285 ms][DEBUG] START check_boot_completed [2025-08-26 14:22:23][355857111468744][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:22:23][355857111468744][332 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 14:22:23][355857111468744][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:22:24][355857111468744][394 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 14:22:24][355857111468744][394 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 14:22:24][355857111468744][394 ms][DEBUG] START check_internet [2025-08-26 14:22:24][355857111468744][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:22:24][355857111468744][754 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=240 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 240.842/240.842/240.842/0.000 ms\n [2025-08-26 14:22:24][355857111468744][754 ms][DEBUG] check_internet: online [2025-08-26 14:22:24][355857111468744][754 ms][DEBUG] END check_internet in 360 ms [2025-08-26 14:22:24][355857111468744][754 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:22:24][355857111468744][754 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857111468744\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6325\"}'\'' -e'"" [2025-08-26 14:22:24][355857111468744][754 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:22:24][355857111468744][755 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857111468744\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6325\"}'\'' -e'"" [2025-08-26 14:22:28][355857111468744][4518 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2d5c00e5-1007-48d9-97a5-265fb1a609dd","id":"QR_2d5c00e5-1007-48d9-97a5-265fb1a609dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:22:28][355857111468744][4675 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-08-26 14:22:28][355857111468744][4675 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-08-26 14:22:28][355857111468744][4675 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:22:30][354747955341985][0 ms][INFO] === Request start === [2025-08-26 14:22:30][354747955341985][1 ms][DEBUG] START check_scloud [2025-08-26 14:22:30][354747955341985][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:22:31][354747955341985][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 11726 5016 24099272 104936 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:22:31][354747955341985][320 ms][DEBUG] targetPkg: running [2025-08-26 14:22:31][354747955341985][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-26 14:22:31][354747955341985][320 ms][DEBUG] START check_boot_completed [2025-08-26 14:22:31][354747955341985][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:22:31][354747955341985][366 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:22:31][354747955341985][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:22:31][354747955341985][429 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 14:22:31][354747955341985][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 14:22:31][354747955341985][429 ms][DEBUG] START check_internet [2025-08-26 14:22:31][354747955341985][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:22:31][354747955341985][695 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=114 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 114.455/114.455/114.455/0.000 ms\n [2025-08-26 14:22:31][354747955341985][695 ms][DEBUG] check_internet: online [2025-08-26 14:22:31][354747955341985][695 ms][DEBUG] END check_internet in 266 ms [2025-08-26 14:22:31][354747955341985][695 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:22:31][354747955341985][695 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747955341985\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6959\"}'\'' -e'"" [2025-08-26 14:22:31][354747955341985][695 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:22:31][354747955341985][695 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747955341985\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6959\"}'\'' -e'"" [2025-08-26 14:22:36][354747955341985][5146 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d42c9939-c866-424f-90a7-10b7de1e708c","id":"QR_d42c9939-c866-424f-90a7-10b7de1e708c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:22:36][354747955341985][5303 ms][DEBUG] proc_open done in 4608 ms; code=255; res.len=3343 [2025-08-26 14:22:36][354747955341985][5303 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-08-26 14:22:36][354747955341985][5303 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:23:03][352334701672716][0 ms][INFO] === Request start === [2025-08-26 14:23:03][352334701672716][1 ms][DEBUG] START check_scloud [2025-08-26 14:23:03][352334701672716][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:23:04][352334701672716][332 ms][DEBUG] SU: done in 331 ms; outu0_a118 11726 5016 24104180 88104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:23:04][352334701672716][332 ms][DEBUG] targetPkg: running [2025-08-26 14:23:04][352334701672716][333 ms][DEBUG] END check_scloud in 332 ms [2025-08-26 14:23:04][352334701672716][333 ms][DEBUG] START check_boot_completed [2025-08-26 14:23:04][352334701672716][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:23:04][352334701672716][379 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:23:04][352334701672716][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:23:04][352334701672716][473 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 14:23:04][352334701672716][473 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 14:23:04][352334701672716][473 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:23:04][352334701672716][473 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352334701672716\",\"model\":\"SM-F936B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2987\"}'\'' -e'"" [2025-08-26 14:23:04][352334701672716][473 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:23:04][352334701672716][473 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352334701672716\",\"model\":\"SM-F936B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2987\"}'\'' -e'"" [2025-08-26 14:23:09][352334701672716][5425 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67fd08a2-325d-40db-bcc8-9bccb275a981","id":"QR_67fd08a2-325d-40db-bcc8-9bccb275a981","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:23:09][352334701672716][5581 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-08-26 14:23:09][352334701672716][5581 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-08-26 14:23:09][352334701672716][5581 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:26:05][352826832097903][1 ms][INFO] === Request start === [2025-08-26 14:26:05][352826832097903][1 ms][DEBUG] START check_scloud [2025-08-26 14:26:05][352826832097903][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:26:05][352826832097903][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 11726 5016 24192396 99568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:26:05][352826832097903][253 ms][DEBUG] targetPkg: running [2025-08-26 14:26:05][352826832097903][253 ms][DEBUG] END check_scloud in 252 ms [2025-08-26 14:26:05][352826832097903][253 ms][DEBUG] START check_boot_completed [2025-08-26 14:26:05][352826832097903][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:26:05][352826832097903][300 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 14:26:05][352826832097903][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:26:05][352826832097903][378 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 14:26:05][352826832097903][378 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 14:26:05][352826832097903][378 ms][DEBUG] START check_internet [2025-08-26 14:26:05][352826832097903][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:26:05][352826832097903][800 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.988/200.988/200.988/0.000 ms\n [2025-08-26 14:26:05][352826832097903][800 ms][DEBUG] check_internet: online [2025-08-26 14:26:05][352826832097903][800 ms][DEBUG] END check_internet in 422 ms [2025-08-26 14:26:05][352826832097903][800 ms][DEBUG] rawBody.length=1149 [2025-08-26 14:26:05][352826832097903][800 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352826832097903\",\"model\":\"SM-M536B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4404\"}'\'' -e'"" [2025-08-26 14:26:05][352826832097903][800 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:26:05][352826832097903][800 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352826832097903\",\"model\":\"SM-M536B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4404\"}'\'' -e'"" [2025-08-26 14:26:10][352826832097903][5345 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_11a29b83-d292-4109-8e69-05dcd685cac9","id":"QR_11a29b83-d292-4109-8e69-05dcd685cac9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:26:10][352826832097903][5501 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-08-26 14:26:10][352826832097903][5501 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-08-26 14:26:10][352826832097903][5501 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:27:03][351234163032907][0 ms][INFO] === Request start === [2025-08-26 14:27:03][351234163032907][1 ms][DEBUG] START check_scloud [2025-08-26 14:27:03][351234163032907][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:27:04][351234163032907][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 11726 5016 24355440 106924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:27:04][351234163032907][313 ms][DEBUG] targetPkg: running [2025-08-26 14:27:04][351234163032907][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-26 14:27:04][351234163032907][313 ms][DEBUG] START check_boot_completed [2025-08-26 14:27:04][351234163032907][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:27:04][351234163032907][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:27:04][351234163032907][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:27:04][351234163032907][422 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 14:27:04][351234163032907][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 14:27:04][351234163032907][422 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:27:04][351234163032907][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234163032907\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8523\"}'\'' -e'"" [2025-08-26 14:27:04][351234163032907][422 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:27:04][351234163032907][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234163032907\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8523\"}'\'' -e'"" [2025-08-26 14:27:11][351234163032907][7467 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c2ca0119-5a05-416d-b989-c741a5a435a2","id":"QR_c2ca0119-5a05-416d-b989-c741a5a435a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:27:11][351234163032907][7623 ms][DEBUG] proc_open done in 7201 ms; code=255; res.len=3343 [2025-08-26 14:27:11][351234163032907][7623 ms][DEBUG] END runCmdUntilRes#1 in 7201 ms [2025-08-26 14:27:11][351234163032907][7623 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:29:03][359461656029825][1 ms][INFO] === Request start === [2025-08-26 14:29:03][359461656029825][1 ms][DEBUG] START check_scloud [2025-08-26 14:29:03][359461656029825][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:29:04][359461656029825][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 11726 5016 24489684 117924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:29:04][359461656029825][320 ms][DEBUG] targetPkg: running [2025-08-26 14:29:04][359461656029825][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-26 14:29:04][359461656029825][320 ms][DEBUG] START check_boot_completed [2025-08-26 14:29:04][359461656029825][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:29:04][359461656029825][367 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:29:04][359461656029825][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:29:04][359461656029825][414 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:29:04][359461656029825][414 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 14:29:04][359461656029825][414 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:29:04][359461656029825][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359461656029825\",\"model\":\"SM-A525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6108\"}'\'' -e'"" [2025-08-26 14:29:04][359461656029825][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:29:04][359461656029825][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359461656029825\",\"model\":\"SM-A525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6108\"}'\'' -e'"" [2025-08-26 14:29:07][359461656029825][4162 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_793a0b63-3524-44d8-b979-c489577eed73","id":"QR_793a0b63-3524-44d8-b979-c489577eed73","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:29:08][359461656029825][4319 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-26 14:29:08][359461656029825][4319 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-26 14:29:08][359461656029825][4319 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:31:03][352927941099564][1 ms][INFO] === Request start === [2025-08-26 14:31:03][352927941099564][1 ms][DEBUG] START check_scloud [2025-08-26 14:31:03][352927941099564][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:31:03][352927941099564][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 11726 5016 24630008 124740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:31:03][352927941099564][313 ms][DEBUG] targetPkg: running [2025-08-26 14:31:03][352927941099564][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-26 14:31:03][352927941099564][313 ms][DEBUG] START check_boot_completed [2025-08-26 14:31:03][352927941099564][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:31:03][352927941099564][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 14:31:03][352927941099564][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:31:03][352927941099564][422 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 14:31:03][352927941099564][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 14:31:03][352927941099564][422 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:31:03][352927941099564][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927941099564\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3269\"}'\'' -e'"" [2025-08-26 14:31:03][352927941099564][422 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:31:03][352927941099564][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927941099564\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3269\"}'\'' -e'"" [2025-08-26 14:31:07][352927941099564][4093 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f29a2526-d0a3-463c-ab71-2e64f1d50b2a","id":"QR_f29a2526-d0a3-463c-ab71-2e64f1d50b2a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:31:07][352927941099564][4249 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=3343 [2025-08-26 14:31:07][352927941099564][4249 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-26 14:31:07][352927941099564][4249 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:31:09][352397456805930][1 ms][INFO] === Request start === [2025-08-26 14:31:09][352397456805930][1 ms][DEBUG] START check_scloud [2025-08-26 14:31:09][352397456805930][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:31:10][352397456805930][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 11726 5016 24793088 135760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:31:10][352397456805930][271 ms][DEBUG] targetPkg: running [2025-08-26 14:31:10][352397456805930][272 ms][DEBUG] END check_scloud in 271 ms [2025-08-26 14:31:10][352397456805930][272 ms][DEBUG] START check_boot_completed [2025-08-26 14:31:10][352397456805930][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:31:10][352397456805930][318 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:31:10][352397456805930][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:31:10][352397456805930][396 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 14:31:10][352397456805930][396 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 14:31:10][352397456805930][396 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:31:10][352397456805930][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397456805930\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2108\"}'\'' -e'"" [2025-08-26 14:31:10][352397456805930][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:31:10][352397456805930][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397456805930\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2108\"}'\'' -e'"" [2025-08-26 14:31:14][352397456805930][4567 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_04d02045-c76f-4b11-bf2a-4c36db184e89","id":"QR_04d02045-c76f-4b11-bf2a-4c36db184e89","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:31:14][352397456805930][4723 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=3343 [2025-08-26 14:31:14][352397456805930][4723 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-26 14:31:14][352397456805930][4723 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:31:16][354321595397961][0 ms][INFO] === Request start === [2025-08-26 14:31:16][354321595397961][1 ms][DEBUG] START check_scloud [2025-08-26 14:31:16][354321595397961][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:31:17][354321595397961][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 11726 5016 24937740 146852 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:31:17][354321595397961][315 ms][DEBUG] targetPkg: running [2025-08-26 14:31:17][354321595397961][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-26 14:31:17][354321595397961][315 ms][DEBUG] START check_boot_completed [2025-08-26 14:31:17][354321595397961][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:31:17][354321595397961][346 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 14:31:17][354321595397961][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:31:17][354321595397961][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:31:17][354321595397961][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 14:31:17][354321595397961][393 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:31:17][354321595397961][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354321595397961\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4498\"}'\'' -e'"" [2025-08-26 14:31:17][354321595397961][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:31:17][354321595397961][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354321595397961\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4498\"}'\'' -e'"" [2025-08-26 14:31:20][354321595397961][3799 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_416c2f35-26ce-4f09-bf92-8572b6f52594","id":"QR_416c2f35-26ce-4f09-bf92-8572b6f52594","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:31:20][354321595397961][3955 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=3343 [2025-08-26 14:31:20][354321595397961][3955 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-08-26 14:31:20][354321595397961][3955 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:36:03][351632918405825][1 ms][INFO] === Request start === [2025-08-26 14:36:03][351632918405825][1 ms][DEBUG] START check_scloud [2025-08-26 14:36:03][351632918405825][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:36:03][351632918405825][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 11726 5016 25042464 158876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:36:03][351632918405825][305 ms][DEBUG] targetPkg: running [2025-08-26 14:36:03][351632918405825][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 14:36:03][351632918405825][305 ms][DEBUG] START check_boot_completed [2025-08-26 14:36:03][351632918405825][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:36:03][351632918405825][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 14:36:03][351632918405825][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:36:03][351632918405825][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:36:03][351632918405825][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 14:36:03][351632918405825][383 ms][DEBUG] START check_internet [2025-08-26 14:36:03][351632918405825][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:36:04][351632918405825][836 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.249/202.249/202.249/0.000 ms\n [2025-08-26 14:36:04][351632918405825][836 ms][DEBUG] check_internet: online [2025-08-26 14:36:04][351632918405825][836 ms][DEBUG] END check_internet in 453 ms [2025-08-26 14:36:04][351632918405825][836 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:36:04][351632918405825][836 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632918405825\",\"model\":\"SM-A136B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7100\"}'\'' -e'"" [2025-08-26 14:36:04][351632918405825][836 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:36:04][351632918405825][836 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632918405825\",\"model\":\"SM-A136B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7100\"}'\'' -e'"" [2025-08-26 14:36:08][351632918405825][5210 ms][DEBUG] proc_open done in 4373 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 14:36:08][351632918405825][5210 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-26 14:36:08][351632918405825][5210 ms][WARN] Detected error: Process with pid 11726 either refused to load frida-agent, or terminated during injection [2025-08-26 14:36:08][351632918405825][5210 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 14:36:08][351632918405825][5336 ms][DEBUG] SU: done in 126 ms; out [2025-08-26 14:36:08][351632918405825][5336 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 14:36:08][351632918405825][5336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 14:36:08][351632918405825][5460 ms][DEBUG] SU: done in 124 ms; out [2025-08-26 14:36:08][351632918405825][5460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 14:36:09][351632918405825][5616 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 14:36:11][351632918405825][7631 ms][DEBUG] START check_boot_completed [2025-08-26 14:36:11][351632918405825][7631 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:36:11][351632918405825][7678 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 14:36:11][351632918405825][7678 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:36:11][351632918405825][7725 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:36:11][351632918405825][7725 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 14:36:14][351632918405825][10740 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 14:36:14][351632918405825][10740 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351632918405825\",\"model\":\"SM-A136B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7100\"}'\'' -e'"" [2025-08-26 14:36:18][351632918405825][14676 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2e87f729-55f2-45a1-a8fe-5d15b05f3bbd","id":"QR_2e87f729-55f2-45a1-a8fe-5d15b05f3bbd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:36:18][351632918405825][14833 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-08-26 14:36:18][351632918405825][14833 ms][DEBUG] END runCmdUntilRes#2 in 4093 ms [2025-08-26 14:36:18][351632918405825][14833 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:37:04][353335862271775][1 ms][INFO] === Request start === [2025-08-26 14:37:04][353335862271775][1 ms][DEBUG] START check_scloud [2025-08-26 14:37:04][353335862271775][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:37:04][353335862271775][242 ms][DEBUG] SU: done in 241 ms; outu0_a118 18812 5016 23695280 127464 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:37:04][353335862271775][242 ms][DEBUG] targetPkg: running [2025-08-26 14:37:04][353335862271775][242 ms][DEBUG] END check_scloud in 241 ms [2025-08-26 14:37:04][353335862271775][242 ms][DEBUG] START check_boot_completed [2025-08-26 14:37:04][353335862271775][242 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:37:04][353335862271775][289 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:37:04][353335862271775][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:37:04][353335862271775][337 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 14:37:04][353335862271775][337 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 14:37:04][353335862271775][337 ms][DEBUG] rawBody.length=1149 [2025-08-26 14:37:04][353335862271775][337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353335862271775\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6273\"}'\'' -e'"" [2025-08-26 14:37:04][353335862271775][337 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:37:04][353335862271775][337 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353335862271775\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6273\"}'\'' -e'"" [2025-08-26 14:37:09][353335862271775][4866 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_25db8951-a055-4a9b-a595-7d0f5d53c789","id":"QR_25db8951-a055-4a9b-a595-7d0f5d53c789","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:37:09][353335862271775][5022 ms][DEBUG] proc_open done in 4684 ms; code=255; res.len=3343 [2025-08-26 14:37:09][353335862271775][5022 ms][DEBUG] END runCmdUntilRes#1 in 4684 ms [2025-08-26 14:37:09][353335862271775][5022 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:38:02][352053267227117][0 ms][INFO] === Request start === [2025-08-26 14:38:02][352053267227117][1 ms][DEBUG] START check_scloud [2025-08-26 14:38:02][352053267227117][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:38:02][352053267227117][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 18812 5016 23854100 137868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:38:02][352053267227117][307 ms][DEBUG] targetPkg: running [2025-08-26 14:38:02][352053267227117][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 14:38:02][352053267227117][307 ms][DEBUG] START check_boot_completed [2025-08-26 14:38:02][352053267227117][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:38:02][352053267227117][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 14:38:02][352053267227117][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:38:02][352053267227117][416 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 14:38:02][352053267227117][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 14:38:02][352053267227117][416 ms][DEBUG] START check_internet [2025-08-26 14:38:02][352053267227117][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:38:03][352053267227117][697 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=170 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 170.044/170.044/170.044/0.000 ms\n [2025-08-26 14:38:03][352053267227117][697 ms][DEBUG] check_internet: online [2025-08-26 14:38:03][352053267227117][698 ms][DEBUG] END check_internet in 281 ms [2025-08-26 14:38:03][352053267227117][698 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:38:03][352053267227117][698 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053267227117\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3308\"}'\'' -e'"" [2025-08-26 14:38:03][352053267227117][698 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:38:03][352053267227117][698 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352053267227117\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3308\"}'\'' -e'"" [2025-08-26 14:38:06][352053267227117][4290 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 14:38:06][352053267227117][4446 ms][DEBUG] proc_open done in 3749 ms; code=255; res.len=107 [2025-08-26 14:38:06][352053267227117][4447 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-08-26 14:38:06][352053267227117][4447 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 14:38:07][][0 ms][INFO] === Request start === [2025-08-26 14:38:07][][1 ms][DEBUG] START check_scloud [2025-08-26 14:38:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:38:07][][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 18812 5016 24011164 149644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:38:07][][262 ms][DEBUG] targetPkg: running [2025-08-26 14:38:07][][262 ms][DEBUG] END check_scloud in 262 ms [2025-08-26 14:38:07][][262 ms][DEBUG] START check_boot_completed [2025-08-26 14:38:07][][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:38:07][][308 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:38:07][][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:38:07][][355 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:38:07][][355 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 14:38:07][][356 ms][DEBUG] START check_internet [2025-08-26 14:38:07][][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:38:07][][590 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=114 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 114.659/114.659/114.659/0.000 ms\n [2025-08-26 14:38:07][][590 ms][DEBUG] check_internet: online [2025-08-26 14:38:07][][590 ms][DEBUG] END check_internet in 234 ms [2025-08-26 14:38:07][][590 ms][DEBUG] rawBody.length=1129 [2025-08-26 14:38:07][][590 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX71CRKXM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8610\"}'\'' -e'"" [2025-08-26 14:38:07][][590 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:38:07][][590 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX71CRKXM\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8610\"}'\'' -e'"" [2025-08-26 14:38:10][][3698 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 14:38:11][][3854 ms][DEBUG] proc_open done in 3265 ms; code=255; res.len=107 [2025-08-26 14:38:11][][3854 ms][DEBUG] END runCmdUntilRes#1 in 3265 ms [2025-08-26 14:38:11][][3854 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 14:39:02][354529382290252][0 ms][INFO] === Request start === [2025-08-26 14:39:02][354529382290252][0 ms][DEBUG] START check_scloud [2025-08-26 14:39:02][354529382290252][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:39:02][354529382290252][246 ms][DEBUG] SU: done in 246 ms; outu0_a118 18812 5016 24162668 160616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:39:02][354529382290252][246 ms][DEBUG] targetPkg: running [2025-08-26 14:39:02][354529382290252][246 ms][DEBUG] END check_scloud in 246 ms [2025-08-26 14:39:02][354529382290252][246 ms][DEBUG] START check_boot_completed [2025-08-26 14:39:02][354529382290252][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:39:02][354529382290252][278 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 14:39:02][354529382290252][278 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:39:02][354529382290252][324 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:39:02][354529382290252][325 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 14:39:02][354529382290252][325 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:39:02][354529382290252][325 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529382290252\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5683\"}'\'' -e'"" [2025-08-26 14:39:02][354529382290252][325 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:39:02][354529382290252][325 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529382290252\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5683\"}'\'' -e'"" [2025-08-26 14:39:05][354529382290252][3465 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-26 14:39:05][354529382290252][3621 ms][DEBUG] proc_open done in 3296 ms; code=255; res.len=115 [2025-08-26 14:39:05][354529382290252][3621 ms][DEBUG] END runCmdUntilRes#1 in 3296 ms [2025-08-26 14:39:05][354529382290252][3621 ms][INFO] SUCCESS response from frida (len=115) [2025-08-26 14:39:06][][1 ms][INFO] === Request start === [2025-08-26 14:39:06][][1 ms][DEBUG] START check_scloud [2025-08-26 14:39:06][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:39:06][][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 18812 5016 24342004 171780 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:39:06][][301 ms][DEBUG] targetPkg: running [2025-08-26 14:39:06][][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 14:39:06][][301 ms][DEBUG] START check_boot_completed [2025-08-26 14:39:06][][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:39:06][][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 14:39:06][][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:39:06][][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 14:39:06][][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 14:39:06][][411 ms][DEBUG] rawBody.length=1129 [2025-08-26 14:39:06][][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8TA02Y2NF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7127\"}'\'' -e'"" [2025-08-26 14:39:06][][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:39:06][][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8TA02Y2NF\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7127\"}'\'' -e'"" [2025-08-26 14:39:09][][3831 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 14:39:10][][3988 ms][DEBUG] proc_open done in 3576 ms; code=255; res.len=107 [2025-08-26 14:39:10][][3988 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-08-26 14:39:10][][3988 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 14:39:11][356080122934294][0 ms][INFO] === Request start === [2025-08-26 14:39:11][356080122934294][1 ms][DEBUG] START check_scloud [2025-08-26 14:39:11][356080122934294][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:39:12][356080122934294][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 18812 5016 24509180 183632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:39:12][356080122934294][254 ms][DEBUG] targetPkg: running [2025-08-26 14:39:12][356080122934294][254 ms][DEBUG] END check_scloud in 254 ms [2025-08-26 14:39:12][356080122934294][254 ms][DEBUG] START check_boot_completed [2025-08-26 14:39:12][356080122934294][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:39:12][356080122934294][301 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:39:12][356080122934294][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:39:12][356080122934294][347 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:39:12][356080122934294][347 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 14:39:12][356080122934294][347 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:39:12][356080122934294][348 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356080122934294\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2781\"}'\'' -e'"" [2025-08-26 14:39:12][356080122934294][348 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:39:12][356080122934294][348 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356080122934294\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2781\"}'\'' -e'"" [2025-08-26 14:39:15][356080122934294][4128 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_169b18a5-cdff-4dce-bc53-1ca7a2529da1","id":"QR_169b18a5-cdff-4dce-bc53-1ca7a2529da1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:39:16][356080122934294][4284 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-26 14:39:16][356080122934294][4284 ms][DEBUG] END runCmdUntilRes#1 in 3937 ms [2025-08-26 14:39:16][356080122934294][4284 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:39:17][357576778304871][0 ms][INFO] === Request start === [2025-08-26 14:39:17][357576778304871][1 ms][DEBUG] START check_scloud [2025-08-26 14:39:17][357576778304871][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:39:17][357576778304871][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 18812 5016 24629252 194484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:39:17][357576778304871][255 ms][DEBUG] targetPkg: running [2025-08-26 14:39:17][357576778304871][255 ms][DEBUG] END check_scloud in 254 ms [2025-08-26 14:39:17][357576778304871][255 ms][DEBUG] START check_boot_completed [2025-08-26 14:39:17][357576778304871][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:39:17][357576778304871][301 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:39:17][357576778304871][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:39:18][357576778304871][364 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 14:39:18][357576778304871][364 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 14:39:18][357576778304871][364 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:39:18][357576778304871][364 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576778304871\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5782\"}'\'' -e'"" [2025-08-26 14:39:18][357576778304871][364 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:39:18][357576778304871][364 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576778304871\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5782\"}'\'' -e'"" [2025-08-26 14:39:21][357576778304871][3863 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c8ac79f2-eee4-4206-9d4e-d140c5442fb7","id":"QR_c8ac79f2-eee4-4206-9d4e-d140c5442fb7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:39:21][357576778304871][4019 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=3343 [2025-08-26 14:39:21][357576778304871][4019 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-26 14:39:21][357576778304871][4019 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:40:03][357435840750662][0 ms][INFO] === Request start === [2025-08-26 14:40:03][357435840750662][1 ms][DEBUG] START check_scloud [2025-08-26 14:40:03][357435840750662][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:40:04][357435840750662][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 18812 5016 24712188 206660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:40:04][357435840750662][301 ms][DEBUG] targetPkg: running [2025-08-26 14:40:04][357435840750662][301 ms][DEBUG] END check_scloud in 301 ms [2025-08-26 14:40:04][357435840750662][302 ms][DEBUG] START check_boot_completed [2025-08-26 14:40:04][357435840750662][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:40:04][357435840750662][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:40:04][357435840750662][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:40:04][357435840750662][410 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 14:40:04][357435840750662][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 14:40:04][357435840750662][410 ms][DEBUG] START check_internet [2025-08-26 14:40:04][357435840750662][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:40:04][357435840750662][894 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.706/200.706/200.706/0.000 ms\n [2025-08-26 14:40:04][357435840750662][894 ms][DEBUG] check_internet: online [2025-08-26 14:40:04][357435840750662][894 ms][DEBUG] END check_internet in 484 ms [2025-08-26 14:40:04][357435840750662][895 ms][DEBUG] rawBody.length=1149 [2025-08-26 14:40:04][357435840750662][895 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840750662\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6508\"}'\'' -e'"" [2025-08-26 14:40:04][357435840750662][895 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:40:04][357435840750662][895 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840750662\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6508\"}'\'' -e'"" [2025-08-26 14:40:08][357435840750662][4846 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-26 14:40:08][357435840750662][5003 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=115 [2025-08-26 14:40:08][357435840750662][5003 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-26 14:40:08][357435840750662][5003 ms][INFO] SUCCESS response from frida (len=115) [2025-08-26 14:40:09][][1 ms][INFO] === Request start === [2025-08-26 14:40:09][][1 ms][DEBUG] START check_scloud [2025-08-26 14:40:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:40:09][][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 18812 5016 24867076 218364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:40:09][][314 ms][DEBUG] targetPkg: running [2025-08-26 14:40:09][][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-26 14:40:09][][314 ms][DEBUG] START check_boot_completed [2025-08-26 14:40:09][][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:40:09][][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 14:40:09][][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:40:09][][423 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 14:40:09][][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 14:40:09][][423 ms][DEBUG] START check_internet [2025-08-26 14:40:09][][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:40:09][][673 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=114 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 114.525/114.525/114.525/0.000 ms\n [2025-08-26 14:40:09][][673 ms][DEBUG] check_internet: online [2025-08-26 14:40:09][][673 ms][DEBUG] END check_internet in 250 ms [2025-08-26 14:40:09][][673 ms][DEBUG] rawBody.length=1130 [2025-08-26 14:40:09][][673 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCX3029RBE\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9657\"}'\'' -e'"" [2025-08-26 14:40:09][][673 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:40:09][][673 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCX3029RBE\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9657\"}'\'' -e'"" [2025-08-26 14:40:13][][4328 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 14:40:13][][4484 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=107 [2025-08-26 14:40:13][][4484 ms][DEBUG] END runCmdUntilRes#1 in 3812 ms [2025-08-26 14:40:13][][4484 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 14:40:15][350040124921877][0 ms][INFO] === Request start === [2025-08-26 14:40:15][350040124921877][1 ms][DEBUG] START check_scloud [2025-08-26 14:40:15][350040124921877][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:40:15][350040124921877][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 18812 5016 25045900 218672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:40:15][350040124921877][310 ms][DEBUG] targetPkg: running [2025-08-26 14:40:15][350040124921877][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 14:40:15][350040124921877][310 ms][DEBUG] START check_boot_completed [2025-08-26 14:40:15][350040124921877][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:40:15][350040124921877][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:40:15][350040124921877][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:40:15][350040124921877][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:40:15][350040124921877][403 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 14:40:15][350040124921877][403 ms][DEBUG] START check_internet [2025-08-26 14:40:15][350040124921877][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:40:16][350040124921877][638 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=115 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 115.726/115.726/115.726/0.000 ms\n [2025-08-26 14:40:16][350040124921877][638 ms][DEBUG] check_internet: online [2025-08-26 14:40:16][350040124921877][638 ms][DEBUG] END check_internet in 234 ms [2025-08-26 14:40:16][350040124921877][638 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:40:16][350040124921877][638 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350040124921877\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2278\"}'\'' -e'"" [2025-08-26 14:40:16][350040124921877][638 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:40:16][350040124921877][638 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350040124921877\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2278\"}'\'' -e'"" [2025-08-26 14:40:19][350040124921877][4308 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b9a9034d-3321-40d0-8b73-9a40711b9a76","id":"QR_b9a9034d-3321-40d0-8b73-9a40711b9a76","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:40:19][350040124921877][4465 ms][DEBUG] proc_open done in 3826 ms; code=255; res.len=3343 [2025-08-26 14:40:19][350040124921877][4465 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-26 14:40:19][350040124921877][4465 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:42:04][358558826685617][1 ms][INFO] === Request start === [2025-08-26 14:42:04][358558826685617][1 ms][DEBUG] START check_scloud [2025-08-26 14:42:04][358558826685617][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:42:05][358558826685617][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 18812 5016 25173928 230672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:42:05][358558826685617][261 ms][DEBUG] targetPkg: running [2025-08-26 14:42:05][358558826685617][261 ms][DEBUG] END check_scloud in 260 ms [2025-08-26 14:42:05][358558826685617][261 ms][DEBUG] START check_boot_completed [2025-08-26 14:42:05][358558826685617][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:42:05][358558826685617][323 ms][DEBUG] ADB: done in 62 ms; out [2025-08-26 14:42:05][358558826685617][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:42:05][358558826685617][371 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 14:42:05][358558826685617][371 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 14:42:05][358558826685617][371 ms][DEBUG] START check_internet [2025-08-26 14:42:05][358558826685617][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:42:05][358558826685617][636 ms][DEBUG] SU: done in 264 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=169 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 169.027/169.027/169.027/0.000 ms\n [2025-08-26 14:42:05][358558826685617][636 ms][DEBUG] check_internet: online [2025-08-26 14:42:05][358558826685617][636 ms][DEBUG] END check_internet in 264 ms [2025-08-26 14:42:05][358558826685617][636 ms][DEBUG] rawBody.length=1149 [2025-08-26 14:42:05][358558826685617][636 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558826685617\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7159\"}'\'' -e'"" [2025-08-26 14:42:05][358558826685617][636 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:42:05][358558826685617][636 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558826685617\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7159\"}'\'' -e'"" [2025-08-26 14:42:09][358558826685617][4416 ms][DEBUG] proc_open done in 3781 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 14:42:09][358558826685617][4416 ms][DEBUG] END runCmdUntilRes#1 in 3781 ms [2025-08-26 14:42:09][358558826685617][4416 ms][WARN] Detected error: Process with pid 18812 either refused to load frida-agent, or terminated during injection [2025-08-26 14:42:09][358558826685617][4417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 14:42:09][358558826685617][4558 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 14:42:09][358558826685617][4558 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 14:42:09][358558826685617][4558 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 14:42:09][358558826685617][4682 ms][DEBUG] SU: done in 124 ms; out [2025-08-26 14:42:09][358558826685617][4682 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 14:42:09][358558826685617][4869 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 14:42:11][358558826685617][6884 ms][DEBUG] START check_boot_completed [2025-08-26 14:42:11][358558826685617][6884 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:42:11][358558826685617][6931 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 14:42:11][358558826685617][6931 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:42:11][358558826685617][7025 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 14:42:11][358558826685617][7025 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-26 14:42:14][358558826685617][10039 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 14:42:14][358558826685617][10040 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558826685617\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7159\"}'\'' -e'"" [2025-08-26 14:42:19][358558826685617][15007 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4167a44e-493d-418f-9b7e-61f787e33787","id":"QR_4167a44e-493d-418f-9b7e-61f787e33787","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:42:20][358558826685617][15163 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-08-26 14:42:20][358558826685617][15164 ms][DEBUG] END runCmdUntilRes#2 in 5124 ms [2025-08-26 14:42:20][358558826685617][15164 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:43:03][350300270500804][1 ms][INFO] === Request start === [2025-08-26 14:43:03][350300270500804][1 ms][DEBUG] START check_scloud [2025-08-26 14:43:03][350300270500804][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:43:03][350300270500804][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 20321 5016 23712660 127168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:43:03][350300270500804][246 ms][DEBUG] targetPkg: running [2025-08-26 14:43:03][350300270500804][246 ms][DEBUG] END check_scloud in 245 ms [2025-08-26 14:43:03][350300270500804][246 ms][DEBUG] START check_boot_completed [2025-08-26 14:43:03][350300270500804][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:43:03][350300270500804][292 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:43:03][350300270500804][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:43:03][350300270500804][339 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:43:03][350300270500804][339 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 14:43:03][350300270500804][339 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:43:03][350300270500804][339 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350300270500804\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1458\"}'\'' -e'"" [2025-08-26 14:43:03][350300270500804][339 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:43:03][350300270500804][339 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350300270500804\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1458\"}'\'' -e'"" [2025-08-26 14:43:07][350300270500804][3994 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a07ab6b1-8f01-4c4b-9b90-09c449da01cb","id":"QR_a07ab6b1-8f01-4c4b-9b90-09c449da01cb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:43:07][350300270500804][4150 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-26 14:43:07][350300270500804][4151 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-26 14:43:07][350300270500804][4151 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:44:03][352953553591474][0 ms][INFO] === Request start === [2025-08-26 14:44:03][352953553591474][1 ms][DEBUG] START check_scloud [2025-08-26 14:44:03][352953553591474][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:44:03][352953553591474][269 ms][DEBUG] SU: done in 269 ms; outu0_a118 20321 5016 23853048 137632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:44:03][352953553591474][270 ms][DEBUG] targetPkg: running [2025-08-26 14:44:03][352953553591474][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-26 14:44:03][352953553591474][270 ms][DEBUG] START check_boot_completed [2025-08-26 14:44:03][352953553591474][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:44:03][352953553591474][316 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 14:44:03][352953553591474][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:44:03][352953553591474][394 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 14:44:03][352953553591474][394 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 14:44:03][352953553591474][394 ms][DEBUG] START check_internet [2025-08-26 14:44:03][352953553591474][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:44:03][352953553591474][613 ms][DEBUG] SU: done in 219 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=114 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 114.780/114.780/114.780/0.000 ms\n [2025-08-26 14:44:03][352953553591474][613 ms][DEBUG] check_internet: online [2025-08-26 14:44:03][352953553591474][613 ms][DEBUG] END check_internet in 219 ms [2025-08-26 14:44:03][352953553591474][613 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:44:03][352953553591474][613 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352953553591474\",\"model\":\"SM-A736B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9975\"}'\'' -e'"" [2025-08-26 14:44:03][352953553591474][613 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:44:03][352953553591474][614 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352953553591474\",\"model\":\"SM-A736B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9975\"}'\'' -e'"" [2025-08-26 14:44:07][352953553591474][4284 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f502d628-faa2-44f8-bbf9-fe04f9560b2d","id":"QR_f502d628-faa2-44f8-bbf9-fe04f9560b2d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:44:07][352953553591474][4440 ms][DEBUG] proc_open done in 3826 ms; code=255; res.len=3343 [2025-08-26 14:44:07][352953553591474][4440 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-26 14:44:07][352953553591474][4440 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:46:03][350565120530710][1 ms][INFO] === Request start === [2025-08-26 14:46:03][350565120530710][1 ms][DEBUG] START check_scloud [2025-08-26 14:46:03][350565120530710][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:46:03][350565120530710][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 20321 5016 23973988 149920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:46:03][350565120530710][297 ms][DEBUG] targetPkg: running [2025-08-26 14:46:03][350565120530710][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-26 14:46:03][350565120530710][297 ms][DEBUG] START check_boot_completed [2025-08-26 14:46:03][350565120530710][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:46:03][350565120530710][328 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 14:46:03][350565120530710][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:46:03][350565120530710][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:46:03][350565120530710][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 14:46:03][350565120530710][375 ms][DEBUG] START check_internet [2025-08-26 14:46:03][350565120530710][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:46:04][350565120530710][781 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.954/201.954/201.954/0.000 ms\n [2025-08-26 14:46:04][350565120530710][781 ms][DEBUG] check_internet: online [2025-08-26 14:46:04][350565120530710][781 ms][DEBUG] END check_internet in 406 ms [2025-08-26 14:46:04][350565120530710][781 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:46:04][350565120530710][781 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350565120530710\",\"model\":\"SM-M225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4034\"}'\'' -e'"" [2025-08-26 14:46:04][350565120530710][781 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:46:04][350565120530710][781 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350565120530710\",\"model\":\"SM-M225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4034\"}'\'' -e'"" [2025-08-26 14:46:07][350565120530710][4437 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2a4db6fd-9d09-4f59-b0da-e9d8859a1dbd","id":"QR_2a4db6fd-9d09-4f59-b0da-e9d8859a1dbd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:46:07][350565120530710][4593 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-26 14:46:07][350565120530710][4593 ms][DEBUG] END runCmdUntilRes#1 in 3812 ms [2025-08-26 14:46:07][350565120530710][4593 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:48:03][352631698460249][1 ms][INFO] === Request start === [2025-08-26 14:48:03][352631698460249][1 ms][DEBUG] START check_scloud [2025-08-26 14:48:03][352631698460249][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:48:03][352631698460249][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 20321 5016 24079624 161036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:48:03][352631698460249][315 ms][DEBUG] targetPkg: running [2025-08-26 14:48:03][352631698460249][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-26 14:48:03][352631698460249][315 ms][DEBUG] START check_boot_completed [2025-08-26 14:48:03][352631698460249][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:48:03][352631698460249][346 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 14:48:03][352631698460249][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:48:03][352631698460249][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:48:03][352631698460249][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 14:48:03][352631698460249][393 ms][DEBUG] START check_internet [2025-08-26 14:48:03][352631698460249][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:48:04][352631698460249][737 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=222 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 222.664/222.664/222.664/0.000 ms\n [2025-08-26 14:48:04][352631698460249][737 ms][DEBUG] check_internet: online [2025-08-26 14:48:04][352631698460249][737 ms][DEBUG] END check_internet in 344 ms [2025-08-26 14:48:04][352631698460249][737 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:48:04][352631698460249][737 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352631698460249\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6134\"}'\'' -e'"" [2025-08-26 14:48:04][352631698460249][738 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:48:04][352631698460249][738 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352631698460249\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6134\"}'\'' -e'"" [2025-08-26 14:48:08][352631698460249][4751 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_abc9ae98-30d5-4439-9e33-b3f612aa9e35","id":"QR_abc9ae98-30d5-4439-9e33-b3f612aa9e35","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:48:08][352631698460249][4908 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-26 14:48:08][352631698460249][4908 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-26 14:48:08][352631698460249][4908 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:51:05][353335865402559][1 ms][INFO] === Request start === [2025-08-26 14:51:05][353335865402559][1 ms][DEBUG] START check_scloud [2025-08-26 14:51:05][353335865402559][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:51:05][353335865402559][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 20321 5016 24207148 172320 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:51:05][353335865402559][303 ms][DEBUG] targetPkg: running [2025-08-26 14:51:05][353335865402559][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 14:51:05][353335865402559][303 ms][DEBUG] START check_boot_completed [2025-08-26 14:51:05][353335865402559][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:51:05][353335865402559][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 14:51:05][353335865402559][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:51:05][353335865402559][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:51:05][353335865402559][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 14:51:05][353335865402559][381 ms][DEBUG] rawBody.length=1149 [2025-08-26 14:51:05][353335865402559][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353335865402559\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2875\"}'\'' -e'"" [2025-08-26 14:51:05][353335865402559][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:51:05][353335865402559][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353335865402559\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2875\"}'\'' -e'"" [2025-08-26 14:51:10][353335865402559][4911 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6fd63804-002d-460b-a8fb-9d386cf4d6fe","id":"QR_6fd63804-002d-460b-a8fb-9d386cf4d6fe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:51:10][353335865402559][5067 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-08-26 14:51:10][353335865402559][5067 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-08-26 14:51:10][353335865402559][5068 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:52:03][353684143653941][0 ms][INFO] === Request start === [2025-08-26 14:52:03][353684143653941][1 ms][DEBUG] START check_scloud [2025-08-26 14:52:03][353684143653941][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:52:03][353684143653941][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 20321 5016 24316944 184552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:52:03][353684143653941][315 ms][DEBUG] targetPkg: running [2025-08-26 14:52:03][353684143653941][315 ms][DEBUG] END check_scloud in 315 ms [2025-08-26 14:52:03][353684143653941][315 ms][DEBUG] START check_boot_completed [2025-08-26 14:52:03][353684143653941][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:52:03][353684143653941][347 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 14:52:03][353684143653941][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:52:03][353684143653941][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:52:03][353684143653941][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 14:52:03][353684143653941][394 ms][DEBUG] START check_internet [2025-08-26 14:52:03][353684143653941][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:52:04][353684143653941][846 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.596/201.596/201.596/0.000 ms\n [2025-08-26 14:52:04][353684143653941][846 ms][DEBUG] check_internet: online [2025-08-26 14:52:04][353684143653941][846 ms][DEBUG] END check_internet in 453 ms [2025-08-26 14:52:04][353684143653941][847 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:52:04][353684143653941][847 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684143653941\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2982\"}'\'' -e'"" [2025-08-26 14:52:04][353684143653941][847 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:52:04][353684143653941][847 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684143653941\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2982\"}'\'' -e'"" [2025-08-26 14:52:07][353684143653941][4533 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a495fe77-0981-48b0-919d-e2c74e2cc2c5","id":"QR_a495fe77-0981-48b0-919d-e2c74e2cc2c5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:52:08][353684143653941][4689 ms][DEBUG] proc_open done in 3843 ms; code=255; res.len=3343 [2025-08-26 14:52:08][353684143653941][4689 ms][DEBUG] END runCmdUntilRes#1 in 3843 ms [2025-08-26 14:52:08][353684143653941][4689 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:53:03][352075821206584][0 ms][INFO] === Request start === [2025-08-26 14:53:03][352075821206584][1 ms][DEBUG] START check_scloud [2025-08-26 14:53:03][352075821206584][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:53:03][352075821206584][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 20321 5016 24434932 195560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:53:03][352075821206584][311 ms][DEBUG] targetPkg: running [2025-08-26 14:53:03][352075821206584][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-26 14:53:03][352075821206584][312 ms][DEBUG] START check_boot_completed [2025-08-26 14:53:03][352075821206584][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:53:03][352075821206584][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 14:53:03][352075821206584][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:53:03][352075821206584][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 14:53:03][352075821206584][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 14:53:03][352075821206584][421 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:53:03][352075821206584][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352075821206584\",\"model\":\"SM-G525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6603\"}'\'' -e'"" [2025-08-26 14:53:03][352075821206584][421 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:53:03][352075821206584][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352075821206584\",\"model\":\"SM-G525F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6603\"}'\'' -e'"" [2025-08-26 14:53:07][352075821206584][4138 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_01652b46-b652-45d0-ba55-9779884656c4","id":"QR_01652b46-b652-45d0-ba55-9779884656c4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:53:07][352075821206584][4295 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=3343 [2025-08-26 14:53:07][352075821206584][4295 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-26 14:53:07][352075821206584][4295 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:54:04][354833763287311][1 ms][INFO] === Request start === [2025-08-26 14:54:04][354833763287311][1 ms][DEBUG] START check_scloud [2025-08-26 14:54:04][354833763287311][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:54:04][354833763287311][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 20321 5016 24575256 207416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:54:04][354833763287311][302 ms][DEBUG] targetPkg: running [2025-08-26 14:54:04][354833763287311][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-26 14:54:04][354833763287311][302 ms][DEBUG] START check_boot_completed [2025-08-26 14:54:04][354833763287311][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:54:04][354833763287311][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:54:04][354833763287311][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:54:04][354833763287311][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:54:04][354833763287311][396 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 14:54:04][354833763287311][396 ms][DEBUG] START check_internet [2025-08-26 14:54:04][354833763287311][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:54:04][354833763287311][693 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=194 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 194.453/194.453/194.453/0.000 ms\n [2025-08-26 14:54:04][354833763287311][693 ms][DEBUG] check_internet: online [2025-08-26 14:54:04][354833763287311][693 ms][DEBUG] END check_internet in 297 ms [2025-08-26 14:54:04][354833763287311][693 ms][DEBUG] rawBody.length=1149 [2025-08-26 14:54:04][354833763287311][693 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354833763287311\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7870\"}'\'' -e'"" [2025-08-26 14:54:04][354833763287311][693 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:54:04][354833763287311][693 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354833763287311\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7870\"}'\'' -e'"" [2025-08-26 14:54:09][354833763287311][5738 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6dbed414-416e-42a0-bdf9-ea4bea850bdc","id":"QR_6dbed414-416e-42a0-bdf9-ea4bea850bdc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:54:10][354833763287311][5894 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-08-26 14:54:10][354833763287311][5894 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-08-26 14:54:10][354833763287311][5894 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:54:14][352469859628530][0 ms][INFO] === Request start === [2025-08-26 14:54:14][352469859628530][1 ms][DEBUG] START check_scloud [2025-08-26 14:54:14][352469859628530][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:54:15][352469859628530][298 ms][DEBUG] SU: done in 298 ms; outu0_a118 20321 5016 24702368 217316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:54:15][352469859628530][299 ms][DEBUG] targetPkg: running [2025-08-26 14:54:15][352469859628530][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-26 14:54:15][352469859628530][299 ms][DEBUG] START check_boot_completed [2025-08-26 14:54:15][352469859628530][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:54:15][352469859628530][344 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 14:54:15][352469859628530][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:54:15][352469859628530][407 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 14:54:15][352469859628530][407 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-26 14:54:15][352469859628530][407 ms][DEBUG] START check_internet [2025-08-26 14:54:15][352469859628530][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:54:15][352469859628530][750 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=207 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 207.980/207.980/207.980/0.000 ms\n [2025-08-26 14:54:15][352469859628530][750 ms][DEBUG] check_internet: online [2025-08-26 14:54:15][352469859628530][750 ms][DEBUG] END check_internet in 344 ms [2025-08-26 14:54:15][352469859628530][750 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:54:15][352469859628530][751 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859628530\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6196\"}'\'' -e'"" [2025-08-26 14:54:15][352469859628530][751 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:54:15][352469859628530][751 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469859628530\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6196\"}'\'' -e'"" [2025-08-26 14:54:19][352469859628530][4780 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c39bfc10-b80b-4e89-b934-607187b8ec83","id":"QR_c39bfc10-b80b-4e89-b934-607187b8ec83","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:54:19][352469859628530][4937 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-26 14:54:19][352469859628530][4937 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-26 14:54:19][352469859628530][4937 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:55:03][350026551040067][0 ms][INFO] === Request start === [2025-08-26 14:55:03][350026551040067][1 ms][DEBUG] START check_scloud [2025-08-26 14:55:03][350026551040067][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:55:03][350026551040067][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 20321 5016 24846944 229032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:55:03][350026551040067][298 ms][DEBUG] targetPkg: running [2025-08-26 14:55:03][350026551040067][298 ms][DEBUG] END check_scloud in 298 ms [2025-08-26 14:55:03][350026551040067][298 ms][DEBUG] START check_boot_completed [2025-08-26 14:55:03][350026551040067][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:55:04][350026551040067][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:55:04][350026551040067][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:55:04][350026551040067][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:55:04][350026551040067][392 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 14:55:04][350026551040067][392 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:55:04][350026551040067][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026551040067\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6966\"}'\'' -e'"" [2025-08-26 14:55:04][350026551040067][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:55:04][350026551040067][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026551040067\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6966\"}'\'' -e'"" [2025-08-26 14:55:07][350026551040067][4266 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77c5bdf3-b911-4948-998d-39661ac94c73","id":"QR_77c5bdf3-b911-4948-998d-39661ac94c73","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:55:08][350026551040067][4422 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-26 14:55:08][350026551040067][4422 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-26 14:55:08][350026551040067][4422 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:56:04][355928812024134][0 ms][INFO] === Request start === [2025-08-26 14:56:04][355928812024134][1 ms][DEBUG] START check_scloud [2025-08-26 14:56:04][355928812024134][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:56:05][355928812024134][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 20321 5016 24979272 239048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:56:05][355928812024134][309 ms][DEBUG] targetPkg: running [2025-08-26 14:56:05][355928812024134][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 14:56:05][355928812024134][309 ms][DEBUG] START check_boot_completed [2025-08-26 14:56:05][355928812024134][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:56:05][355928812024134][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 14:56:05][355928812024134][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:56:05][355928812024134][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:56:05][355928812024134][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 14:56:05][355928812024134][388 ms][DEBUG] START check_internet [2025-08-26 14:56:05][355928812024134][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:56:05][355928812024134][872 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.777/200.777/200.777/0.000 ms\n [2025-08-26 14:56:05][355928812024134][872 ms][DEBUG] check_internet: online [2025-08-26 14:56:05][355928812024134][872 ms][DEBUG] END check_internet in 484 ms [2025-08-26 14:56:05][355928812024134][872 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:56:05][355928812024134][872 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355928812024134\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4943\"}'\'' -e'"" [2025-08-26 14:56:05][355928812024134][872 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:56:05][355928812024134][872 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355928812024134\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4943\"}'\'' -e'"" [2025-08-26 14:56:09][355928812024134][4480 ms][DEBUG] proc_open done in 3608 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 14:56:09][355928812024134][4481 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-08-26 14:56:09][355928812024134][4481 ms][WARN] Detected error: Process with pid 20321 either refused to load frida-agent, or terminated during injection [2025-08-26 14:56:09][355928812024134][4481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 14:56:09][355928812024134][4636 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 14:56:09][355928812024134][4637 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 14:56:09][355928812024134][4637 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 14:56:09][355928812024134][4777 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 14:56:09][355928812024134][4777 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 14:56:09][355928812024134][4933 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 14:56:11][355928812024134][6948 ms][DEBUG] START check_boot_completed [2025-08-26 14:56:11][355928812024134][6948 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:56:11][355928812024134][6995 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 14:56:11][355928812024134][6995 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:56:11][355928812024134][7042 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:56:11][355928812024134][7042 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 14:56:14][355928812024134][10057 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 14:56:14][355928812024134][10057 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355928812024134\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4943\"}'\'' -e'"" [2025-08-26 14:56:18][355928812024134][13728 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_60efa50f-901e-492b-a73b-ab236ac70d30","id":"QR_60efa50f-901e-492b-a73b-ab236ac70d30","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:56:18][355928812024134][13884 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=3343 [2025-08-26 14:56:18][355928812024134][13884 ms][DEBUG] END runCmdUntilRes#2 in 3827 ms [2025-08-26 14:56:18][355928812024134][13884 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:56:20][350443700496381][1 ms][INFO] === Request start === [2025-08-26 14:56:20][350443700496381][1 ms][DEBUG] START check_scloud [2025-08-26 14:56:20][350443700496381][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:56:20][350443700496381][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 21705 5016 23833272 124660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:56:20][350443700496381][301 ms][DEBUG] targetPkg: running [2025-08-26 14:56:20][350443700496381][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 14:56:20][350443700496381][301 ms][DEBUG] START check_boot_completed [2025-08-26 14:56:20][350443700496381][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:56:20][350443700496381][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 14:56:20][350443700496381][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:56:20][350443700496381][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 14:56:20][350443700496381][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 14:56:20][350443700496381][411 ms][DEBUG] START check_internet [2025-08-26 14:56:20][350443700496381][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:56:20][350443700496381][692 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=171 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 171.985/171.985/171.985/0.000 ms\n [2025-08-26 14:56:20][350443700496381][692 ms][DEBUG] check_internet: online [2025-08-26 14:56:20][350443700496381][692 ms][DEBUG] END check_internet in 281 ms [2025-08-26 14:56:20][350443700496381][692 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:56:20][350443700496381][692 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350443700496381\",\"model\":\"SM-F946N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8361\"}'\'' -e'"" [2025-08-26 14:56:20][350443700496381][692 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:56:20][350443700496381][692 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350443700496381\",\"model\":\"SM-F946N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8361\"}'\'' -e'"" [2025-08-26 14:56:24][350443700496381][3878 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 14:56:24][350443700496381][4035 ms][DEBUG] proc_open done in 3343 ms; code=255; res.len=107 [2025-08-26 14:56:24][350443700496381][4035 ms][DEBUG] END runCmdUntilRes#1 in 3343 ms [2025-08-26 14:56:24][350443700496381][4035 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 14:56:24][][0 ms][INFO] === Request start === [2025-08-26 14:56:24][][0 ms][DEBUG] START check_scloud [2025-08-26 14:56:24][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:56:24][][228 ms][DEBUG] SU: done in 227 ms; outu0_a118 21705 5016 23984796 135868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:56:24][][228 ms][DEBUG] targetPkg: running [2025-08-26 14:56:24][][228 ms][DEBUG] END check_scloud in 228 ms [2025-08-26 14:56:24][][228 ms][DEBUG] START check_boot_completed [2025-08-26 14:56:24][][228 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:56:24][][274 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:56:24][][274 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:56:24][][321 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:56:24][][321 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 14:56:24][][322 ms][DEBUG] START check_internet [2025-08-26 14:56:24][][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:56:25][][540 ms][DEBUG] SU: done in 218 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=116 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 116.085/116.085/116.085/0.000 ms\n [2025-08-26 14:56:25][][540 ms][DEBUG] check_internet: online [2025-08-26 14:56:25][][540 ms][DEBUG] END check_internet in 219 ms [2025-08-26 14:56:25][][540 ms][DEBUG] rawBody.length=1129 [2025-08-26 14:56:25][][540 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F946N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CW70258AP\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8177\"}'\'' -e'"" [2025-08-26 14:56:25][][541 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:56:25][][541 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F946N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CW70258AP\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8177\"}'\'' -e'"" [2025-08-26 14:56:28][][4008 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 14:56:28][][4164 ms][DEBUG] proc_open done in 3623 ms; code=255; res.len=107 [2025-08-26 14:56:28][][4164 ms][DEBUG] END runCmdUntilRes#1 in 3623 ms [2025-08-26 14:56:28][][4164 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 14:57:03][357674436937859][0 ms][INFO] === Request start === [2025-08-26 14:57:03][357674436937859][1 ms][DEBUG] START check_scloud [2025-08-26 14:57:03][357674436937859][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:57:03][357674436937859][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 21705 5016 24007060 149240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:57:03][357674436937859][309 ms][DEBUG] targetPkg: running [2025-08-26 14:57:03][357674436937859][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 14:57:03][357674436937859][309 ms][DEBUG] START check_boot_completed [2025-08-26 14:57:03][357674436937859][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:57:03][357674436937859][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:57:03][357674436937859][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:57:03][357674436937859][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:57:03][357674436937859][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 14:57:03][357674436937859][402 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:57:03][357674436937859][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674436937859\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9357\"}'\'' -e'"" [2025-08-26 14:57:03][357674436937859][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:57:03][357674436937859][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674436937859\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9357\"}'\'' -e'"" [2025-08-26 14:57:07][357674436937859][4198 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c9ee8e8-a177-46e9-876d-d22f62370252","id":"QR_8c9ee8e8-a177-46e9-876d-d22f62370252","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:57:07][357674436937859][4355 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-08-26 14:57:07][357674436937859][4355 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-26 14:57:07][357674436937859][4355 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:57:11][358558828221049][0 ms][INFO] === Request start === [2025-08-26 14:57:11][358558828221049][1 ms][DEBUG] START check_scloud [2025-08-26 14:57:11][358558828221049][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:57:12][358558828221049][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 21705 5016 24174044 160668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:57:12][358558828221049][308 ms][DEBUG] targetPkg: running [2025-08-26 14:57:12][358558828221049][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-26 14:57:12][358558828221049][308 ms][DEBUG] START check_boot_completed [2025-08-26 14:57:12][358558828221049][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:57:12][358558828221049][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:57:12][358558828221049][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:57:12][358558828221049][417 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 14:57:12][358558828221049][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 14:57:12][358558828221049][417 ms][DEBUG] rawBody.length=1149 [2025-08-26 14:57:12][358558828221049][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558828221049\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4815\"}'\'' -e'"" [2025-08-26 14:57:12][358558828221049][418 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:57:12][358558828221049][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558828221049\",\"model\":\"SM-G780F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4815\"}'\'' -e'"" [2025-08-26 14:57:18][358558828221049][6603 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d6e3803b-b80b-4a67-938e-32c3c3966060","id":"QR_d6e3803b-b80b-4a67-938e-32c3c3966060","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:57:18][358558828221049][6759 ms][DEBUG] proc_open done in 6342 ms; code=255; res.len=3343 [2025-08-26 14:57:18][358558828221049][6759 ms][DEBUG] END runCmdUntilRes#1 in 6342 ms [2025-08-26 14:57:18][358558828221049][6760 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 14:58:03][352060488701259][0 ms][INFO] === Request start === [2025-08-26 14:58:03][352060488701259][1 ms][DEBUG] START check_scloud [2025-08-26 14:58:03][352060488701259][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 14:58:03][352060488701259][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 21705 5016 24277532 171808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 14:58:03][352060488701259][300 ms][DEBUG] targetPkg: running [2025-08-26 14:58:03][352060488701259][300 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 14:58:03][352060488701259][300 ms][DEBUG] START check_boot_completed [2025-08-26 14:58:03][352060488701259][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 14:58:03][352060488701259][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 14:58:03][352060488701259][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 14:58:03][352060488701259][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 14:58:03][352060488701259][393 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 14:58:03][352060488701259][393 ms][DEBUG] START check_internet [2025-08-26 14:58:03][352060488701259][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 14:58:04][352060488701259][659 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=174 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 174.406/174.406/174.406/0.000 ms\n [2025-08-26 14:58:04][352060488701259][659 ms][DEBUG] check_internet: online [2025-08-26 14:58:04][352060488701259][659 ms][DEBUG] END check_internet in 266 ms [2025-08-26 14:58:04][352060488701259][659 ms][DEBUG] rawBody.length=1148 [2025-08-26 14:58:04][352060488701259][659 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060488701259\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1403\"}'\'' -e'"" [2025-08-26 14:58:04][352060488701259][659 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 14:58:04][352060488701259][659 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060488701259\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1403\"}'\'' -e'"" [2025-08-26 14:58:12][352060488701259][8891 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a2c3557d-3318-488c-9592-09b4b67dfc53","id":"QR_a2c3557d-3318-488c-9592-09b4b67dfc53","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 14:58:12][352060488701259][9047 ms][DEBUG] proc_open done in 8388 ms; code=255; res.len=3343 [2025-08-26 14:58:12][352060488701259][9047 ms][DEBUG] END runCmdUntilRes#1 in 8388 ms [2025-08-26 14:58:12][352060488701259][9047 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:00:05][359043372359510][1 ms][INFO] === Request start === [2025-08-26 15:00:05][359043372359510][1 ms][DEBUG] START check_scloud [2025-08-26 15:00:05][359043372359510][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:00:05][359043372359510][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 21705 5016 24418996 183340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:00:05][359043372359510][312 ms][DEBUG] targetPkg: running [2025-08-26 15:00:05][359043372359510][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-26 15:00:05][359043372359510][313 ms][DEBUG] START check_boot_completed [2025-08-26 15:00:05][359043372359510][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:00:05][359043372359510][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 15:00:05][359043372359510][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:00:05][359043372359510][406 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:00:05][359043372359510][406 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 15:00:05][359043372359510][406 ms][DEBUG] START check_internet [2025-08-26 15:00:05][359043372359510][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:00:06][359043372359510][860 ms][DEBUG] SU: done in 454 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.023/201.023/201.023/0.000 ms\n [2025-08-26 15:00:06][359043372359510][860 ms][DEBUG] check_internet: online [2025-08-26 15:00:06][359043372359510][860 ms][DEBUG] END check_internet in 454 ms [2025-08-26 15:00:06][359043372359510][860 ms][DEBUG] rawBody.length=1149 [2025-08-26 15:00:06][359043372359510][861 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359043372359510\",\"model\":\"SM-G990U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7194\"}'\'' -e'"" [2025-08-26 15:00:06][359043372359510][861 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:00:06][359043372359510][861 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359043372359510\",\"model\":\"SM-G990U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7194\"}'\'' -e'"" [2025-08-26 15:00:11][359043372359510][5498 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e6705113-5267-4fb4-9ce1-b0d25f19246d","id":"QR_e6705113-5267-4fb4-9ce1-b0d25f19246d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:00:11][359043372359510][5655 ms][DEBUG] proc_open done in 4794 ms; code=255; res.len=3343 [2025-08-26 15:00:11][359043372359510][5655 ms][DEBUG] END runCmdUntilRes#1 in 4794 ms [2025-08-26 15:00:11][359043372359510][5655 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:01:03][355898191103942][0 ms][INFO] === Request start === [2025-08-26 15:01:03][355898191103942][1 ms][DEBUG] START check_scloud [2025-08-26 15:01:03][355898191103942][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:01:03][355898191103942][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 21705 5016 24577752 195536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:01:03][355898191103942][305 ms][DEBUG] targetPkg: running [2025-08-26 15:01:03][355898191103942][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 15:01:03][355898191103942][305 ms][DEBUG] START check_boot_completed [2025-08-26 15:01:03][355898191103942][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:01:04][355898191103942][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 15:01:04][355898191103942][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:01:04][355898191103942][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:01:04][355898191103942][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 15:01:04][355898191103942][398 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:01:04][355898191103942][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355898191103942\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5988\"}'\'' -e'"" [2025-08-26 15:01:04][355898191103942][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:01:04][355898191103942][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355898191103942\",\"model\":\"SM-S908E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5988\"}'\'' -e'"" [2025-08-26 15:01:08][355898191103942][4429 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_87449cdc-466f-4858-a9c8-7c7d9f955ea0","id":"QR_87449cdc-466f-4858-a9c8-7c7d9f955ea0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:01:08][355898191103942][4585 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-26 15:01:08][355898191103942][4585 ms][DEBUG] END runCmdUntilRes#1 in 4187 ms [2025-08-26 15:01:08][355898191103942][4585 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:02:03][351263052045373][1 ms][INFO] === Request start === [2025-08-26 15:02:03][351263052045373][1 ms][DEBUG] START check_scloud [2025-08-26 15:02:03][351263052045373][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:02:03][351263052045373][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 21705 5016 24738556 206356 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:02:03][351263052045373][249 ms][DEBUG] targetPkg: running [2025-08-26 15:02:03][351263052045373][249 ms][DEBUG] END check_scloud in 248 ms [2025-08-26 15:02:03][351263052045373][249 ms][DEBUG] START check_boot_completed [2025-08-26 15:02:03][351263052045373][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:02:03][351263052045373][296 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 15:02:03][351263052045373][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:02:03][351263052045373][358 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 15:02:03][351263052045373][358 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 15:02:03][351263052045373][358 ms][DEBUG] START check_internet [2025-08-26 15:02:03][351263052045373][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:02:03][351263052045373][655 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=182 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 182.702/182.702/182.702/0.000 ms\n [2025-08-26 15:02:03][351263052045373][656 ms][DEBUG] check_internet: online [2025-08-26 15:02:03][351263052045373][656 ms][DEBUG] END check_internet in 297 ms [2025-08-26 15:02:03][351263052045373][656 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:02:03][351263052045373][656 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351263052045373\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2777\"}'\'' -e'"" [2025-08-26 15:02:03][351263052045373][656 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:02:03][351263052045373][656 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351263052045373\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2777\"}'\'' -e'"" [2025-08-26 15:02:07][351263052045373][4638 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_945bf7f0-3340-447b-b0bc-916b2adcc1ce","id":"QR_945bf7f0-3340-447b-b0bc-916b2adcc1ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:02:08][351263052045373][4795 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-08-26 15:02:08][351263052045373][4795 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-08-26 15:02:08][351263052045373][4795 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:03:29][352689821595984][1 ms][INFO] === Request start === [2025-08-26 15:03:29][352689821595984][1 ms][DEBUG] START check_scloud [2025-08-26 15:03:29][352689821595984][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:03:30][352689821595984][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 21705 5016 24881120 217244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:03:30][352689821595984][320 ms][DEBUG] targetPkg: running [2025-08-26 15:03:30][352689821595984][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-26 15:03:30][352689821595984][320 ms][DEBUG] START check_boot_completed [2025-08-26 15:03:30][352689821595984][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:03:30][352689821595984][351 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 15:03:30][352689821595984][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:03:30][352689821595984][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:03:30][352689821595984][398 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 15:03:30][352689821595984][398 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:03:30][352689821595984][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352689821595984\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1571\"}'\'' -e'"" [2025-08-26 15:03:30][352689821595984][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:03:30][352689821595984][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352689821595984\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1571\"}'\'' -e'"" [2025-08-26 15:03:33][352689821595984][3772 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 15:03:33][352689821595984][3928 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=107 [2025-08-26 15:03:33][352689821595984][3928 ms][DEBUG] END runCmdUntilRes#1 in 3530 ms [2025-08-26 15:03:33][352689821595984][3928 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 15:03:34][][0 ms][INFO] === Request start === [2025-08-26 15:03:34][][0 ms][DEBUG] START check_scloud [2025-08-26 15:03:34][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:03:34][][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 21705 5016 25059552 227760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:03:34][][291 ms][DEBUG] targetPkg: running [2025-08-26 15:03:34][][291 ms][DEBUG] END check_scloud in 291 ms [2025-08-26 15:03:34][][291 ms][DEBUG] START check_boot_completed [2025-08-26 15:03:34][][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:03:34][][337 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 15:03:34][][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:03:34][][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:03:34][][384 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 15:03:34][][384 ms][DEBUG] rawBody.length=1129 [2025-08-26 15:03:34][][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW91NV0LH\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7354\"}'\'' -e'"" [2025-08-26 15:03:34][][384 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:03:34][][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW91NV0LH\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7354\"}'\'' -e'"" [2025-08-26 15:03:37][][3602 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 15:03:37][][3758 ms][DEBUG] proc_open done in 3374 ms; code=255; res.len=107 [2025-08-26 15:03:37][][3758 ms][DEBUG] END runCmdUntilRes#1 in 3374 ms [2025-08-26 15:03:37][][3758 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 15:03:39][352689821595984][0 ms][INFO] === Request start === [2025-08-26 15:03:39][352689821595984][1 ms][DEBUG] START check_scloud [2025-08-26 15:03:39][352689821595984][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:03:40][352689821595984][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 21705 5016 25187816 239584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:03:40][352689821595984][270 ms][DEBUG] targetPkg: running [2025-08-26 15:03:40][352689821595984][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-26 15:03:40][352689821595984][270 ms][DEBUG] START check_boot_completed [2025-08-26 15:03:40][352689821595984][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:03:40][352689821595984][301 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 15:03:40][352689821595984][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:03:40][352689821595984][348 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:03:40][352689821595984][348 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 15:03:40][352689821595984][348 ms][DEBUG] rawBody.length=1149 [2025-08-26 15:03:40][352689821595984][348 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352689821595984\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3006\"}'\'' -e'"" [2025-08-26 15:03:40][352689821595984][348 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:03:40][352689821595984][348 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352689821595984\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3006\"}'\'' -e'"" [2025-08-26 15:03:43][352689821595984][4113 ms][DEBUG] proc_open done in 3765 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 15:03:43][352689821595984][4113 ms][DEBUG] END runCmdUntilRes#1 in 3765 ms [2025-08-26 15:03:43][352689821595984][4113 ms][WARN] Detected error: Process with pid 21705 either refused to load frida-agent, or terminated during injection [2025-08-26 15:03:43][352689821595984][4113 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 15:03:44][352689821595984][4269 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 15:03:44][352689821595984][4269 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 15:03:44][352689821595984][4269 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 15:03:44][352689821595984][4410 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 15:03:44][352689821595984][4410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 15:03:44][352689821595984][4566 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 15:03:46][352689821595984][6581 ms][DEBUG] START check_boot_completed [2025-08-26 15:03:46][352689821595984][6581 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:03:46][352689821595984][6628 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:03:46][352689821595984][6628 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:03:46][352689821595984][6677 ms][DEBUG] SU: done in 49 ms; out [2025-08-26 15:03:46][352689821595984][6677 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-26 15:03:49][352689821595984][9690 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 15:03:49][352689821595984][9690 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352689821595984\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3006\"}'\'' -e'"" [2025-08-26 15:03:54][352689821595984][15063 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_24574a76-1cbe-4f16-a60f-01a486e22b1f","id":"QR_24574a76-1cbe-4f16-a60f-01a486e22b1f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:03:55][352689821595984][15220 ms][DEBUG] proc_open done in 5530 ms; code=255; res.len=3343 [2025-08-26 15:03:55][352689821595984][15220 ms][DEBUG] END runCmdUntilRes#2 in 5530 ms [2025-08-26 15:03:55][352689821595984][15220 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:04:03][352887811580707][0 ms][INFO] === Request start === [2025-08-26 15:04:03][352887811580707][1 ms][DEBUG] START check_scloud [2025-08-26 15:04:03][352887811580707][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:04:03][352887811580707][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 23509 5016 23788840 126668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:04:03][352887811580707][264 ms][DEBUG] targetPkg: running [2025-08-26 15:04:03][352887811580707][264 ms][DEBUG] END check_scloud in 263 ms [2025-08-26 15:04:03][352887811580707][264 ms][DEBUG] START check_boot_completed [2025-08-26 15:04:03][352887811580707][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:04:03][352887811580707][311 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:04:03][352887811580707][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:04:03][352887811580707][389 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 15:04:03][352887811580707][389 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 15:04:03][352887811580707][389 ms][DEBUG] START check_internet [2025-08-26 15:04:03][352887811580707][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:04:03][352887811580707][748 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=210 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 210.744/210.744/210.744/0.000 ms\n [2025-08-26 15:04:03][352887811580707][748 ms][DEBUG] check_internet: online [2025-08-26 15:04:03][352887811580707][748 ms][DEBUG] END check_internet in 359 ms [2025-08-26 15:04:03][352887811580707][748 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:04:03][352887811580707][748 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352887811580707\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4902\"}'\'' -e'"" [2025-08-26 15:04:03][352887811580707][749 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:04:03][352887811580707][749 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352887811580707\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4902\"}'\'' -e'"" [2025-08-26 15:04:07][352887811580707][4653 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_241ff0fb-50fe-4225-88da-08b2e08d0ddf","id":"QR_241ff0fb-50fe-4225-88da-08b2e08d0ddf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:04:07][352887811580707][4809 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-08-26 15:04:07][352887811580707][4809 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-26 15:04:07][352887811580707][4809 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:05:03][354747954188262][0 ms][INFO] === Request start === [2025-08-26 15:05:03][354747954188262][1 ms][DEBUG] START check_scloud [2025-08-26 15:05:03][354747954188262][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:05:04][354747954188262][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 23509 5016 23851064 137644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:05:04][354747954188262][301 ms][DEBUG] targetPkg: running [2025-08-26 15:05:04][354747954188262][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 15:05:04][354747954188262][301 ms][DEBUG] START check_boot_completed [2025-08-26 15:05:04][354747954188262][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:05:04][354747954188262][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 15:05:04][354747954188262][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:05:04][354747954188262][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:05:04][354747954188262][395 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 15:05:04][354747954188262][395 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:05:04][354747954188262][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747954188262\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7404\"}'\'' -e'"" [2025-08-26 15:05:04][354747954188262][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:05:04][354747954188262][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747954188262\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7404\"}'\'' -e'"" [2025-08-26 15:05:08][354747954188262][4987 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5c1acdc-9280-40f7-9976-9eaaedaafd09","id":"QR_a5c1acdc-9280-40f7-9976-9eaaedaafd09","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:05:08][354747954188262][5143 ms][DEBUG] proc_open done in 4748 ms; code=255; res.len=3343 [2025-08-26 15:05:08][354747954188262][5143 ms][DEBUG] END runCmdUntilRes#1 in 4748 ms [2025-08-26 15:05:08][354747954188262][5143 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:06:03][357962503176513][1 ms][INFO] === Request start === [2025-08-26 15:06:03][357962503176513][1 ms][DEBUG] START check_scloud [2025-08-26 15:06:03][357962503176513][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:06:03][357962503176513][248 ms][DEBUG] SU: done in 246 ms; outu0_a118 23509 5016 23948880 149504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:06:03][357962503176513][248 ms][DEBUG] targetPkg: running [2025-08-26 15:06:03][357962503176513][248 ms][DEBUG] END check_scloud in 247 ms [2025-08-26 15:06:03][357962503176513][248 ms][DEBUG] START check_boot_completed [2025-08-26 15:06:03][357962503176513][248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:06:03][357962503176513][292 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 15:06:03][357962503176513][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:06:04][357962503176513][355 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 15:06:04][357962503176513][355 ms][DEBUG] END check_boot_completed in 107 ms [2025-08-26 15:06:04][357962503176513][355 ms][DEBUG] START check_internet [2025-08-26 15:06:04][357962503176513][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:06:04][357962503176513][855 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.245/201.245/201.245/0.000 ms\n [2025-08-26 15:06:04][357962503176513][855 ms][DEBUG] check_internet: online [2025-08-26 15:06:04][357962503176513][855 ms][DEBUG] END check_internet in 500 ms [2025-08-26 15:06:04][357962503176513][855 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:06:04][357962503176513][855 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962503176513\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3536\"}'\'' -e'"" [2025-08-26 15:06:04][357962503176513][855 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:06:04][357962503176513][855 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962503176513\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3536\"}'\'' -e'"" [2025-08-26 15:06:08][357962503176513][4776 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5e0fe96-20e5-4d11-9fc3-86436f7ce180","id":"QR_a5e0fe96-20e5-4d11-9fc3-86436f7ce180","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:06:08][357962503176513][4932 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=3343 [2025-08-26 15:06:08][357962503176513][4932 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-26 15:06:08][357962503176513][4932 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:07:03][353684141879225][0 ms][INFO] === Request start === [2025-08-26 15:07:03][353684141879225][1 ms][DEBUG] START check_scloud [2025-08-26 15:07:03][353684141879225][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:07:03][353684141879225][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 23509 5016 24062516 160388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:07:03][353684141879225][310 ms][DEBUG] targetPkg: running [2025-08-26 15:07:03][353684141879225][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 15:07:03][353684141879225][310 ms][DEBUG] START check_boot_completed [2025-08-26 15:07:03][353684141879225][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:07:04][353684141879225][357 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:07:04][353684141879225][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:07:04][353684141879225][451 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 15:07:04][353684141879225][451 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 15:07:04][353684141879225][451 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:07:04][353684141879225][451 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141879225\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8847\"}'\'' -e'"" [2025-08-26 15:07:04][353684141879225][451 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:07:04][353684141879225][451 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141879225\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8847\"}'\'' -e'"" [2025-08-26 15:07:08][353684141879225][4465 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cee7a78e-8cc4-4c1b-a444-a008b50fbd40","id":"QR_cee7a78e-8cc4-4c1b-a444-a008b50fbd40","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:07:08][353684141879225][4621 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-26 15:07:08][353684141879225][4621 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-26 15:07:08][353684141879225][4621 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:08:03][352698473646334][0 ms][INFO] === Request start === [2025-08-26 15:08:03][352698473646334][1 ms][DEBUG] START check_scloud [2025-08-26 15:08:03][352698473646334][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:08:03][352698473646334][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 23509 5016 24198936 171576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:08:03][352698473646334][266 ms][DEBUG] targetPkg: running [2025-08-26 15:08:03][352698473646334][266 ms][DEBUG] END check_scloud in 265 ms [2025-08-26 15:08:03][352698473646334][266 ms][DEBUG] START check_boot_completed [2025-08-26 15:08:03][352698473646334][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:08:03][352698473646334][313 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:08:03][352698473646334][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:08:03][352698473646334][375 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 15:08:03][352698473646334][375 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 15:08:03][352698473646334][375 ms][DEBUG] START check_internet [2025-08-26 15:08:03][352698473646334][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:08:03][352698473646334][688 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=196 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 196.665/196.665/196.665/0.000 ms\n [2025-08-26 15:08:03][352698473646334][688 ms][DEBUG] check_internet: online [2025-08-26 15:08:03][352698473646334][688 ms][DEBUG] END check_internet in 313 ms [2025-08-26 15:08:03][352698473646334][688 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:08:03][352698473646334][688 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698473646334\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7462\"}'\'' -e'"" [2025-08-26 15:08:03][352698473646334][688 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:08:03][352698473646334][688 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352698473646334\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7462\"}'\'' -e'"" [2025-08-26 15:08:07][352698473646334][4499 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_91a60f40-97d6-4ecc-9abb-d87731c9437f","id":"QR_91a60f40-97d6-4ecc-9abb-d87731c9437f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:08:07][352698473646334][4655 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-26 15:08:07][352698473646334][4655 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-26 15:08:07][352698473646334][4655 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:08:10][352600226187236][1 ms][INFO] === Request start === [2025-08-26 15:08:10][352600226187236][1 ms][DEBUG] START check_scloud [2025-08-26 15:08:10][352600226187236][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:08:10][352600226187236][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 23509 5016 24337440 183348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:08:10][352600226187236][278 ms][DEBUG] targetPkg: running [2025-08-26 15:08:10][352600226187236][278 ms][DEBUG] END check_scloud in 277 ms [2025-08-26 15:08:10][352600226187236][278 ms][DEBUG] START check_boot_completed [2025-08-26 15:08:10][352600226187236][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:08:10][352600226187236][309 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 15:08:10][352600226187236][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:08:10][352600226187236][356 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:08:10][352600226187236][356 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 15:08:10][352600226187236][356 ms][DEBUG] START check_internet [2025-08-26 15:08:10][352600226187236][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:08:10][352600226187236][575 ms][DEBUG] SU: done in 219 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=114 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 114.502/114.502/114.502/0.000 ms\n [2025-08-26 15:08:10][352600226187236][575 ms][DEBUG] check_internet: online [2025-08-26 15:08:10][352600226187236][575 ms][DEBUG] END check_internet in 219 ms [2025-08-26 15:08:10][352600226187236][575 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:08:10][352600226187236][575 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226187236\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7803\"}'\'' -e'"" [2025-08-26 15:08:10][352600226187236][576 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:08:10][352600226187236][576 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226187236\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7803\"}'\'' -e'"" [2025-08-26 15:08:14][352600226187236][4340 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_39b5901d-64ed-4af2-8099-788a35cafcdb","id":"QR_39b5901d-64ed-4af2-8099-788a35cafcdb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:08:14][352600226187236][4496 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-08-26 15:08:14][352600226187236][4496 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-08-26 15:08:14][352600226187236][4496 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:09:03][358615312255311][0 ms][INFO] === Request start === [2025-08-26 15:09:03][358615312255311][0 ms][DEBUG] START check_scloud [2025-08-26 15:09:03][358615312255311][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:09:03][358615312255311][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 23509 5016 24430816 194712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:09:03][358615312255311][308 ms][DEBUG] targetPkg: running [2025-08-26 15:09:03][358615312255311][308 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 15:09:03][358615312255311][308 ms][DEBUG] START check_boot_completed [2025-08-26 15:09:03][358615312255311][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:09:03][358615312255311][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 15:09:03][358615312255311][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:09:03][358615312255311][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:09:03][358615312255311][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 15:09:03][358615312255311][402 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:09:03][358615312255311][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615312255311\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4913\"}'\'' -e'"" [2025-08-26 15:09:03][358615312255311][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:09:03][358615312255311][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615312255311\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4913\"}'\'' -e'"" [2025-08-26 15:09:08][358615312255311][4619 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_adabe033-d097-42b7-aba5-c5034e824781","id":"QR_adabe033-d097-42b7-aba5-c5034e824781","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:09:08][358615312255311][4776 ms][DEBUG] proc_open done in 4374 ms; code=255; res.len=3343 [2025-08-26 15:09:08][358615312255311][4776 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-26 15:09:08][358615312255311][4776 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:09:12][351799520154867][0 ms][INFO] === Request start === [2025-08-26 15:09:12][351799520154867][1 ms][DEBUG] START check_scloud [2025-08-26 15:09:12][351799520154867][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:09:12][351799520154867][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 23509 5016 24591848 207000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:09:12][351799520154867][263 ms][DEBUG] targetPkg: running [2025-08-26 15:09:12][351799520154867][263 ms][DEBUG] END check_scloud in 263 ms [2025-08-26 15:09:12][351799520154867][263 ms][DEBUG] START check_boot_completed [2025-08-26 15:09:12][351799520154867][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:09:12][351799520154867][310 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:09:12][351799520154867][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:09:12][351799520154867][388 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 15:09:12][351799520154867][388 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 15:09:12][351799520154867][388 ms][DEBUG] rawBody.length=1149 [2025-08-26 15:09:12][351799520154867][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351799520154867\",\"model\":\"SM-T638U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"N14\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6152\"}'\'' -e'"" [2025-08-26 15:09:12][351799520154867][388 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:09:12][351799520154867][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351799520154867\",\"model\":\"SM-T638U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"N14\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6152\"}'\'' -e'"" [2025-08-26 15:09:16][351799520154867][4309 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-26 15:09:16][351799520154867][4465 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=115 [2025-08-26 15:09:16][351799520154867][4465 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-26 15:09:16][351799520154867][4465 ms][INFO] SUCCESS response from frida (len=115) [2025-08-26 15:09:16][][0 ms][INFO] === Request start === [2025-08-26 15:09:16][][1 ms][DEBUG] START check_scloud [2025-08-26 15:09:16][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:09:17][][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 23509 5016 24770408 217880 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:09:17][][313 ms][DEBUG] targetPkg: running [2025-08-26 15:09:17][][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-26 15:09:17][][313 ms][DEBUG] START check_boot_completed [2025-08-26 15:09:17][][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:09:17][][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:09:17][][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:09:17][][422 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 15:09:17][][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 15:09:17][][422 ms][DEBUG] rawBody.length=1130 [2025-08-26 15:09:17][][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-T638U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52W102QLSP\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"N14\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5236\"}'\'' -e'"" [2025-08-26 15:09:17][][422 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:09:17][][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-T638U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52W102QLSP\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"N14\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5236\"}'\'' -e'"" [2025-08-26 15:09:20][][3999 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 15:09:21][][4155 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=107 [2025-08-26 15:09:21][][4156 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-08-26 15:09:21][][4156 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 15:09:21][351799520154867][0 ms][INFO] === Request start === [2025-08-26 15:09:21][351799520154867][1 ms][DEBUG] START check_scloud [2025-08-26 15:09:21][351799520154867][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:09:22][351799520154867][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 23509 5016 24913008 229540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:09:22][351799520154867][311 ms][DEBUG] targetPkg: running [2025-08-26 15:09:22][351799520154867][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 15:09:22][351799520154867][311 ms][DEBUG] START check_boot_completed [2025-08-26 15:09:22][351799520154867][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:09:22][351799520154867][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 15:09:22][351799520154867][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:09:22][351799520154867][406 ms][DEBUG] SU: done in 49 ms; out [2025-08-26 15:09:22][351799520154867][406 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-26 15:09:22][351799520154867][407 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:09:22][351799520154867][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351799520154867\",\"model\":\"SM-T638U\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"N14\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7844\"}'\'' -e'"" [2025-08-26 15:09:22][351799520154867][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:09:22][351799520154867][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351799520154867\",\"model\":\"SM-T638U\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"N14\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7844\"}'\'' -e'"" [2025-08-26 15:09:26][351799520154867][4481 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8831b520-8da8-4082-932a-877e5deb4bc5","id":"QR_8831b520-8da8-4082-932a-877e5deb4bc5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:09:26][351799520154867][4638 ms][DEBUG] proc_open done in 4231 ms; code=255; res.len=3343 [2025-08-26 15:09:26][351799520154867][4638 ms][DEBUG] END runCmdUntilRes#1 in 4231 ms [2025-08-26 15:09:26][351799520154867][4638 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:09:28][357435840351131][0 ms][INFO] === Request start === [2025-08-26 15:09:28][357435840351131][1 ms][DEBUG] START check_scloud [2025-08-26 15:09:28][357435840351131][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:09:29][357435840351131][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 23509 5016 25093488 241528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:09:29][357435840351131][291 ms][DEBUG] targetPkg: running [2025-08-26 15:09:29][357435840351131][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-26 15:09:29][357435840351131][291 ms][DEBUG] START check_boot_completed [2025-08-26 15:09:29][357435840351131][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:09:29][357435840351131][338 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:09:29][357435840351131][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:09:29][357435840351131][400 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 15:09:29][357435840351131][400 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 15:09:29][357435840351131][400 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:09:29][357435840351131][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840351131\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9332\"}'\'' -e'"" [2025-08-26 15:09:29][357435840351131][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:09:29][357435840351131][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840351131\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9332\"}'\'' -e'"" [2025-08-26 15:09:33][357435840351131][4352 ms][DEBUG] proc_open done in 3952 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 15:09:33][357435840351131][4352 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-26 15:09:33][357435840351131][4352 ms][WARN] Detected error: Process with pid 23509 either refused to load frida-agent, or terminated during injection [2025-08-26 15:09:33][357435840351131][4352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 15:09:33][357435840351131][4493 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 15:09:33][357435840351131][4493 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 15:09:33][357435840351131][4493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 15:09:33][357435840351131][4602 ms][DEBUG] SU: done in 110 ms; out [2025-08-26 15:09:33][357435840351131][4603 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 15:09:33][357435840351131][4743 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 15:09:35][357435840351131][6758 ms][DEBUG] START check_boot_completed [2025-08-26 15:09:35][357435840351131][6758 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:09:35][357435840351131][6805 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:09:35][357435840351131][6805 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:09:35][357435840351131][6867 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 15:09:35][357435840351131][6867 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 15:09:38][357435840351131][9882 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 15:09:38][357435840351131][9882 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435840351131\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9332\"}'\'' -e'"" [2025-08-26 15:09:43][357435840351131][14350 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0c01adf1-359c-484f-8b7a-cedff6375844","id":"QR_0c01adf1-359c-484f-8b7a-cedff6375844","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:09:43][357435840351131][14506 ms][DEBUG] proc_open done in 4624 ms; code=255; res.len=3343 [2025-08-26 15:09:43][357435840351131][14506 ms][DEBUG] END runCmdUntilRes#2 in 4624 ms [2025-08-26 15:09:43][357435840351131][14506 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:11:03][358077200685895][0 ms][INFO] === Request start === [2025-08-26 15:11:03][358077200685895][0 ms][DEBUG] START check_scloud [2025-08-26 15:11:03][358077200685895][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:11:03][358077200685895][295 ms][DEBUG] SU: done in 295 ms; outu0_a118 24771 5016 23677844 127372 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:11:03][358077200685895][295 ms][DEBUG] targetPkg: running [2025-08-26 15:11:03][358077200685895][295 ms][DEBUG] END check_scloud in 295 ms [2025-08-26 15:11:03][358077200685895][295 ms][DEBUG] START check_boot_completed [2025-08-26 15:11:03][358077200685895][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:11:03][358077200685895][326 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 15:11:03][358077200685895][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:11:03][358077200685895][373 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:11:03][358077200685895][373 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 15:11:03][358077200685895][373 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:11:03][358077200685895][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358077200685895\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2559\"}'\'' -e'"" [2025-08-26 15:11:03][358077200685895][373 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:11:03][358077200685895][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358077200685895\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUH\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2559\"}'\'' -e'"" [2025-08-26 15:11:07][358077200685895][4028 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_70ff9263-0458-4b27-b14b-49eb756a46f4","id":"QR_70ff9263-0458-4b27-b14b-49eb756a46f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:11:07][358077200685895][4185 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-26 15:11:07][358077200685895][4185 ms][DEBUG] END runCmdUntilRes#1 in 3812 ms [2025-08-26 15:11:07][358077200685895][4185 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:11:10][352350278246825][0 ms][INFO] === Request start === [2025-08-26 15:11:10][352350278246825][0 ms][DEBUG] START check_scloud [2025-08-26 15:11:10][352350278246825][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:11:10][352350278246825][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 24771 5016 23872056 138200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:11:10][352350278246825][294 ms][DEBUG] targetPkg: running [2025-08-26 15:11:10][352350278246825][294 ms][DEBUG] END check_scloud in 294 ms [2025-08-26 15:11:10][352350278246825][294 ms][DEBUG] START check_boot_completed [2025-08-26 15:11:10][352350278246825][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:11:10][352350278246825][325 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 15:11:10][352350278246825][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:11:10][352350278246825][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:11:10][352350278246825][372 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 15:11:10][352350278246825][372 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:11:10][352350278246825][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350278246825\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7344\"}'\'' -e'"" [2025-08-26 15:11:10][352350278246825][372 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:11:10][352350278246825][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350278246825\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7344\"}'\'' -e'"" [2025-08-26 15:11:14][352350278246825][3855 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f6d47d92-4020-44f1-8bfe-02acec580572","id":"QR_f6d47d92-4020-44f1-8bfe-02acec580572","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:11:14][352350278246825][4012 ms][DEBUG] proc_open done in 3640 ms; code=255; res.len=3343 [2025-08-26 15:11:14][352350278246825][4012 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-08-26 15:11:14][352350278246825][4012 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:12:03][354068195599716][0 ms][INFO] === Request start === [2025-08-26 15:12:03][354068195599716][1 ms][DEBUG] START check_scloud [2025-08-26 15:12:03][354068195599716][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:12:03][354068195599716][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 24771 5016 23961188 150264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:12:03][354068195599716][276 ms][DEBUG] targetPkg: running [2025-08-26 15:12:03][354068195599716][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-26 15:12:03][354068195599716][276 ms][DEBUG] START check_boot_completed [2025-08-26 15:12:03][354068195599716][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:12:03][354068195599716][323 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:12:03][354068195599716][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:12:04][354068195599716][401 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 15:12:04][354068195599716][401 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 15:12:04][354068195599716][401 ms][DEBUG] START check_internet [2025-08-26 15:12:04][354068195599716][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:12:04][354068195599716][885 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.845/200.845/200.845/0.000 ms\n [2025-08-26 15:12:04][354068195599716][885 ms][DEBUG] check_internet: online [2025-08-26 15:12:04][354068195599716][885 ms][DEBUG] END check_internet in 485 ms [2025-08-26 15:12:04][354068195599716][885 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:12:04][354068195599716][885 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195599716\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3868\"}'\'' -e'"" [2025-08-26 15:12:04][354068195599716][885 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:12:04][354068195599716][886 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195599716\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3868\"}'\'' -e'"" [2025-08-26 15:12:09][354068195599716][5415 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_658fe31b-8c96-41f0-8764-b30f69023504","id":"QR_658fe31b-8c96-41f0-8764-b30f69023504","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:12:09][354068195599716][5571 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-08-26 15:12:09][354068195599716][5571 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-08-26 15:12:09][354068195599716][5571 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:12:11][356356738746581][0 ms][INFO] === Request start === [2025-08-26 15:12:11][356356738746581][1 ms][DEBUG] START check_scloud [2025-08-26 15:12:11][356356738746581][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:12:12][356356738746581][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 24771 5016 24120300 161328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:12:12][356356738746581][301 ms][DEBUG] targetPkg: running [2025-08-26 15:12:12][356356738746581][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 15:12:12][356356738746581][301 ms][DEBUG] START check_boot_completed [2025-08-26 15:12:12][356356738746581][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:12:12][356356738746581][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 15:12:12][356356738746581][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:12:12][356356738746581][409 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 15:12:12][356356738746581][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 15:12:12][356356738746581][410 ms][DEBUG] START check_internet [2025-08-26 15:12:12][356356738746581][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:12:12][356356738746581][691 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=161 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 161.129/161.129/161.129/0.000 ms\n [2025-08-26 15:12:12][356356738746581][691 ms][DEBUG] check_internet: online [2025-08-26 15:12:12][356356738746581][691 ms][DEBUG] END check_internet in 282 ms [2025-08-26 15:12:12][356356738746581][691 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:12:12][356356738746581][691 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356356738746581\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1952\"}'\'' -e'"" [2025-08-26 15:12:12][356356738746581][691 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:12:12][356356738746581][691 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356356738746581\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1952\"}'\'' -e'"" [2025-08-26 15:12:16][356356738746581][4346 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_51c6913d-2842-4a8b-a1c1-6a67e390a3a1","id":"QR_51c6913d-2842-4a8b-a1c1-6a67e390a3a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:12:16][356356738746581][4502 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-26 15:12:16][356356738746581][4502 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-26 15:12:16][356356738746581][4502 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:14:04][352749383267594][1 ms][INFO] === Request start === [2025-08-26 15:14:04][352749383267594][1 ms][DEBUG] START check_scloud [2025-08-26 15:14:04][352749383267594][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:14:05][352749383267594][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 24771 5016 24264748 172584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:14:05][352749383267594][290 ms][DEBUG] targetPkg: running [2025-08-26 15:14:05][352749383267594][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-26 15:14:05][352749383267594][290 ms][DEBUG] START check_boot_completed [2025-08-26 15:14:05][352749383267594][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:14:05][352749383267594][337 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:14:05][352749383267594][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:14:05][352749383267594][415 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 15:14:05][352749383267594][415 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 15:14:05][352749383267594][415 ms][DEBUG] START check_internet [2025-08-26 15:14:05][352749383267594][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:14:05][352749383267594][712 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=154 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 154.525/154.525/154.525/0.000 ms\n [2025-08-26 15:14:05][352749383267594][712 ms][DEBUG] check_internet: online [2025-08-26 15:14:05][352749383267594][712 ms][DEBUG] END check_internet in 297 ms [2025-08-26 15:14:05][352749383267594][712 ms][DEBUG] rawBody.length=1149 [2025-08-26 15:14:05][352749383267594][712 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749383267594\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"BVO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4760\"}'\'' -e'"" [2025-08-26 15:14:05][352749383267594][713 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:14:05][352749383267594][713 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352749383267594\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"BVO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4760\"}'\'' -e'"" [2025-08-26 15:14:10][352749383267594][5757 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_49e3b6ce-1d3f-4acb-b338-9c5b58913bae","id":"QR_49e3b6ce-1d3f-4acb-b338-9c5b58913bae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:14:10][352749383267594][5914 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-08-26 15:14:10][352749383267594][5914 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-08-26 15:14:10][352749383267594][5914 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:14:15][353204667013362][0 ms][INFO] === Request start === [2025-08-26 15:14:15][353204667013362][1 ms][DEBUG] START check_scloud [2025-08-26 15:14:15][353204667013362][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:14:15][353204667013362][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 24771 5016 24397044 184384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:14:15][353204667013362][317 ms][DEBUG] targetPkg: running [2025-08-26 15:14:15][353204667013362][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-26 15:14:15][353204667013362][317 ms][DEBUG] START check_boot_completed [2025-08-26 15:14:15][353204667013362][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:14:15][353204667013362][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:14:15][353204667013362][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:14:15][353204667013362][411 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 15:14:15][353204667013362][411 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 15:14:15][353204667013362][412 ms][DEBUG] START check_internet [2025-08-26 15:14:15][353204667013362][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:14:16][353204667013362][739 ms][DEBUG] SU: done in 327 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=208 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 208.715/208.715/208.715/0.000 ms\n [2025-08-26 15:14:16][353204667013362][739 ms][DEBUG] check_internet: online [2025-08-26 15:14:16][353204667013362][739 ms][DEBUG] END check_internet in 327 ms [2025-08-26 15:14:16][353204667013362][739 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:14:16][353204667013362][739 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204667013362\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2999\"}'\'' -e'"" [2025-08-26 15:14:16][353204667013362][739 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:14:16][353204667013362][739 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204667013362\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2999\"}'\'' -e'"" [2025-08-26 15:14:19][353204667013362][4363 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c3c25e6a-d039-4cd2-944f-5dd6554ca0fc","id":"QR_c3c25e6a-d039-4cd2-944f-5dd6554ca0fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:14:20][353204667013362][4519 ms][DEBUG] proc_open done in 3779 ms; code=255; res.len=3343 [2025-08-26 15:14:20][353204667013362][4519 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-26 15:14:20][353204667013362][4519 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:15:03][358615314970156][0 ms][INFO] === Request start === [2025-08-26 15:15:03][358615314970156][0 ms][DEBUG] START check_scloud [2025-08-26 15:15:03][358615314970156][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:15:03][358615314970156][251 ms][DEBUG] SU: done in 251 ms; outu0_a118 24771 5016 24523060 195468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:15:03][358615314970156][251 ms][DEBUG] targetPkg: running [2025-08-26 15:15:03][358615314970156][251 ms][DEBUG] END check_scloud in 251 ms [2025-08-26 15:15:03][358615314970156][251 ms][DEBUG] START check_boot_completed [2025-08-26 15:15:03][358615314970156][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:15:03][358615314970156][298 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 15:15:03][358615314970156][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:15:03][358615314970156][345 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:15:03][358615314970156][345 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 15:15:03][358615314970156][345 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:15:03][358615314970156][345 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615314970156\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1502\"}'\'' -e'"" [2025-08-26 15:15:03][358615314970156][345 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:15:03][358615314970156][345 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615314970156\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1502\"}'\'' -e'"" [2025-08-26 15:15:07][358615314970156][3781 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4a3baacb-57c0-4061-b628-05229f7348e7","id":"QR_4a3baacb-57c0-4061-b628-05229f7348e7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:15:07][358615314970156][3937 ms][DEBUG] proc_open done in 3592 ms; code=255; res.len=3343 [2025-08-26 15:15:07][358615314970156][3937 ms][DEBUG] END runCmdUntilRes#1 in 3592 ms [2025-08-26 15:15:07][358615314970156][3937 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:17:03][350637545240959][1 ms][INFO] === Request start === [2025-08-26 15:17:03][350637545240959][1 ms][DEBUG] START check_scloud [2025-08-26 15:17:03][350637545240959][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:17:03][350637545240959][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 24771 5016 24652340 207700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:17:03][350637545240959][307 ms][DEBUG] targetPkg: running [2025-08-26 15:17:03][350637545240959][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 15:17:03][350637545240959][307 ms][DEBUG] START check_boot_completed [2025-08-26 15:17:03][350637545240959][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:17:03][350637545240959][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:17:03][350637545240959][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:17:03][350637545240959][416 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 15:17:03][350637545240959][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 15:17:03][350637545240959][416 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:17:03][350637545240959][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637545240959\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7523\"}'\'' -e'"" [2025-08-26 15:17:03][350637545240959][417 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:17:03][350637545240959][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637545240959\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7523\"}'\'' -e'"" [2025-08-26 15:17:07][350637545240959][4790 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d56a3513-278c-4582-a67b-b54cda582574","id":"QR_d56a3513-278c-4582-a67b-b54cda582574","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:17:08][350637545240959][4946 ms][DEBUG] proc_open done in 4529 ms; code=255; res.len=3343 [2025-08-26 15:17:08][350637545240959][4946 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-08-26 15:17:08][350637545240959][4946 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:18:03][357040733912161][0 ms][INFO] === Request start === [2025-08-26 15:18:03][357040733912161][1 ms][DEBUG] START check_scloud [2025-08-26 15:18:03][357040733912161][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:18:03][357040733912161][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 24771 5016 24790680 218580 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:18:03][357040733912161][295 ms][DEBUG] targetPkg: running [2025-08-26 15:18:03][357040733912161][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-26 15:18:03][357040733912161][295 ms][DEBUG] START check_boot_completed [2025-08-26 15:18:03][357040733912161][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:18:04][357040733912161][340 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 15:18:04][357040733912161][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:18:04][357040733912161][402 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 15:18:04][357040733912161][402 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-26 15:18:04][357040733912161][403 ms][DEBUG] START check_internet [2025-08-26 15:18:04][357040733912161][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:18:04][357040733912161][918 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.878/201.878/201.878/0.000 ms\n [2025-08-26 15:18:04][357040733912161][918 ms][DEBUG] check_internet: online [2025-08-26 15:18:04][357040733912161][918 ms][DEBUG] END check_internet in 515 ms [2025-08-26 15:18:04][357040733912161][918 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:18:04][357040733912161][918 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040733912161\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9283\"}'\'' -e'"" [2025-08-26 15:18:04][357040733912161][918 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:18:04][357040733912161][918 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040733912161\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9283\"}'\'' -e'"" [2025-08-26 15:18:08][357040733912161][4573 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_304017c3-dcb1-4320-a6ba-541078aea484","id":"QR_304017c3-dcb1-4320-a6ba-541078aea484","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:18:08][357040733912161][4729 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-26 15:18:08][357040733912161][4729 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-26 15:18:08][357040733912161][4729 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:18:12][352610710618323][0 ms][INFO] === Request start === [2025-08-26 15:18:12][352610710618323][1 ms][DEBUG] START check_scloud [2025-08-26 15:18:12][352610710618323][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:18:12][352610710618323][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 24771 5016 24943524 230460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:18:12][352610710618323][315 ms][DEBUG] targetPkg: running [2025-08-26 15:18:12][352610710618323][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-26 15:18:12][352610710618323][315 ms][DEBUG] START check_boot_completed [2025-08-26 15:18:12][352610710618323][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:18:12][352610710618323][346 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 15:18:12][352610710618323][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:18:12][352610710618323][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:18:12][352610710618323][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 15:18:12][352610710618323][393 ms][DEBUG] START check_internet [2025-08-26 15:18:12][352610710618323][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:18:12][352610710618323][612 ms][DEBUG] SU: done in 218 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=114 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 114.409/114.409/114.409/0.000 ms\n [2025-08-26 15:18:12][352610710618323][612 ms][DEBUG] check_internet: online [2025-08-26 15:18:12][352610710618323][612 ms][DEBUG] END check_internet in 219 ms [2025-08-26 15:18:12][352610710618323][612 ms][DEBUG] rawBody.length=1149 [2025-08-26 15:18:12][352610710618323][612 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352610710618323\",\"model\":\"SM-A356U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3600\"}'\'' -e'"" [2025-08-26 15:18:12][352610710618323][612 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:18:12][352610710618323][612 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352610710618323\",\"model\":\"SM-A356U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3600\"}'\'' -e'"" [2025-08-26 15:18:17][352610710618323][5751 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bba6b85c-bb5e-4f1c-ace7-399b460eed08","id":"QR_bba6b85c-bb5e-4f1c-ace7-399b460eed08","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:18:17][352610710618323][5907 ms][DEBUG] proc_open done in 5295 ms; code=255; res.len=3343 [2025-08-26 15:18:17][352610710618323][5907 ms][DEBUG] END runCmdUntilRes#1 in 5295 ms [2025-08-26 15:18:17][352610710618323][5907 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:20:04][358849566201172][1 ms][INFO] === Request start === [2025-08-26 15:20:04][358849566201172][1 ms][DEBUG] START check_scloud [2025-08-26 15:20:04][358849566201172][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:20:04][358849566201172][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 24771 5016 25063524 241560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:20:04][358849566201172][305 ms][DEBUG] targetPkg: running [2025-08-26 15:20:04][358849566201172][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 15:20:04][358849566201172][305 ms][DEBUG] START check_boot_completed [2025-08-26 15:20:04][358849566201172][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:20:04][358849566201172][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 15:20:04][358849566201172][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:20:04][358849566201172][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:20:04][358849566201172][398 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 15:20:04][358849566201172][399 ms][DEBUG] START check_internet [2025-08-26 15:20:04][358849566201172][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:20:05][358849566201172][945 ms][DEBUG] SU: done in 546 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.911/201.911/201.911/0.000 ms\n [2025-08-26 15:20:05][358849566201172][945 ms][DEBUG] check_internet: online [2025-08-26 15:20:05][358849566201172][945 ms][DEBUG] END check_internet in 546 ms [2025-08-26 15:20:05][358849566201172][945 ms][DEBUG] rawBody.length=1158 [2025-08-26 15:20:05][358849566201172][945 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358849566201172\",\"model\":\"SM-X210\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9TX60KQS0A\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XEV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2781\"}'\'' -e'"" [2025-08-26 15:20:05][358849566201172][945 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:20:05][358849566201172][945 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358849566201172\",\"model\":\"SM-X210\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9TX60KQS0A\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XEV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2781\"}'\'' -e'"" [2025-08-26 15:20:09][358849566201172][4616 ms][DEBUG] proc_open done in 3671 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 15:20:09][358849566201172][4616 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-26 15:20:09][358849566201172][4616 ms][WARN] Detected error: Process with pid 24771 either refused to load frida-agent, or terminated during injection [2025-08-26 15:20:09][358849566201172][4616 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 15:20:09][358849566201172][4757 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 15:20:09][358849566201172][4757 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 15:20:09][358849566201172][4757 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 15:20:09][358849566201172][4881 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 15:20:09][358849566201172][4881 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 15:20:09][358849566201172][5022 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 15:20:11][358849566201172][7037 ms][DEBUG] START check_boot_completed [2025-08-26 15:20:11][358849566201172][7037 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:20:11][358849566201172][7084 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:20:11][358849566201172][7084 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:20:11][358849566201172][7132 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 15:20:11][358849566201172][7133 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-26 15:20:14][358849566201172][10146 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 15:20:14][358849566201172][10146 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358849566201172\",\"model\":\"SM-X210\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9TX60KQS0A\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XEV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2781\"}'\'' -e'"" [2025-08-26 15:20:18][358849566201172][13754 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ce068621-63c8-494d-b67d-845949858c25","id":"QR_ce068621-63c8-494d-b67d-845949858c25","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:20:18][358849566201172][13910 ms][DEBUG] proc_open done in 3765 ms; code=255; res.len=3343 [2025-08-26 15:20:18][358849566201172][13910 ms][DEBUG] END runCmdUntilRes#2 in 3765 ms [2025-08-26 15:20:18][358849566201172][13910 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:21:03][350013882388753][0 ms][INFO] === Request start === [2025-08-26 15:21:03][350013882388753][0 ms][DEBUG] START check_scloud [2025-08-26 15:21:03][350013882388753][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:21:03][350013882388753][290 ms][DEBUG] SU: done in 290 ms; outu0_a118 26086 5016 23743920 127112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:21:03][350013882388753][290 ms][DEBUG] targetPkg: running [2025-08-26 15:21:03][350013882388753][290 ms][DEBUG] END check_scloud in 290 ms [2025-08-26 15:21:03][350013882388753][290 ms][DEBUG] START check_boot_completed [2025-08-26 15:21:03][350013882388753][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:21:03][350013882388753][322 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 15:21:03][350013882388753][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:21:03][350013882388753][369 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:21:03][350013882388753][369 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 15:21:03][350013882388753][369 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:21:03][350013882388753][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013882388753\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6494\"}'\'' -e'"" [2025-08-26 15:21:03][350013882388753][369 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:21:03][350013882388753][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013882388753\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6494\"}'\'' -e'"" [2025-08-26 15:21:07][350013882388753][4024 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cd64a793-43aa-402d-88d2-315794663a0e","id":"QR_cd64a793-43aa-402d-88d2-315794663a0e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:21:07][350013882388753][4180 ms][DEBUG] proc_open done in 3812 ms; code=255; res.len=3343 [2025-08-26 15:21:07][350013882388753][4180 ms][DEBUG] END runCmdUntilRes#1 in 3812 ms [2025-08-26 15:21:07][350013882388753][4180 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:23:04][357618782617938][1 ms][INFO] === Request start === [2025-08-26 15:23:04][357618782617938][1 ms][DEBUG] START check_scloud [2025-08-26 15:23:04][357618782617938][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:23:04][357618782617938][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 26086 5016 23857764 137716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:23:04][357618782617938][251 ms][DEBUG] targetPkg: running [2025-08-26 15:23:04][357618782617938][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-26 15:23:04][357618782617938][251 ms][DEBUG] START check_boot_completed [2025-08-26 15:23:04][357618782617938][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:23:04][357618782617938][282 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 15:23:04][357618782617938][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:23:04][357618782617938][329 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:23:04][357618782617938][329 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 15:23:04][357618782617938][329 ms][DEBUG] rawBody.length=1149 [2025-08-26 15:23:04][357618782617938][329 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357618782617938\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"L15\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7738\"}'\'' -e'"" [2025-08-26 15:23:04][357618782617938][329 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:23:04][357618782617938][329 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357618782617938\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"L15\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7738\"}'\'' -e'"" [2025-08-26 15:23:09][357618782617938][5296 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f355622e-109b-4ffc-9b6f-25d3d6a67418","id":"QR_f355622e-109b-4ffc-9b6f-25d3d6a67418","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:23:10][357618782617938][5453 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-08-26 15:23:10][357618782617938][5453 ms][DEBUG] END runCmdUntilRes#1 in 5124 ms [2025-08-26 15:23:10][357618782617938][5453 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:23:14][350042734345067][0 ms][INFO] === Request start === [2025-08-26 15:23:14][350042734345067][1 ms][DEBUG] START check_scloud [2025-08-26 15:23:14][350042734345067][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:23:15][350042734345067][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 26086 5016 24016556 149420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:23:15][350042734345067][257 ms][DEBUG] targetPkg: running [2025-08-26 15:23:15][350042734345067][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-26 15:23:15][350042734345067][257 ms][DEBUG] START check_boot_completed [2025-08-26 15:23:15][350042734345067][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:23:15][350042734345067][304 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:23:15][350042734345067][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:23:15][350042734345067][366 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 15:23:15][350042734345067][366 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 15:23:15][350042734345067][366 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:23:15][350042734345067][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042734345067\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2414\"}'\'' -e'"" [2025-08-26 15:23:15][350042734345067][366 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:23:15][350042734345067][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042734345067\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2414\"}'\'' -e'"" [2025-08-26 15:23:19][350042734345067][4240 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_29247c83-b85e-439a-acef-3268b4e52bd6","id":"QR_29247c83-b85e-439a-acef-3268b4e52bd6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:23:19][350042734345067][4396 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-26 15:23:19][350042734345067][4396 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-26 15:23:19][350042734345067][4396 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:25:03][354360419459557][0 ms][INFO] === Request start === [2025-08-26 15:25:03][354360419459557][1 ms][DEBUG] START check_scloud [2025-08-26 15:25:03][354360419459557][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:25:04][354360419459557][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 26086 5016 24159084 160724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:25:04][354360419459557][304 ms][DEBUG] targetPkg: running [2025-08-26 15:25:04][354360419459557][304 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 15:25:04][354360419459557][305 ms][DEBUG] START check_boot_completed [2025-08-26 15:25:04][354360419459557][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:25:04][354360419459557][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:25:04][354360419459557][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:25:04][354360419459557][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:25:04][354360419459557][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 15:25:04][354360419459557][398 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:25:04][354360419459557][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360419459557\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5518\"}'\'' -e'"" [2025-08-26 15:25:04][354360419459557][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:25:04][354360419459557][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360419459557\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5518\"}'\'' -e'"" [2025-08-26 15:25:08][354360419459557][4334 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3853bb03-1146-4d17-bf72-040461ddb22d","id":"QR_3853bb03-1146-4d17-bf72-040461ddb22d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:25:08][354360419459557][4491 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-08-26 15:25:08][354360419459557][4491 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-08-26 15:25:08][354360419459557][4491 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:25:10][355045114983204][1 ms][INFO] === Request start === [2025-08-26 15:25:10][355045114983204][1 ms][DEBUG] START check_scloud [2025-08-26 15:25:10][355045114983204][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:25:11][355045114983204][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 26086 5016 24293492 171632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:25:11][355045114983204][289 ms][DEBUG] targetPkg: running [2025-08-26 15:25:11][355045114983204][289 ms][DEBUG] END check_scloud in 288 ms [2025-08-26 15:25:11][355045114983204][289 ms][DEBUG] START check_boot_completed [2025-08-26 15:25:11][355045114983204][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:25:11][355045114983204][336 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:25:11][355045114983204][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:25:11][355045114983204][414 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 15:25:11][355045114983204][414 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 15:25:11][355045114983204][414 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:25:11][355045114983204][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355045114983204\",\"model\":\"SM-N770F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7253\"}'\'' -e'"" [2025-08-26 15:25:11][355045114983204][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:25:11][355045114983204][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355045114983204\",\"model\":\"SM-N770F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7253\"}'\'' -e'"" [2025-08-26 15:25:14][355045114983204][4194 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7505703d-ed51-421e-9e7a-2ca76a4d9efb","id":"QR_7505703d-ed51-421e-9e7a-2ca76a4d9efb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:25:15][355045114983204][4350 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-26 15:25:15][355045114983204][4350 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-26 15:25:15][355045114983204][4350 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:25:17][350100066049697][0 ms][INFO] === Request start === [2025-08-26 15:25:17][350100066049697][1 ms][DEBUG] START check_scloud [2025-08-26 15:25:17][350100066049697][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:25:17][350100066049697][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 26086 5016 24413564 183484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:25:17][350100066049697][286 ms][DEBUG] targetPkg: running [2025-08-26 15:25:17][350100066049697][286 ms][DEBUG] END check_scloud in 285 ms [2025-08-26 15:25:17][350100066049697][286 ms][DEBUG] START check_boot_completed [2025-08-26 15:25:17][350100066049697][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:25:17][350100066049697][332 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 15:25:17][350100066049697][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:25:17][350100066049697][395 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 15:25:17][350100066049697][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 15:25:17][350100066049697][395 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:25:17][350100066049697][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100066049697\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6746\"}'\'' -e'"" [2025-08-26 15:25:17][350100066049697][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:25:17][350100066049697][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100066049697\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6746\"}'\'' -e'"" [2025-08-26 15:25:21][350100066049697][4097 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b1632a3b-370c-4956-92a6-76e852c1e981","id":"QR_b1632a3b-370c-4956-92a6-76e852c1e981","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:25:21][350100066049697][4253 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-26 15:25:21][350100066049697][4253 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-26 15:25:21][350100066049697][4253 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:25:24][357712352209794][0 ms][INFO] === Request start === [2025-08-26 15:25:24][357712352209794][1 ms][DEBUG] START check_scloud [2025-08-26 15:25:24][357712352209794][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:25:24][357712352209794][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 26086 5016 24517216 195464 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:25:24][357712352209794][309 ms][DEBUG] targetPkg: running [2025-08-26 15:25:24][357712352209794][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 15:25:24][357712352209794][309 ms][DEBUG] START check_boot_completed [2025-08-26 15:25:24][357712352209794][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:25:24][357712352209794][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 15:25:24][357712352209794][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:25:24][357712352209794][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:25:24][357712352209794][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 15:25:24][357712352209794][402 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:25:24][357712352209794][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712352209794\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9908\"}'\'' -e'"" [2025-08-26 15:25:24][357712352209794][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:25:24][357712352209794][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712352209794\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9908\"}'\'' -e'"" [2025-08-26 15:25:28][357712352209794][4214 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c07bb819-4b3c-4f56-9148-43100291b931","id":"QR_c07bb819-4b3c-4f56-9148-43100291b931","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:25:28][357712352209794][4370 ms][DEBUG] proc_open done in 3968 ms; code=255; res.len=3343 [2025-08-26 15:25:28][357712352209794][4370 ms][DEBUG] END runCmdUntilRes#1 in 3968 ms [2025-08-26 15:25:28][357712352209794][4370 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:26:04][354091573663870][0 ms][INFO] === Request start === [2025-08-26 15:26:04][354091573663870][1 ms][DEBUG] START check_scloud [2025-08-26 15:26:04][354091573663870][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:26:05][354091573663870][258 ms][DEBUG] SU: done in 258 ms; outu0_a118 26086 5016 24594172 206748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:26:05][354091573663870][259 ms][DEBUG] targetPkg: running [2025-08-26 15:26:05][354091573663870][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-26 15:26:05][354091573663870][259 ms][DEBUG] START check_boot_completed [2025-08-26 15:26:05][354091573663870][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:26:05][354091573663870][305 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:26:05][354091573663870][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:26:05][354091573663870][368 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 15:26:05][354091573663870][368 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 15:26:05][354091573663870][368 ms][DEBUG] START check_internet [2025-08-26 15:26:05][354091573663870][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:26:05][354091573663870][836 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=151 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 151.143/151.143/151.143/0.000 ms\n [2025-08-26 15:26:05][354091573663870][837 ms][DEBUG] check_internet: online [2025-08-26 15:26:05][354091573663870][837 ms][DEBUG] END check_internet in 469 ms [2025-08-26 15:26:05][354091573663870][837 ms][DEBUG] rawBody.length=1149 [2025-08-26 15:26:05][354091573663870][837 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354091573663870\",\"model\":\"SM-M546B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8350\"}'\'' -e'"" [2025-08-26 15:26:05][354091573663870][837 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:26:05][354091573663870][837 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354091573663870\",\"model\":\"SM-M546B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8350\"}'\'' -e'"" [2025-08-26 15:26:10][354091573663870][5773 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cc39d783-fa91-48fa-bb5b-4d873c2d2724","id":"QR_cc39d783-fa91-48fa-bb5b-4d873c2d2724","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:26:10][354091573663870][5929 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-08-26 15:26:10][354091573663870][5929 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-08-26 15:26:10][354091573663870][5929 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:26:15][356414817667390][0 ms][INFO] === Request start === [2025-08-26 15:26:15][356414817667390][1 ms][DEBUG] START check_scloud [2025-08-26 15:26:15][356414817667390][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:26:16][356414817667390][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 26086 5016 24726532 217372 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:26:16][356414817667390][257 ms][DEBUG] targetPkg: running [2025-08-26 15:26:16][356414817667390][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-26 15:26:16][356414817667390][257 ms][DEBUG] START check_boot_completed [2025-08-26 15:26:16][356414817667390][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:26:16][356414817667390][302 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 15:26:16][356414817667390][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:26:16][356414817667390][349 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:26:16][356414817667390][349 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-26 15:26:16][356414817667390][349 ms][DEBUG] START check_internet [2025-08-26 15:26:16][356414817667390][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:26:16][356414817667390][630 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=150 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 150.592/150.592/150.592/0.000 ms\n [2025-08-26 15:26:16][356414817667390][630 ms][DEBUG] check_internet: online [2025-08-26 15:26:16][356414817667390][630 ms][DEBUG] END check_internet in 281 ms [2025-08-26 15:26:16][356414817667390][630 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:26:16][356414817667390][630 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414817667390\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4335\"}'\'' -e'"" [2025-08-26 15:26:16][356414817667390][630 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:26:16][356414817667390][630 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414817667390\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4335\"}'\'' -e'"" [2025-08-26 15:26:20][356414817667390][4535 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7a317575-4b2e-4dc2-90b2-4a9582dbce18","id":"QR_7a317575-4b2e-4dc2-90b2-4a9582dbce18","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:26:20][356414817667390][4691 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-08-26 15:26:20][356414817667390][4692 ms][DEBUG] END runCmdUntilRes#1 in 4062 ms [2025-08-26 15:26:20][356414817667390][4692 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:26:22][355322294297451][0 ms][INFO] === Request start === [2025-08-26 15:26:22][355322294297451][1 ms][DEBUG] START check_scloud [2025-08-26 15:26:22][355322294297451][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:26:22][355322294297451][295 ms][DEBUG] SU: done in 295 ms; outu0_a118 26086 5016 24875276 229440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:26:22][355322294297451][295 ms][DEBUG] targetPkg: running [2025-08-26 15:26:22][355322294297451][295 ms][DEBUG] END check_scloud in 295 ms [2025-08-26 15:26:22][355322294297451][295 ms][DEBUG] START check_boot_completed [2025-08-26 15:26:22][355322294297451][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:26:22][355322294297451][327 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 15:26:22][355322294297451][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:26:22][355322294297451][374 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:26:22][355322294297451][374 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 15:26:22][355322294297451][374 ms][DEBUG] START check_internet [2025-08-26 15:26:22][355322294297451][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:26:22][355322294297451][670 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=189 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 189.111/189.111/189.111/0.000 ms\n [2025-08-26 15:26:22][355322294297451][671 ms][DEBUG] check_internet: online [2025-08-26 15:26:22][355322294297451][671 ms][DEBUG] END check_internet in 297 ms [2025-08-26 15:26:22][355322294297451][671 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:26:22][355322294297451][671 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355322294297451\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6293\"}'\'' -e'"" [2025-08-26 15:26:22][355322294297451][671 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:26:22][355322294297451][671 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355322294297451\",\"model\":\"SM-A556B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6293\"}'\'' -e'"" [2025-08-26 15:26:26][355322294297451][4201 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_006c6830-72a2-4fac-a07d-322d6268e247","id":"QR_006c6830-72a2-4fac-a07d-322d6268e247","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:26:26][355322294297451][4357 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=3343 [2025-08-26 15:26:26][355322294297451][4357 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-08-26 15:26:26][355322294297451][4357 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:27:03][352682505143379][0 ms][INFO] === Request start === [2025-08-26 15:27:03][352682505143379][1 ms][DEBUG] START check_scloud [2025-08-26 15:27:03][352682505143379][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:27:03][352682505143379][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 26086 5016 24995240 241844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:27:03][352682505143379][304 ms][DEBUG] targetPkg: running [2025-08-26 15:27:03][352682505143379][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-26 15:27:03][352682505143379][304 ms][DEBUG] START check_boot_completed [2025-08-26 15:27:03][352682505143379][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:27:03][352682505143379][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:27:03][352682505143379][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:27:03][352682505143379][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 15:27:03][352682505143379][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 15:27:03][352682505143379][413 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:27:03][352682505143379][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682505143379\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7320\"}'\'' -e'"" [2025-08-26 15:27:03][352682505143379][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:27:03][352682505143379][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682505143379\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7320\"}'\'' -e'"" [2025-08-26 15:27:07][352682505143379][4022 ms][DEBUG] proc_open done in 3608 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 15:27:07][352682505143379][4022 ms][DEBUG] END runCmdUntilRes#1 in 3609 ms [2025-08-26 15:27:07][352682505143379][4022 ms][WARN] Detected error: Process with pid 26086 either refused to load frida-agent, or terminated during injection [2025-08-26 15:27:07][352682505143379][4022 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 15:27:07][352682505143379][4162 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 15:27:07][352682505143379][4162 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 15:27:07][352682505143379][4162 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 15:27:07][352682505143379][4287 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 15:27:07][352682505143379][4287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 15:27:07][352682505143379][4443 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 15:27:09][352682505143379][6458 ms][DEBUG] START check_boot_completed [2025-08-26 15:27:09][352682505143379][6458 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:27:09][352682505143379][6505 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:27:09][352682505143379][6506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:27:09][352682505143379][6584 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 15:27:09][352682505143379][6584 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 15:27:12][352682505143379][9598 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 15:27:12][352682505143379][9598 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682505143379\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7320\"}'\'' -e'"" [2025-08-26 15:27:17][352682505143379][14066 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d5fa53ff-5134-4d0f-bc32-865e95587312","id":"QR_d5fa53ff-5134-4d0f-bc32-865e95587312","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:27:17][352682505143379][14222 ms][DEBUG] proc_open done in 4624 ms; code=255; res.len=3343 [2025-08-26 15:27:17][352682505143379][14222 ms][DEBUG] END runCmdUntilRes#2 in 4624 ms [2025-08-26 15:27:17][352682505143379][14222 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:27:19][351044510736039][1 ms][INFO] === Request start === [2025-08-26 15:27:19][351044510736039][1 ms][DEBUG] START check_scloud [2025-08-26 15:27:19][351044510736039][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:27:20][351044510736039][241 ms][DEBUG] SU: done in 240 ms; outu0_a118 27625 5016 23828120 124760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:27:20][351044510736039][241 ms][DEBUG] targetPkg: running [2025-08-26 15:27:20][351044510736039][241 ms][DEBUG] END check_scloud in 240 ms [2025-08-26 15:27:20][351044510736039][241 ms][DEBUG] START check_boot_completed [2025-08-26 15:27:20][351044510736039][241 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:27:20][351044510736039][287 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 15:27:20][351044510736039][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:27:20][351044510736039][365 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 15:27:20][351044510736039][365 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-26 15:27:20][351044510736039][365 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:27:20][351044510736039][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044510736039\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8701\"}'\'' -e'"" [2025-08-26 15:27:20][351044510736039][366 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:27:20][351044510736039][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044510736039\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8701\"}'\'' -e'"" [2025-08-26 15:27:24][351044510736039][4255 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7ed57e7f-2827-44f8-9574-2a673bf566ac","id":"QR_7ed57e7f-2827-44f8-9574-2a673bf566ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:27:24][351044510736039][4411 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3343 [2025-08-26 15:27:24][351044510736039][4411 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-08-26 15:27:24][351044510736039][4411 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:30:03][353684144812462][1 ms][INFO] === Request start === [2025-08-26 15:30:03][353684144812462][1 ms][DEBUG] START check_scloud [2025-08-26 15:30:03][353684144812462][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:30:03][353684144812462][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 27625 5016 23857580 95148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:30:03][353684144812462][296 ms][DEBUG] targetPkg: running [2025-08-26 15:30:03][353684144812462][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-26 15:30:03][353684144812462][296 ms][DEBUG] START check_boot_completed [2025-08-26 15:30:03][353684144812462][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:30:03][353684144812462][327 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 15:30:03][353684144812462][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:30:03][353684144812462][390 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 15:30:03][353684144812462][390 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 15:30:03][353684144812462][390 ms][DEBUG] START check_internet [2025-08-26 15:30:03][353684144812462][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:30:04][353684144812462][874 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.780/198.780/198.780/0.000 ms\n [2025-08-26 15:30:04][353684144812462][874 ms][DEBUG] check_internet: online [2025-08-26 15:30:04][353684144812462][874 ms][DEBUG] END check_internet in 484 ms [2025-08-26 15:30:04][353684144812462][874 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:30:04][353684144812462][874 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684144812462\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6546\"}'\'' -e'"" [2025-08-26 15:30:04][353684144812462][874 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:30:04][353684144812462][874 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684144812462\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6546\"}'\'' -e'"" [2025-08-26 15:30:08][353684144812462][4623 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c5dc52db-e0ce-405b-99f1-80229e21bf5c","id":"QR_c5dc52db-e0ce-405b-99f1-80229e21bf5c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:30:08][353684144812462][4779 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-26 15:30:08][353684144812462][4779 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-26 15:30:08][353684144812462][4779 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:32:03][352397453341350][0 ms][INFO] === Request start === [2025-08-26 15:32:03][352397453341350][1 ms][DEBUG] START check_scloud [2025-08-26 15:32:03][352397453341350][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:32:04][352397453341350][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 27625 5016 23981456 112264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:32:04][352397453341350][308 ms][DEBUG] targetPkg: running [2025-08-26 15:32:04][352397453341350][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-26 15:32:04][352397453341350][308 ms][DEBUG] START check_boot_completed [2025-08-26 15:32:04][352397453341350][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:32:04][352397453341350][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 15:32:04][352397453341350][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:32:04][352397453341350][433 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 15:32:04][352397453341350][433 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 15:32:04][352397453341350][433 ms][DEBUG] START check_internet [2025-08-26 15:32:04][352397453341350][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:32:04][352397453341350][714 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=140 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 140.106/140.106/140.106/0.000 ms\n [2025-08-26 15:32:04][352397453341350][714 ms][DEBUG] check_internet: online [2025-08-26 15:32:04][352397453341350][714 ms][DEBUG] END check_internet in 281 ms [2025-08-26 15:32:04][352397453341350][714 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:32:04][352397453341350][714 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453341350\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6319\"}'\'' -e'"" [2025-08-26 15:32:04][352397453341350][714 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:32:04][352397453341350][714 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397453341350\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6319\"}'\'' -e'"" [2025-08-26 15:32:08][352397453341350][4369 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0208da09-8fee-4322-82f2-fecf8600f330","id":"QR_0208da09-8fee-4322-82f2-fecf8600f330","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:32:08][352397453341350][4525 ms][DEBUG] proc_open done in 3811 ms; code=255; res.len=3343 [2025-08-26 15:32:08][352397453341350][4525 ms][DEBUG] END runCmdUntilRes#1 in 3811 ms [2025-08-26 15:32:08][352397453341350][4525 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:33:04][350341124469440][1 ms][INFO] === Request start === [2025-08-26 15:33:04][350341124469440][1 ms][DEBUG] START check_scloud [2025-08-26 15:33:04][350341124469440][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:33:04][350341124469440][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 27625 5016 24127988 130568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:33:04][350341124469440][302 ms][DEBUG] targetPkg: running [2025-08-26 15:33:04][350341124469440][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-26 15:33:04][350341124469440][302 ms][DEBUG] START check_boot_completed [2025-08-26 15:33:04][350341124469440][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:33:04][350341124469440][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 15:33:04][350341124469440][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:33:04][350341124469440][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:33:04][350341124469440][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 15:33:04][350341124469440][395 ms][DEBUG] rawBody.length=1149 [2025-08-26 15:33:04][350341124469440][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341124469440\",\"model\":\"SM-M135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3243\"}'\'' -e'"" [2025-08-26 15:33:04][350341124469440][396 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:33:04][350341124469440][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341124469440\",\"model\":\"SM-M135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3243\"}'\'' -e'"" [2025-08-26 15:33:09][350341124469440][4816 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e4a9213f-870a-4be1-8e4d-db8cf44396ef","id":"QR_e4a9213f-870a-4be1-8e4d-db8cf44396ef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:33:09][350341124469440][4972 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=3343 [2025-08-26 15:33:09][350341124469440][4972 ms][DEBUG] END runCmdUntilRes#1 in 4576 ms [2025-08-26 15:33:09][350341124469440][4972 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:33:15][356467783678841][0 ms][INFO] === Request start === [2025-08-26 15:33:15][356467783678841][1 ms][DEBUG] START check_scloud [2025-08-26 15:33:15][356467783678841][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:33:15][356467783678841][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 27625 5016 24256188 142228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:33:15][356467783678841][301 ms][DEBUG] targetPkg: running [2025-08-26 15:33:15][356467783678841][301 ms][DEBUG] END check_scloud in 301 ms [2025-08-26 15:33:15][356467783678841][301 ms][DEBUG] START check_boot_completed [2025-08-26 15:33:15][356467783678841][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:33:15][356467783678841][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 15:33:15][356467783678841][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:33:15][356467783678841][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:33:15][356467783678841][395 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 15:33:15][356467783678841][395 ms][DEBUG] rawBody.length=1149 [2025-08-26 15:33:15][356467783678841][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356467783678841\",\"model\":\"SM-X616B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9992\"}'\'' -e'"" [2025-08-26 15:33:15][356467783678841][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:33:15][356467783678841][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356467783678841\",\"model\":\"SM-X616B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9992\"}'\'' -e'"" [2025-08-26 15:33:20][356467783678841][4909 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f873b650-8a20-4a8a-830d-94acba124735","id":"QR_f873b650-8a20-4a8a-830d-94acba124735","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:33:20][356467783678841][5065 ms][DEBUG] proc_open done in 4670 ms; code=255; res.len=3343 [2025-08-26 15:33:20][356467783678841][5065 ms][DEBUG] END runCmdUntilRes#1 in 4670 ms [2025-08-26 15:33:20][356467783678841][5065 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:40:03][350100281338784][1 ms][INFO] === Request start === [2025-08-26 15:40:03][350100281338784][1 ms][DEBUG] START check_scloud [2025-08-26 15:40:03][350100281338784][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:40:04][350100281338784][321 ms][DEBUG] SU: done in 319 ms; outu0_a118 27625 5016 24362608 154900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:40:04][350100281338784][321 ms][DEBUG] targetPkg: running [2025-08-26 15:40:04][350100281338784][321 ms][DEBUG] END check_scloud in 320 ms [2025-08-26 15:40:04][350100281338784][321 ms][DEBUG] START check_boot_completed [2025-08-26 15:40:04][350100281338784][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:40:04][350100281338784][352 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 15:40:04][350100281338784][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:40:04][350100281338784][400 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 15:40:04][350100281338784][400 ms][DEBUG] END check_boot_completed in 80 ms [2025-08-26 15:40:04][350100281338784][400 ms][DEBUG] START check_internet [2025-08-26 15:40:04][350100281338784][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:40:04][350100281338784][836 ms][DEBUG] SU: done in 436 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.350/202.350/202.350/0.000 ms\n [2025-08-26 15:40:04][350100281338784][836 ms][DEBUG] check_internet: online [2025-08-26 15:40:04][350100281338784][836 ms][DEBUG] END check_internet in 436 ms [2025-08-26 15:40:04][350100281338784][836 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:40:04][350100281338784][837 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100281338784\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4574\"}'\'' -e'"" [2025-08-26 15:40:04][350100281338784][837 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:40:04][350100281338784][837 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100281338784\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4574\"}'\'' -e'"" [2025-08-26 15:40:08][350100281338784][4976 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_11fa8ca6-0b8c-4b10-93cf-16a5a9958795","id":"QR_11fa8ca6-0b8c-4b10-93cf-16a5a9958795","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:40:09][350100281338784][5132 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-26 15:40:09][350100281338784][5132 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-26 15:40:09][350100281338784][5132 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:41:03][355885140727434][0 ms][INFO] === Request start === [2025-08-26 15:41:03][355885140727434][1 ms][DEBUG] START check_scloud [2025-08-26 15:41:03][355885140727434][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:41:03][355885140727434][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 27625 5016 24514464 165556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:41:03][355885140727434][294 ms][DEBUG] targetPkg: running [2025-08-26 15:41:03][355885140727434][294 ms][DEBUG] END check_scloud in 294 ms [2025-08-26 15:41:03][355885140727434][295 ms][DEBUG] START check_boot_completed [2025-08-26 15:41:03][355885140727434][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:41:03][355885140727434][341 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:41:03][355885140727434][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:41:03][355885140727434][403 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 15:41:03][355885140727434][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 15:41:03][355885140727434][404 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:41:03][355885140727434][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355885140727434\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7436\"}'\'' -e'"" [2025-08-26 15:41:03][355885140727434][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:41:03][355885140727434][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355885140727434\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7436\"}'\'' -e'"" [2025-08-26 15:41:07][355885140727434][3903 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_70129cab-18a3-4d69-8741-5e619294407a","id":"QR_70129cab-18a3-4d69-8741-5e619294407a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:41:07][355885140727434][4059 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=3343 [2025-08-26 15:41:07][355885140727434][4059 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-26 15:41:07][355885140727434][4059 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:41:10][356019748961075][0 ms][INFO] === Request start === [2025-08-26 15:41:10][356019748961075][1 ms][DEBUG] START check_scloud [2025-08-26 15:41:10][356019748961075][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:41:10][356019748961075][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 27625 5016 24650920 177452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:41:10][356019748961075][270 ms][DEBUG] targetPkg: running [2025-08-26 15:41:10][356019748961075][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-26 15:41:10][356019748961075][270 ms][DEBUG] START check_boot_completed [2025-08-26 15:41:10][356019748961075][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:41:10][356019748961075][317 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:41:10][356019748961075][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:41:10][356019748961075][379 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 15:41:10][356019748961075][379 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 15:41:10][356019748961075][379 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:41:10][356019748961075][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019748961075\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5924\"}'\'' -e'"" [2025-08-26 15:41:10][356019748961075][379 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:41:10][356019748961075][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356019748961075\",\"model\":\"SM-A225F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5924\"}'\'' -e'"" [2025-08-26 15:41:14][356019748961075][4065 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_90b803e9-38a8-4d07-8c61-5a118272b4d4","id":"QR_90b803e9-38a8-4d07-8c61-5a118272b4d4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:41:14][356019748961075][4222 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3343 [2025-08-26 15:41:14][356019748961075][4222 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-08-26 15:41:14][356019748961075][4222 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:41:18][357799157256989][0 ms][INFO] === Request start === [2025-08-26 15:41:18][357799157256989][1 ms][DEBUG] START check_scloud [2025-08-26 15:41:18][357799157256989][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:41:18][357799157256989][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 27625 5016 24791472 186564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:41:18][357799157256989][311 ms][DEBUG] targetPkg: running [2025-08-26 15:41:18][357799157256989][311 ms][DEBUG] END check_scloud in 311 ms [2025-08-26 15:41:18][357799157256989][311 ms][DEBUG] START check_boot_completed [2025-08-26 15:41:18][357799157256989][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:41:18][357799157256989][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:41:18][357799157256989][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:41:18][357799157256989][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 15:41:18][357799157256989][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 15:41:18][357799157256989][421 ms][DEBUG] rawBody.length=1149 [2025-08-26 15:41:18][357799157256989][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357799157256989\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3867\"}'\'' -e'"" [2025-08-26 15:41:18][357799157256989][421 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:41:18][357799157256989][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357799157256989\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3867\"}'\'' -e'"" [2025-08-26 15:41:23][357799157256989][5435 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_35d55d68-bde4-46d9-afba-7e39bad94b42","id":"QR_35d55d68-bde4-46d9-afba-7e39bad94b42","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:41:23][357799157256989][5591 ms][DEBUG] proc_open done in 5170 ms; code=255; res.len=3343 [2025-08-26 15:41:23][357799157256989][5591 ms][DEBUG] END runCmdUntilRes#1 in 5170 ms [2025-08-26 15:41:23][357799157256989][5591 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:43:03][352192665840764][1 ms][INFO] === Request start === [2025-08-26 15:43:03][352192665840764][1 ms][DEBUG] START check_scloud [2025-08-26 15:43:03][352192665840764][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:43:03][352192665840764][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 27625 5016 24911436 198732 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:43:03][352192665840764][303 ms][DEBUG] targetPkg: running [2025-08-26 15:43:03][352192665840764][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 15:43:03][352192665840764][304 ms][DEBUG] START check_boot_completed [2025-08-26 15:43:03][352192665840764][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:43:03][352192665840764][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 15:43:03][352192665840764][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:43:03][352192665840764][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:43:03][352192665840764][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 15:43:03][352192665840764][397 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:43:03][352192665840764][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192665840764\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8255\"}'\'' -e'"" [2025-08-26 15:43:03][352192665840764][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:43:03][352192665840764][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192665840764\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8255\"}'\'' -e'"" [2025-08-26 15:43:07][352192665840764][4255 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5d3f61b6-a1f0-45f4-8805-8c248613e980","id":"QR_5d3f61b6-a1f0-45f4-8805-8c248613e980","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:43:07][352192665840764][4411 ms][DEBUG] proc_open done in 4015 ms; code=255; res.len=3343 [2025-08-26 15:43:07][352192665840764][4411 ms][DEBUG] END runCmdUntilRes#1 in 4015 ms [2025-08-26 15:43:07][352192665840764][4412 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:46:04][354685616812871][1 ms][INFO] === Request start === [2025-08-26 15:46:04][354685616812871][1 ms][DEBUG] START check_scloud [2025-08-26 15:46:04][354685616812871][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:46:04][354685616812871][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 27625 5016 25064112 209368 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:46:04][354685616812871][290 ms][DEBUG] targetPkg: running [2025-08-26 15:46:04][354685616812871][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-26 15:46:04][354685616812871][290 ms][DEBUG] START check_boot_completed [2025-08-26 15:46:04][354685616812871][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:46:04][354685616812871][337 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:46:04][354685616812871][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:46:05][354685616812871][431 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 15:46:05][354685616812871][431 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-26 15:46:05][354685616812871][431 ms][DEBUG] START check_internet [2025-08-26 15:46:05][354685616812871][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:46:05][354685616812871][962 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.299/202.299/202.299/0.000 ms\n [2025-08-26 15:46:05][354685616812871][962 ms][DEBUG] check_internet: online [2025-08-26 15:46:05][354685616812871][962 ms][DEBUG] END check_internet in 531 ms [2025-08-26 15:46:05][354685616812871][962 ms][DEBUG] rawBody.length=1149 [2025-08-26 15:46:05][354685616812871][962 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354685616812871\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3482\"}'\'' -e'"" [2025-08-26 15:46:05][354685616812871][962 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:46:05][354685616812871][962 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354685616812871\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3482\"}'\'' -e'"" [2025-08-26 15:46:13][354685616812871][9054 ms][DEBUG] proc_open done in 8091 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 15:46:13][354685616812871][9054 ms][DEBUG] END runCmdUntilRes#1 in 8091 ms [2025-08-26 15:46:13][354685616812871][9054 ms][WARN] Detected error: Process with pid 27625 either refused to load frida-agent, or terminated during injection [2025-08-26 15:46:13][354685616812871][9054 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 15:46:13][354685616812871][9241 ms][DEBUG] SU: done in 187 ms; out [2025-08-26 15:46:13][354685616812871][9241 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 15:46:13][354685616812871][9241 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 15:46:14][354685616812871][9522 ms][DEBUG] SU: done in 281 ms; out [2025-08-26 15:46:14][354685616812871][9523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 15:46:14][354685616812871][9944 ms][DEBUG] SU: done in 422 ms; out [2025-08-26 15:46:16][354685616812871][11959 ms][DEBUG] START check_boot_completed [2025-08-26 15:46:16][354685616812871][11959 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:46:16][354685616812871][12006 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:46:16][354685616812871][12006 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:46:16][354685616812871][12069 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 15:46:16][354685616812871][12069 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 15:46:19][354685616812871][15083 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 15:46:19][354685616812871][15084 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354685616812871\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3482\"}'\'' -e'"" [2025-08-26 15:46:20][354685616812871][15599 ms][DEBUG] proc_open done in 516 ms (timeout); code=4; out.len=0 err.len=50 [2025-08-26 15:46:20][354685616812871][15599 ms][DEBUG] END runCmdUntilRes#2 in 516 ms [2025-08-26 15:46:20][354685616812871][15600 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-08-26 15:46:25][352967352580249][0 ms][INFO] === Request start === [2025-08-26 15:46:25][352967352580249][0 ms][DEBUG] START check_scloud [2025-08-26 15:46:25][352967352580249][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:46:25][352967352580249][250 ms][DEBUG] SU: done in 250 ms; out [2025-08-26 15:46:25][352967352580249][250 ms][WARN] targetPkg: not running, restarting [2025-08-26 15:46:25][352967352580249][250 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 15:46:25][352967352580249][359 ms][DEBUG] SU: done in 109 ms; out [2025-08-26 15:46:25][352967352580249][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 15:46:25][352967352580249][484 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 15:46:27][352967352580249][2499 ms][DEBUG] END check_scloud in 2499 ms [2025-08-26 15:46:27][352967352580249][2500 ms][DEBUG] START check_boot_completed [2025-08-26 15:46:27][352967352580249][2500 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:46:27][352967352580249][2547 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:46:27][352967352580249][2547 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:46:27][352967352580249][2609 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 15:46:27][352967352580249][2609 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 15:46:27][352967352580249][2609 ms][DEBUG] START check_internet [2025-08-26 15:46:27][352967352580249][2609 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:46:28][352967352580249][2718 ms][DEBUG] SU: done in 109 ms; out [2025-08-26 15:46:28][352967352580249][2719 ms][WARN] check_internet: offline [2025-08-26 15:46:28][352967352580249][2719 ms][DEBUG] END check_internet in 109 ms [2025-08-26 15:47:04][354685616812871][0 ms][INFO] === Request start === [2025-08-26 15:47:04][354685616812871][1 ms][DEBUG] START check_scloud [2025-08-26 15:47:04][354685616812871][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:47:04][354685616812871][285 ms][DEBUG] SU: done in 284 ms; out [2025-08-26 15:47:04][354685616812871][285 ms][WARN] targetPkg: not running, restarting [2025-08-26 15:47:04][354685616812871][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 15:47:04][354685616812871][425 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 15:47:04][354685616812871][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 15:47:04][354685616812871][566 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 15:47:06][354685616812871][2581 ms][DEBUG] END check_scloud in 2580 ms [2025-08-26 15:47:06][354685616812871][2581 ms][DEBUG] START check_boot_completed [2025-08-26 15:47:06][354685616812871][2581 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:47:06][354685616812871][2628 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:47:06][354685616812871][2628 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:47:06][354685616812871][2691 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 15:47:06][354685616812871][2691 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 15:47:06][354685616812871][2691 ms][DEBUG] rawBody.length=1149 [2025-08-26 15:47:06][354685616812871][2691 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354685616812871\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8691\"}'\'' -e'"" [2025-08-26 15:47:06][354685616812871][2691 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:47:06][354685616812871][2691 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354685616812871\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8691\"}'\'' -e'"" [2025-08-26 15:47:09][354685616812871][5003 ms][DEBUG] proc_open done in 2312 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-26 15:47:09][354685616812871][5003 ms][DEBUG] END runCmdUntilRes#1 in 2312 ms [2025-08-26 15:47:09][354685616812871][5003 ms][WARN] Detected error: Process not found [2025-08-26 15:47:09][354685616812871][5003 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 15:47:09][354685616812871][5159 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 15:47:09][354685616812871][5159 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 15:47:09][354685616812871][5159 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 15:47:09][354685616812871][5268 ms][DEBUG] SU: done in 109 ms; out [2025-08-26 15:47:09][354685616812871][5268 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 15:47:09][354685616812871][5377 ms][DEBUG] SU: done in 109 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 15:47:11][354685616812871][7392 ms][DEBUG] START check_boot_completed [2025-08-26 15:47:11][354685616812871][7393 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:47:11][354685616812871][7439 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:47:11][354685616812871][7439 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:47:11][354685616812871][7502 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 15:47:11][354685616812871][7502 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 15:47:14][354685616812871][10517 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 15:47:14][354685616812871][10517 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354685616812871\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8691\"}'\'' -e'"" [2025-08-26 15:47:16][354685616812871][12423 ms][DEBUG] proc_open done in 1906 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-26 15:47:16][354685616812871][12423 ms][DEBUG] END runCmdUntilRes#2 in 1906 ms [2025-08-26 15:47:16][354685616812871][12423 ms][WARN] Detected error 2; Reboot the device [2025-08-26 15:47:16][354685616812871][12423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-26 15:47:18][354685616812871][13953 ms][DEBUG] SU: done in 1530 ms; out [2025-08-26 15:47:33][352967352580249][0 ms][INFO] === Request start === [2025-08-26 15:47:33][352967352580249][1 ms][DEBUG] START check_scloud [2025-08-26 15:47:33][352967352580249][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:47:33][352967352580249][43 ms][DEBUG] SU: done in 42 ms; out [2025-08-26 15:47:33][352967352580249][43 ms][WARN] targetPkg: not running, restarting [2025-08-26 15:47:33][352967352580249][43 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 15:47:33][352967352580249][74 ms][DEBUG] SU: done in 31 ms; out [2025-08-26 15:47:33][352967352580249][74 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 15:47:33][352967352580249][105 ms][DEBUG] SU: done in 31 ms; out [2025-08-26 15:47:35][352967352580249][2120 ms][DEBUG] END check_scloud in 2120 ms [2025-08-26 15:47:35][352967352580249][2120 ms][DEBUG] START check_boot_completed [2025-08-26 15:47:35][352967352580249][2120 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:48:04][354685616812871][1 ms][INFO] === Request start === [2025-08-26 15:48:04][354685616812871][1 ms][DEBUG] START check_scloud [2025-08-26 15:48:04][354685616812871][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:48:04][354685616812871][35 ms][DEBUG] SU: done in 34 ms; out [2025-08-26 15:48:04][354685616812871][35 ms][WARN] targetPkg: not running, restarting [2025-08-26 15:48:04][354685616812871][35 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 15:48:04][354685616812871][67 ms][DEBUG] SU: done in 31 ms; out [2025-08-26 15:48:04][354685616812871][67 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 15:48:04][354685616812871][98 ms][DEBUG] SU: done in 31 ms; out [2025-08-26 15:48:06][354685616812871][2113 ms][DEBUG] END check_scloud in 2112 ms [2025-08-26 15:48:06][354685616812871][2113 ms][DEBUG] START check_boot_completed [2025-08-26 15:48:06][354685616812871][2113 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:48:18][354685616812871][13323 ms][DEBUG] ADB: done in 11209 ms; out [2025-08-26 15:48:18][354685616812871][13323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:48:18][354685616812871][13401 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 15:48:18][354685616812871][13401 ms][DEBUG] END check_boot_completed in 11288 ms [2025-08-26 15:48:18][354685616812871][13401 ms][DEBUG] START check_internet [2025-08-26 15:48:18][354685616812871][13401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:48:18][354685616812871][13588 ms][DEBUG] SU: done in 187 ms; out [2025-08-26 15:48:18][354685616812871][13588 ms][WARN] check_internet: offline [2025-08-26 15:48:18][354685616812871][13588 ms][DEBUG] END check_internet in 188 ms [2025-08-26 15:48:23][352967352580249][0 ms][INFO] === Request start === [2025-08-26 15:48:23][352967352580249][1 ms][DEBUG] START check_scloud [2025-08-26 15:48:23][352967352580249][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:48:23][352967352580249][337 ms][DEBUG] SU: done in 337 ms; out [2025-08-26 15:48:23][352967352580249][337 ms][WARN] targetPkg: not running, restarting [2025-08-26 15:48:23][352967352580249][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 15:48:23][352967352580249][478 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 15:48:23][352967352580249][478 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 15:48:24][352967352580249][652 ms][DEBUG] SU: done in 174 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 15:48:26][352967352580249][2665 ms][DEBUG] END check_scloud in 2664 ms [2025-08-26 15:48:26][352967352580249][2665 ms][DEBUG] START check_boot_completed [2025-08-26 15:48:26][352967352580249][2665 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:48:26][352967352580249][2712 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:48:26][352967352580249][2712 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:48:26][352967352580249][2790 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 15:48:26][352967352580249][2790 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 15:48:26][352967352580249][2790 ms][DEBUG] START check_internet [2025-08-26 15:48:26][352967352580249][2790 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:48:26][352967352580249][3259 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=107 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 107.274/107.274/107.274/0.000 ms\n [2025-08-26 15:48:26][352967352580249][3259 ms][DEBUG] check_internet: online [2025-08-26 15:48:26][352967352580249][3259 ms][DEBUG] END check_internet in 469 ms [2025-08-26 15:48:26][352967352580249][3259 ms][DEBUG] rawBody.length=1149 [2025-08-26 15:48:26][352967352580249][3259 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967352580249\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1034\"}'\'' -e'"" [2025-08-26 15:48:26][352967352580249][3259 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:48:26][352967352580249][3259 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967352580249\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1034\"}'\'' -e'"" [2025-08-26 15:48:31][352967352580249][8476 ms][DEBUG] proc_open done in 5217 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-26 15:48:31][352967352580249][8476 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-08-26 15:48:31][352967352580249][8476 ms][WARN] Detected error: Process not found [2025-08-26 15:48:31][352967352580249][8476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 15:48:32][352967352580249][8757 ms][DEBUG] SU: done in 281 ms; out [2025-08-26 15:48:32][352967352580249][8757 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 15:48:32][352967352580249][8757 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 15:48:32][352967352580249][9054 ms][DEBUG] SU: done in 297 ms; out [2025-08-26 15:48:32][352967352580249][9054 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 15:48:32][352967352580249][9429 ms][DEBUG] SU: done in 375 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 15:48:34][352967352580249][11444 ms][DEBUG] START check_boot_completed [2025-08-26 15:48:34][352967352580249][11444 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:48:34][352967352580249][11491 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:48:34][352967352580249][11491 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:48:34][352967352580249][11569 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 15:48:34][352967352580249][11569 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 15:48:38][352967352580249][14584 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 15:48:38][352967352580249][14584 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967352580249\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1034\"}'\'' -e'"" [2025-08-26 15:48:44][352967352580249][21129 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_61117aae-5319-4cb2-9f8f-b13d5b02f943","id":"QR_61117aae-5319-4cb2-9f8f-b13d5b02f943","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:48:44][352967352580249][21285 ms][DEBUG] proc_open done in 6701 ms; code=255; res.len=3343 [2025-08-26 15:48:44][352967352580249][21285 ms][DEBUG] END runCmdUntilRes#2 in 6702 ms [2025-08-26 15:48:44][352967352580249][21285 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:49:05][354685616812871][0 ms][INFO] === Request start === [2025-08-26 15:49:05][354685616812871][1 ms][DEBUG] START check_scloud [2025-08-26 15:49:05][354685616812871][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:49:05][354685616812871][347 ms][DEBUG] SU: done in 346 ms; outu0_a118 8679 4969 23699656 69092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:49:05][354685616812871][347 ms][DEBUG] targetPkg: running [2025-08-26 15:49:05][354685616812871][347 ms][DEBUG] END check_scloud in 347 ms [2025-08-26 15:49:05][354685616812871][347 ms][DEBUG] START check_boot_completed [2025-08-26 15:49:05][354685616812871][347 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:49:05][354685616812871][394 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 15:49:05][354685616812871][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:49:05][354685616812871][440 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:49:05][354685616812871][440 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 15:49:05][354685616812871][440 ms][DEBUG] rawBody.length=1149 [2025-08-26 15:49:05][354685616812871][440 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354685616812871\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4607\"}'\'' -e'"" [2025-08-26 15:49:05][354685616812871][440 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:49:05][354685616812871][440 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354685616812871\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4607\"}'\'' -e'"" [2025-08-26 15:49:12][354685616812871][6861 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1bd27a12-5f22-4dad-8690-a23e2acfa01d","id":"QR_1bd27a12-5f22-4dad-8690-a23e2acfa01d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:49:12][354685616812871][7017 ms][DEBUG] proc_open done in 6576 ms; code=255; res.len=3343 [2025-08-26 15:49:12][354685616812871][7017 ms][DEBUG] END runCmdUntilRes#1 in 6577 ms [2025-08-26 15:49:12][354685616812871][7017 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:49:17][354773370702627][0 ms][INFO] === Request start === [2025-08-26 15:49:17][354773370702627][1 ms][DEBUG] START check_scloud [2025-08-26 15:49:17][354773370702627][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:49:17][354773370702627][347 ms][DEBUG] SU: done in 346 ms; outu0_a118 8679 4969 23872592 79020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:49:17][354773370702627][347 ms][DEBUG] targetPkg: running [2025-08-26 15:49:17][354773370702627][347 ms][DEBUG] END check_scloud in 346 ms [2025-08-26 15:49:17][354773370702627][347 ms][DEBUG] START check_boot_completed [2025-08-26 15:49:17][354773370702627][347 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:49:17][354773370702627][394 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:49:17][354773370702627][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:49:17][354773370702627][457 ms][DEBUG] SU: done in 64 ms; out [2025-08-26 15:49:17][354773370702627][458 ms][DEBUG] END check_boot_completed in 111 ms [2025-08-26 15:49:17][354773370702627][458 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:49:17][354773370702627][458 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354773370702627\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7912\"}'\'' -e'"" [2025-08-26 15:49:17][354773370702627][458 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:49:17][354773370702627][458 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354773370702627\",\"model\":\"SM-M156B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7912\"}'\'' -e'"" [2025-08-26 15:49:22][354773370702627][5533 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_03ef3de6-3b63-40c4-93ff-b9882eaf8c96","id":"QR_03ef3de6-3b63-40c4-93ff-b9882eaf8c96","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:49:22][354773370702627][5689 ms][DEBUG] proc_open done in 5231 ms; code=255; res.len=3343 [2025-08-26 15:49:22][354773370702627][5689 ms][DEBUG] END runCmdUntilRes#1 in 5231 ms [2025-08-26 15:49:22][354773370702627][5689 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:49:25][350616259913753][0 ms][INFO] === Request start === [2025-08-26 15:49:25][350616259913753][1 ms][DEBUG] START check_scloud [2025-08-26 15:49:25][350616259913753][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:49:25][350616259913753][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 8679 4969 24035544 80932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:49:25][350616259913753][320 ms][DEBUG] targetPkg: running [2025-08-26 15:49:25][350616259913753][320 ms][DEBUG] END check_scloud in 320 ms [2025-08-26 15:49:25][350616259913753][320 ms][DEBUG] START check_boot_completed [2025-08-26 15:49:25][350616259913753][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:49:25][350616259913753][351 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 15:49:25][350616259913753][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:49:25][350616259913753][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:49:25][350616259913753][398 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 15:49:25][350616259913753][398 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:49:25][350616259913753][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616259913753\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6061\"}'\'' -e'"" [2025-08-26 15:49:25][350616259913753][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:49:25][350616259913753][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616259913753\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6061\"}'\'' -e'"" [2025-08-26 15:49:30][350616259913753][4600 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3af5dfa5-73b6-4c61-8a42-18aa43970ea3","id":"QR_3af5dfa5-73b6-4c61-8a42-18aa43970ea3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:49:30][350616259913753][4756 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3343 [2025-08-26 15:49:30][350616259913753][4756 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-26 15:49:30][350616259913753][4757 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:49:32][351648448823626][0 ms][INFO] === Request start === [2025-08-26 15:49:32][351648448823626][1 ms][DEBUG] START check_scloud [2025-08-26 15:49:32][351648448823626][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:49:32][351648448823626][309 ms][DEBUG] SU: done in 309 ms; outu0_a118 8679 4969 24195452 91512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:49:32][351648448823626][309 ms][DEBUG] targetPkg: running [2025-08-26 15:49:32][351648448823626][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 15:49:32][351648448823626][309 ms][DEBUG] START check_boot_completed [2025-08-26 15:49:32][351648448823626][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:49:32][351648448823626][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:49:32][351648448823626][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:49:33][351648448823626][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:49:33][351648448823626][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 15:49:33][351648448823626][403 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:49:33][351648448823626][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351648448823626\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3738\"}'\'' -e'"" [2025-08-26 15:49:33][351648448823626][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:49:33][351648448823626][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351648448823626\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3738\"}'\'' -e'"" [2025-08-26 15:49:36][351648448823626][4355 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f6d73629-d4ee-46d3-bf22-896118c13747","id":"QR_f6d73629-d4ee-46d3-bf22-896118c13747","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:49:37][351648448823626][4511 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-26 15:49:37][351648448823626][4511 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-26 15:49:37][351648448823626][4511 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:51:03][353521963369606][0 ms][INFO] === Request start === [2025-08-26 15:51:03][353521963369606][0 ms][DEBUG] START check_scloud [2025-08-26 15:51:03][353521963369606][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:51:03][353521963369606][326 ms][DEBUG] SU: done in 326 ms; outu0_a118 8679 4969 24308172 75252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:51:03][353521963369606][326 ms][DEBUG] targetPkg: running [2025-08-26 15:51:03][353521963369606][326 ms][DEBUG] END check_scloud in 326 ms [2025-08-26 15:51:03][353521963369606][326 ms][DEBUG] START check_boot_completed [2025-08-26 15:51:03][353521963369606][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:51:03][353521963369606][357 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 15:51:03][353521963369606][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:51:03][353521963369606][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:51:03][353521963369606][404 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 15:51:03][353521963369606][404 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:51:03][353521963369606][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353521963369606\",\"model\":\"SM-E546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6413\"}'\'' -e'"" [2025-08-26 15:51:03][353521963369606][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:51:03][353521963369606][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353521963369606\",\"model\":\"SM-E546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6413\"}'\'' -e'"" [2025-08-26 15:51:08][353521963369606][5184 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f906d735-c8a0-4bfb-b2b5-f1e85bafad76","id":"QR_f906d735-c8a0-4bfb-b2b5-f1e85bafad76","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:51:08][353521963369606][5340 ms][DEBUG] proc_open done in 4936 ms; code=255; res.len=3343 [2025-08-26 15:51:08][353521963369606][5340 ms][DEBUG] END runCmdUntilRes#1 in 4936 ms [2025-08-26 15:51:08][353521963369606][5340 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:53:03][352677530709418][0 ms][INFO] === Request start === [2025-08-26 15:53:03][352677530709418][1 ms][DEBUG] START check_scloud [2025-08-26 15:53:03][352677530709418][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:53:03][352677530709418][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 8679 4969 24411824 92540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:53:03][352677530709418][325 ms][DEBUG] targetPkg: running [2025-08-26 15:53:03][352677530709418][325 ms][DEBUG] END check_scloud in 325 ms [2025-08-26 15:53:03][352677530709418][325 ms][DEBUG] START check_boot_completed [2025-08-26 15:53:03][352677530709418][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:53:03][352677530709418][372 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:53:03][352677530709418][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:53:03][352677530709418][434 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 15:53:03][352677530709418][435 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 15:53:03][352677530709418][435 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:53:03][352677530709418][435 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530709418\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9699\"}'\'' -e'"" [2025-08-26 15:53:03][352677530709418][435 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:53:03][352677530709418][435 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530709418\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9699\"}'\'' -e'"" [2025-08-26 15:53:07][352677530709418][4246 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e856f63b-36dc-4fa8-8f87-1ac574def81b","id":"QR_e856f63b-36dc-4fa8-8f87-1ac574def81b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:53:07][352677530709418][4402 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-26 15:53:07][352677530709418][4402 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-26 15:53:07][352677530709418][4402 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:54:03][352397452132339][1 ms][INFO] === Request start === [2025-08-26 15:54:03][352397452132339][1 ms][DEBUG] START check_scloud [2025-08-26 15:54:03][352397452132339][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:54:03][352397452132339][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 8679 4969 24558484 102104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:54:03][352397452132339][290 ms][DEBUG] targetPkg: running [2025-08-26 15:54:03][352397452132339][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-26 15:54:03][352397452132339][290 ms][DEBUG] START check_boot_completed [2025-08-26 15:54:03][352397452132339][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:54:03][352397452132339][321 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 15:54:03][352397452132339][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:54:03][352397452132339][368 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:54:03][352397452132339][369 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 15:54:03][352397452132339][369 ms][DEBUG] START check_internet [2025-08-26 15:54:03][352397452132339][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:54:03][352397452132339][806 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.253/201.253/201.253/0.000 ms\n [2025-08-26 15:54:03][352397452132339][806 ms][DEBUG] check_internet: online [2025-08-26 15:54:03][352397452132339][806 ms][DEBUG] END check_internet in 438 ms [2025-08-26 15:54:03][352397452132339][806 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:54:03][352397452132339][806 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452132339\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9770\"}'\'' -e'"" [2025-08-26 15:54:03][352397452132339][806 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:54:03][352397452132339][806 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352397452132339\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9770\"}'\'' -e'"" [2025-08-26 15:54:07][352397452132339][4758 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2aca5837-9aa7-427d-beb3-aa2d69064f8a","id":"QR_2aca5837-9aa7-427d-beb3-aa2d69064f8a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:54:08][352397452132339][4914 ms][DEBUG] proc_open done in 4107 ms; code=255; res.len=3343 [2025-08-26 15:54:08][352397452132339][4914 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-26 15:54:08][352397452132339][4914 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:55:03][357040738269203][0 ms][INFO] === Request start === [2025-08-26 15:55:03][357040738269203][1 ms][DEBUG] START check_scloud [2025-08-26 15:55:03][357040738269203][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:55:03][357040738269203][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 8679 4969 24699000 113320 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:55:03][357040738269203][314 ms][DEBUG] targetPkg: running [2025-08-26 15:55:03][357040738269203][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-26 15:55:03][357040738269203][314 ms][DEBUG] START check_boot_completed [2025-08-26 15:55:03][357040738269203][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:55:03][357040738269203][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 15:55:03][357040738269203][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:55:03][357040738269203][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:55:03][357040738269203][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 15:55:03][357040738269203][407 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:55:03][357040738269203][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040738269203\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8094\"}'\'' -e'"" [2025-08-26 15:55:03][357040738269203][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:55:03][357040738269203][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040738269203\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8094\"}'\'' -e'"" [2025-08-26 15:55:07][357040738269203][4016 ms][DEBUG] frida res:res:{"code":5000000,"message":"INTERNAL_SERVER_ERROR","data":"KDMS internal error"}\r\n [2025-08-26 15:55:07][357040738269203][4172 ms][DEBUG] proc_open done in 3765 ms; code=255; res.len=79 [2025-08-26 15:55:07][357040738269203][4172 ms][DEBUG] END runCmdUntilRes#1 in 3765 ms [2025-08-26 15:55:07][357040738269203][4172 ms][INFO] SUCCESS response from frida (len=79) [2025-08-26 15:55:08][][0 ms][INFO] === Request start === [2025-08-26 15:55:08][][1 ms][DEBUG] START check_scloud [2025-08-26 15:55:08][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:55:08][][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 8679 4969 24857344 124148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:55:08][][271 ms][DEBUG] targetPkg: running [2025-08-26 15:55:08][][271 ms][DEBUG] END check_scloud in 270 ms [2025-08-26 15:55:08][][271 ms][DEBUG] START check_boot_completed [2025-08-26 15:55:08][][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:55:08][][317 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:55:08][][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:55:08][][411 ms][DEBUG] SU: done in 93 ms; out [2025-08-26 15:55:08][][411 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 15:55:08][][411 ms][DEBUG] rawBody.length=1129 [2025-08-26 15:55:08][][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T50P4MFJ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9588\"}'\'' -e'"" [2025-08-26 15:55:08][][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:55:08][][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T50P4MFJ\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9588\"}'\'' -e'"" [2025-08-26 15:55:11][][3754 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 15:55:11][][3910 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=107 [2025-08-26 15:55:11][][3910 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-08-26 15:55:11][][3910 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 15:55:13][357040738269203][0 ms][INFO] === Request start === [2025-08-26 15:55:13][357040738269203][1 ms][DEBUG] START check_scloud [2025-08-26 15:55:13][357040738269203][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:55:14][357040738269203][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 8679 4969 24999820 135832 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:55:14][357040738269203][313 ms][DEBUG] targetPkg: running [2025-08-26 15:55:14][357040738269203][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-26 15:55:14][357040738269203][313 ms][DEBUG] START check_boot_completed [2025-08-26 15:55:14][357040738269203][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:55:14][357040738269203][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 15:55:14][357040738269203][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:55:14][357040738269203][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:55:14][357040738269203][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 15:55:14][357040738269203][407 ms][DEBUG] rawBody.length=1149 [2025-08-26 15:55:14][357040738269203][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040738269203\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7098\"}'\'' -e'"" [2025-08-26 15:55:14][357040738269203][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:55:14][357040738269203][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040738269203\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7098\"}'\'' -e'"" [2025-08-26 15:55:19][357040738269203][5530 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9f2177e0-7ba0-419b-bc3e-6a12f8ef49b4","id":"QR_9f2177e0-7ba0-419b-bc3e-6a12f8ef49b4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:55:19][357040738269203][5686 ms][DEBUG] proc_open done in 5280 ms; code=255; res.len=3343 [2025-08-26 15:55:19][357040738269203][5686 ms][DEBUG] END runCmdUntilRes#1 in 5280 ms [2025-08-26 15:55:19][357040738269203][5687 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:55:24][352485223172062][0 ms][INFO] === Request start === [2025-08-26 15:55:24][352485223172062][1 ms][DEBUG] START check_scloud [2025-08-26 15:55:24][352485223172062][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:55:24][352485223172062][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 8679 4969 25156720 147092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:55:24][352485223172062][292 ms][DEBUG] targetPkg: running [2025-08-26 15:55:24][352485223172062][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-26 15:55:24][352485223172062][292 ms][DEBUG] START check_boot_completed [2025-08-26 15:55:24][352485223172062][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:55:24][352485223172062][323 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 15:55:24][352485223172062][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:55:24][352485223172062][370 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:55:24][352485223172062][370 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 15:55:24][352485223172062][370 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:55:24][352485223172062][370 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352485223172062\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6175\"}'\'' -e'"" [2025-08-26 15:55:24][352485223172062][370 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:55:24][352485223172062][370 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352485223172062\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6175\"}'\'' -e'"" [2025-08-26 15:55:29][352485223172062][4838 ms][DEBUG] proc_open done in 4467 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-26 15:55:29][352485223172062][4838 ms][DEBUG] END runCmdUntilRes#1 in 4468 ms [2025-08-26 15:55:29][352485223172062][4838 ms][WARN] Detected error: Process with pid 8679 either refused to load frida-agent, or terminated during injection [2025-08-26 15:55:29][352485223172062][4838 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 15:55:29][352485223172062][4994 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 15:55:29][352485223172062][4994 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 15:55:29][352485223172062][4994 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 15:55:29][352485223172062][5119 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 15:55:29][352485223172062][5119 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 15:55:29][352485223172062][5290 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 15:55:31][352485223172062][7305 ms][DEBUG] START check_boot_completed [2025-08-26 15:55:31][352485223172062][7306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:55:31][352485223172062][7353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:55:31][352485223172062][7353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:55:31][352485223172062][7415 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 15:55:31][352485223172062][7415 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 15:55:34][352485223172062][10430 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 15:55:34][352485223172062][10430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352485223172062\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6175\"}'\'' -e'"" [2025-08-26 15:55:38][352485223172062][14491 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_32da3e15-2444-4e2c-8746-57736d1d3399","id":"QR_32da3e15-2444-4e2c-8746-57736d1d3399","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:55:39][352485223172062][14648 ms][DEBUG] proc_open done in 4218 ms; code=255; res.len=3343 [2025-08-26 15:55:39][352485223172062][14648 ms][DEBUG] END runCmdUntilRes#2 in 4218 ms [2025-08-26 15:55:39][352485223172062][14648 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:56:05][352467928553168][1 ms][INFO] === Request start === [2025-08-26 15:56:05][352467928553168][1 ms][DEBUG] START check_scloud [2025-08-26 15:56:05][352467928553168][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:56:05][352467928553168][316 ms][DEBUG] SU: done in 314 ms; outu0_a118 19420 4969 23685964 127520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:56:05][352467928553168][316 ms][DEBUG] targetPkg: running [2025-08-26 15:56:05][352467928553168][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-26 15:56:05][352467928553168][316 ms][DEBUG] START check_boot_completed [2025-08-26 15:56:05][352467928553168][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:56:05][352467928553168][347 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 15:56:05][352467928553168][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:56:05][352467928553168][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:56:05][352467928553168][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 15:56:05][352467928553168][394 ms][DEBUG] START check_internet [2025-08-26 15:56:05][352467928553168][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:56:06][352467928553168][831 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.149/201.149/201.149/0.000 ms\n [2025-08-26 15:56:06][352467928553168][831 ms][DEBUG] check_internet: online [2025-08-26 15:56:06][352467928553168][831 ms][DEBUG] END check_internet in 437 ms [2025-08-26 15:56:06][352467928553168][831 ms][DEBUG] rawBody.length=1149 [2025-08-26 15:56:06][352467928553168][831 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352467928553168\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8412\"}'\'' -e'"" [2025-08-26 15:56:06][352467928553168][831 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:56:06][352467928553168][831 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352467928553168\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8412\"}'\'' -e'"" [2025-08-26 15:56:11][352467928553168][5690 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d5b7ac7d-37a4-4219-a147-e6882cca4475","id":"QR_d5b7ac7d-37a4-4219-a147-e6882cca4475","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:56:11][352467928553168][5846 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-08-26 15:56:11][352467928553168][5846 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-08-26 15:56:11][352467928553168][5846 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:57:04][355623111820858][0 ms][INFO] === Request start === [2025-08-26 15:57:04][355623111820858][1 ms][DEBUG] START check_scloud [2025-08-26 15:57:04][355623111820858][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:57:05][355623111820858][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 19420 4969 23805744 137628 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:57:05][355623111820858][308 ms][DEBUG] targetPkg: running [2025-08-26 15:57:05][355623111820858][308 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 15:57:05][355623111820858][308 ms][DEBUG] START check_boot_completed [2025-08-26 15:57:05][355623111820858][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:57:05][355623111820858][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 15:57:05][355623111820858][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:57:05][355623111820858][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:57:05][355623111820858][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 15:57:05][355623111820858][402 ms][DEBUG] rawBody.length=1149 [2025-08-26 15:57:05][355623111820858][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355623111820858\",\"model\":\"SM-G981V\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3685\"}'\'' -e'"" [2025-08-26 15:57:05][355623111820858][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:57:05][355623111820858][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355623111820858\",\"model\":\"SM-G981V\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3685\"}'\'' -e'"" [2025-08-26 15:57:09][355623111820858][5010 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4440ec12-6775-4adc-9376-219c50fac4e3","id":"QR_4440ec12-6775-4adc-9376-219c50fac4e3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:57:09][355623111820858][5166 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-08-26 15:57:09][355623111820858][5166 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-08-26 15:57:09][355623111820858][5166 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:57:14][351752861872951][0 ms][INFO] === Request start === [2025-08-26 15:57:14][351752861872951][1 ms][DEBUG] START check_scloud [2025-08-26 15:57:14][351752861872951][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:57:15][351752861872951][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 19420 4969 23940152 149376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:57:15][351752861872951][309 ms][DEBUG] targetPkg: running [2025-08-26 15:57:15][351752861872951][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 15:57:15][351752861872951][309 ms][DEBUG] START check_boot_completed [2025-08-26 15:57:15][351752861872951][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:57:15][351752861872951][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:57:15][351752861872951][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:57:15][351752861872951][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:57:15][351752861872951][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 15:57:15][351752861872951][403 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:57:15][351752861872951][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351752861872951\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1644\"}'\'' -e'"" [2025-08-26 15:57:15][351752861872951][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:57:15][351752861872951][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351752861872951\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1644\"}'\'' -e'"" [2025-08-26 15:57:22][351752861872951][7885 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_93ce802d-8be5-4b67-8df3-711915e6c0e9","id":"QR_93ce802d-8be5-4b67-8df3-711915e6c0e9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:57:22][351752861872951][8041 ms][DEBUG] proc_open done in 7639 ms; code=255; res.len=3343 [2025-08-26 15:57:22][351752861872951][8041 ms][DEBUG] END runCmdUntilRes#1 in 7639 ms [2025-08-26 15:57:22][351752861872951][8041 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:57:25][356414811099178][0 ms][INFO] === Request start === [2025-08-26 15:57:25][356414811099178][1 ms][DEBUG] START check_scloud [2025-08-26 15:57:25][356414811099178][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:57:25][356414811099178][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 19420 4969 24066268 160508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:57:25][356414811099178][311 ms][DEBUG] targetPkg: running [2025-08-26 15:57:25][356414811099178][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 15:57:25][356414811099178][311 ms][DEBUG] START check_boot_completed [2025-08-26 15:57:25][356414811099178][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:57:25][356414811099178][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:57:25][356414811099178][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:57:25][356414811099178][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 15:57:25][356414811099178][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 15:57:25][356414811099178][420 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:57:25][356414811099178][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414811099178\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5254\"}'\'' -e'"" [2025-08-26 15:57:25][356414811099178][421 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:57:25][356414811099178][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414811099178\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5254\"}'\'' -e'"" [2025-08-26 15:57:29][356414811099178][4060 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ef8f5eb4-3692-444b-ba8a-4571c4cdc8bc","id":"QR_ef8f5eb4-3692-444b-ba8a-4571c4cdc8bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:57:29][356414811099178][4216 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=3343 [2025-08-26 15:57:29][356414811099178][4216 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-26 15:57:29][356414811099178][4216 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:57:32][357674437551915][1 ms][INFO] === Request start === [2025-08-26 15:57:32][357674437551915][1 ms][DEBUG] START check_scloud [2025-08-26 15:57:32][357674437551915][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:57:32][357674437551915][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 19420 4969 24199576 172684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:57:32][357674437551915][300 ms][DEBUG] targetPkg: running [2025-08-26 15:57:32][357674437551915][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-26 15:57:32][357674437551915][300 ms][DEBUG] START check_boot_completed [2025-08-26 15:57:32][357674437551915][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:57:32][357674437551915][331 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 15:57:32][357674437551915][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:57:32][357674437551915][378 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:57:32][357674437551915][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 15:57:32][357674437551915][379 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:57:32][357674437551915][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674437551915\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7912\"}'\'' -e'"" [2025-08-26 15:57:32][357674437551915][379 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:57:32][357674437551915][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674437551915\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7912\"}'\'' -e'"" [2025-08-26 15:57:36][357674437551915][4362 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f6069d06-7e9d-4d66-baee-13ebfbaddfcf","id":"QR_f6069d06-7e9d-4d66-baee-13ebfbaddfcf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:57:36][357674437551915][4518 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-08-26 15:57:36][357674437551915][4518 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-08-26 15:57:36][357674437551915][4518 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:58:04][351652535080801][0 ms][INFO] === Request start === [2025-08-26 15:58:04][351652535080801][1 ms][DEBUG] START check_scloud [2025-08-26 15:58:04][351652535080801][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:58:04][351652535080801][309 ms][DEBUG] SU: done in 309 ms; outu0_a118 19420 4969 24339380 183736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:58:04][351652535080801][309 ms][DEBUG] targetPkg: running [2025-08-26 15:58:04][351652535080801][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 15:58:04][351652535080801][309 ms][DEBUG] START check_boot_completed [2025-08-26 15:58:04][351652535080801][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:58:05][351652535080801][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 15:58:05][351652535080801][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:58:05][351652535080801][388 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:58:05][351652535080801][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 15:58:05][351652535080801][388 ms][DEBUG] START check_internet [2025-08-26 15:58:05][351652535080801][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:58:05][351652535080801][700 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=193 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 193.176/193.176/193.176/0.000 ms\n [2025-08-26 15:58:05][351652535080801][700 ms][DEBUG] check_internet: online [2025-08-26 15:58:05][351652535080801][700 ms][DEBUG] END check_internet in 312 ms [2025-08-26 15:58:05][351652535080801][700 ms][DEBUG] rawBody.length=1149 [2025-08-26 15:58:05][351652535080801][700 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351652535080801\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8208\"}'\'' -e'"" [2025-08-26 15:58:05][351652535080801][700 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:58:05][351652535080801][701 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351652535080801\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8208\"}'\'' -e'"" [2025-08-26 15:58:10][351652535080801][5855 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c67085d1-2214-4c7e-8bc0-cd0448ddaa8e","id":"QR_c67085d1-2214-4c7e-8bc0-cd0448ddaa8e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:58:10][351652535080801][6011 ms][DEBUG] proc_open done in 5310 ms; code=255; res.len=3343 [2025-08-26 15:58:10][351652535080801][6011 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-08-26 15:58:10][351652535080801][6011 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:58:15][352978606356948][0 ms][INFO] === Request start === [2025-08-26 15:58:15][352978606356948][1 ms][DEBUG] START check_scloud [2025-08-26 15:58:15][352978606356948][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:58:15][352978606356948][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 19420 4969 24486972 195428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:58:15][352978606356948][321 ms][DEBUG] targetPkg: running [2025-08-26 15:58:15][352978606356948][321 ms][DEBUG] END check_scloud in 320 ms [2025-08-26 15:58:15][352978606356948][321 ms][DEBUG] START check_boot_completed [2025-08-26 15:58:15][352978606356948][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:58:15][352978606356948][368 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:58:15][352978606356948][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:58:16][352978606356948][446 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 15:58:16][352978606356948][446 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 15:58:16][352978606356948][446 ms][DEBUG] START check_internet [2025-08-26 15:58:16][352978606356948][446 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:58:16][352978606356948][758 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=207 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 207.975/207.975/207.975/0.000 ms\n [2025-08-26 15:58:16][352978606356948][758 ms][DEBUG] check_internet: online [2025-08-26 15:58:16][352978606356948][758 ms][DEBUG] END check_internet in 312 ms [2025-08-26 15:58:16][352978606356948][758 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:58:16][352978606356948][758 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978606356948\",\"model\":\"SM-M326B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7630\"}'\'' -e'"" [2025-08-26 15:58:16][352978606356948][758 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:58:16][352978606356948][758 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352978606356948\",\"model\":\"SM-M326B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7630\"}'\'' -e'"" [2025-08-26 15:58:20][352978606356948][4898 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_81bb994b-f2bb-4a86-9457-1f3432c17f01","id":"QR_81bb994b-f2bb-4a86-9457-1f3432c17f01","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:58:20][352978606356948][5054 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-08-26 15:58:20][352978606356948][5054 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-08-26 15:58:20][352978606356948][5054 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:58:24][350792528962663][0 ms][INFO] === Request start === [2025-08-26 15:58:24][350792528962663][1 ms][DEBUG] START check_scloud [2025-08-26 15:58:24][350792528962663][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:58:24][350792528962663][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 19420 4969 24635716 206828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:58:24][350792528962663][278 ms][DEBUG] targetPkg: running [2025-08-26 15:58:24][350792528962663][278 ms][DEBUG] END check_scloud in 278 ms [2025-08-26 15:58:24][350792528962663][278 ms][DEBUG] START check_boot_completed [2025-08-26 15:58:24][350792528962663][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:58:24][350792528962663][325 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:58:24][350792528962663][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:58:24][350792528962663][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:58:24][350792528962663][372 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 15:58:24][350792528962663][372 ms][DEBUG] START check_internet [2025-08-26 15:58:24][350792528962663][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 15:58:25][350792528962663][747 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=230 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 230.916/230.916/230.916/0.000 ms\n [2025-08-26 15:58:25][350792528962663][747 ms][DEBUG] check_internet: online [2025-08-26 15:58:25][350792528962663][747 ms][DEBUG] END check_internet in 375 ms [2025-08-26 15:58:25][350792528962663][747 ms][DEBUG] rawBody.length=1149 [2025-08-26 15:58:25][350792528962663][747 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792528962663\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7471\"}'\'' -e'"" [2025-08-26 15:58:25][350792528962663][747 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:58:25][350792528962663][747 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792528962663\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7471\"}'\'' -e'"" [2025-08-26 15:58:29][350792528962663][5386 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb91291e-24e7-4775-8515-fe45ca2ea8a0","id":"QR_eb91291e-24e7-4775-8515-fe45ca2ea8a0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:58:29][350792528962663][5542 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-08-26 15:58:29][350792528962663][5542 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-08-26 15:58:29][350792528962663][5542 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:59:02][356080125024481][0 ms][INFO] === Request start === [2025-08-26 15:59:02][356080125024481][1 ms][DEBUG] START check_scloud [2025-08-26 15:59:02][356080125024481][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:59:03][356080125024481][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 19420 4969 24761696 217764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:59:03][356080125024481][312 ms][DEBUG] targetPkg: running [2025-08-26 15:59:03][356080125024481][312 ms][DEBUG] END check_scloud in 312 ms [2025-08-26 15:59:03][356080125024481][312 ms][DEBUG] START check_boot_completed [2025-08-26 15:59:03][356080125024481][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:59:03][356080125024481][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 15:59:03][356080125024481][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:59:03][356080125024481][422 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 15:59:03][356080125024481][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 15:59:03][356080125024481][422 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:59:03][356080125024481][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356080125024481\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1956\"}'\'' -e'"" [2025-08-26 15:59:03][356080125024481][422 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:59:03][356080125024481][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356080125024481\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1956\"}'\'' -e'"" [2025-08-26 15:59:08][356080125024481][5155 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7441f162-b72c-4dfe-9d92-1e1671a714da","id":"QR_7441f162-b72c-4dfe-9d92-1e1671a714da","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:59:08][356080125024481][5311 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-08-26 15:59:08][356080125024481][5311 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-08-26 15:59:08][356080125024481][5311 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 15:59:10][351676565794395][0 ms][INFO] === Request start === [2025-08-26 15:59:10][351676565794395][1 ms][DEBUG] START check_scloud [2025-08-26 15:59:10][351676565794395][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 15:59:10][351676565794395][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 19420 4969 24908392 229868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 15:59:10][351676565794395][283 ms][DEBUG] targetPkg: running [2025-08-26 15:59:10][351676565794395][283 ms][DEBUG] END check_scloud in 283 ms [2025-08-26 15:59:10][351676565794395][283 ms][DEBUG] START check_boot_completed [2025-08-26 15:59:10][351676565794395][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 15:59:10][351676565794395][330 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 15:59:10][351676565794395][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 15:59:10][351676565794395][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 15:59:10][351676565794395][377 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 15:59:10][351676565794395][377 ms][DEBUG] rawBody.length=1148 [2025-08-26 15:59:10][351676565794395][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676565794395\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5095\"}'\'' -e'"" [2025-08-26 15:59:10][351676565794395][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 15:59:10][351676565794395][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676565794395\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5095\"}'\'' -e'"" [2025-08-26 15:59:14][351676565794395][4298 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_50ae3786-3586-4de4-81c3-a7e92779c408","id":"QR_50ae3786-3586-4de4-81c3-a7e92779c408","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 15:59:14][351676565794395][4454 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-26 15:59:14][351676565794395][4454 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-26 15:59:14][351676565794395][4454 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:00:02][353475122535096][1 ms][INFO] === Request start === [2025-08-26 16:00:02][353475122535096][1 ms][DEBUG] START check_scloud [2025-08-26 16:00:02][353475122535096][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:00:02][353475122535096][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 19420 4969 25009644 240904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:00:02][353475122535096][309 ms][DEBUG] targetPkg: running [2025-08-26 16:00:02][353475122535096][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 16:00:02][353475122535096][309 ms][DEBUG] START check_boot_completed [2025-08-26 16:00:02][353475122535096][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:00:02][353475122535096][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 16:00:02][353475122535096][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:00:02][353475122535096][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:00:02][353475122535096][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 16:00:02][353475122535096][387 ms][DEBUG] START check_internet [2025-08-26 16:00:02][353475122535096][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:00:03][353475122535096][965 ms][DEBUG] SU: done in 578 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.611/201.611/201.611/0.000 ms\n [2025-08-26 16:00:03][353475122535096][965 ms][DEBUG] check_internet: online [2025-08-26 16:00:03][353475122535096][965 ms][DEBUG] END check_internet in 578 ms [2025-08-26 16:00:03][353475122535096][965 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:00:03][353475122535096][965 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475122535096\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9017\"}'\'' -e'"" [2025-08-26 16:00:03][353475122535096][965 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:00:03][353475122535096][965 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475122535096\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9017\"}'\'' -e'"" [2025-08-26 16:00:07][353475122535096][4902 ms][DEBUG] proc_open done in 3937 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 16:00:07][353475122535096][4902 ms][DEBUG] END runCmdUntilRes#1 in 3937 ms [2025-08-26 16:00:07][353475122535096][4902 ms][WARN] Detected error: Process with pid 19420 either refused to load frida-agent, or terminated during injection [2025-08-26 16:00:07][353475122535096][4902 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 16:00:07][353475122535096][5058 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 16:00:07][353475122535096][5058 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 16:00:07][353475122535096][5058 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 16:00:07][353475122535096][5183 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 16:00:07][353475122535096][5183 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 16:00:07][353475122535096][5323 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 16:00:09][353475122535096][7338 ms][DEBUG] START check_boot_completed [2025-08-26 16:00:09][353475122535096][7338 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:00:09][353475122535096][7385 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 16:00:09][353475122535096][7385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:00:10][353475122535096][7432 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:00:10][353475122535096][7432 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 16:00:13][353475122535096][10447 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 16:00:13][353475122535096][10447 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475122535096\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9017\"}'\'' -e'"" [2025-08-26 16:00:16][353475122535096][14259 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0369147-f3cd-4188-add7-aba86645edec","id":"QR_b0369147-f3cd-4188-add7-aba86645edec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:00:16][353475122535096][14415 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-26 16:00:16][353475122535096][14415 ms][DEBUG] END runCmdUntilRes#2 in 3968 ms [2025-08-26 16:00:16][353475122535096][14415 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:00:19][357066604165225][0 ms][INFO] === Request start === [2025-08-26 16:00:19][357066604165225][1 ms][DEBUG] START check_scloud [2025-08-26 16:00:19][357066604165225][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:00:19][357066604165225][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 20675 4969 23755832 124980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:00:19][357066604165225][302 ms][DEBUG] targetPkg: running [2025-08-26 16:00:19][357066604165225][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-26 16:00:19][357066604165225][302 ms][DEBUG] START check_boot_completed [2025-08-26 16:00:19][357066604165225][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:00:19][357066604165225][349 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 16:00:19][357066604165225][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:00:19][357066604165225][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:00:19][357066604165225][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 16:00:19][357066604165225][395 ms][DEBUG] START check_internet [2025-08-26 16:00:19][357066604165225][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:00:20][357066604165225][630 ms][DEBUG] SU: done in 235 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=140 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 140.498/140.498/140.498/0.000 ms\n [2025-08-26 16:00:20][357066604165225][630 ms][DEBUG] check_internet: online [2025-08-26 16:00:20][357066604165225][630 ms][DEBUG] END check_internet in 235 ms [2025-08-26 16:00:20][357066604165225][630 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:00:20][357066604165225][630 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357066604165225\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1616\"}'\'' -e'"" [2025-08-26 16:00:20][357066604165225][630 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:00:20][357066604165225][630 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357066604165225\",\"model\":\"SM-S721B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1616\"}'\'' -e'"" [2025-08-26 16:00:24][357066604165225][5457 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9b49113c-6750-444f-8877-1d4dc3998fa7","id":"QR_9b49113c-6750-444f-8877-1d4dc3998fa7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:00:25][357066604165225][5613 ms][DEBUG] proc_open done in 4982 ms; code=255; res.len=3343 [2025-08-26 16:00:25][357066604165225][5613 ms][DEBUG] END runCmdUntilRes#1 in 4983 ms [2025-08-26 16:00:25][357066604165225][5613 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:03:04][350929872429853][1 ms][INFO] === Request start === [2025-08-26 16:03:04][350929872429853][1 ms][DEBUG] START check_scloud [2025-08-26 16:03:04][350929872429853][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:03:04][350929872429853][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 20675 4969 23825316 138116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:03:04][350929872429853][294 ms][DEBUG] targetPkg: running [2025-08-26 16:03:04][350929872429853][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-26 16:03:04][350929872429853][294 ms][DEBUG] START check_boot_completed [2025-08-26 16:03:04][350929872429853][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:03:04][350929872429853][325 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 16:03:04][350929872429853][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:03:04][350929872429853][373 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:03:04][350929872429853][373 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 16:03:04][350929872429853][373 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:03:04][350929872429853][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350929872429853\",\"model\":\"SM-F731B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9706\"}'\'' -e'"" [2025-08-26 16:03:04][350929872429853][373 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:03:04][350929872429853][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350929872429853\",\"model\":\"SM-F731B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9706\"}'\'' -e'"" [2025-08-26 16:03:08][350929872429853][4231 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f0ab0950-aa77-4b3c-a9bd-c379b44641b3","id":"QR_f0ab0950-aa77-4b3c-a9bd-c379b44641b3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:03:08][350929872429853][4387 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-26 16:03:08][350929872429853][4387 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-26 16:03:08][350929872429853][4387 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:03:11][354255811793167][0 ms][INFO] === Request start === [2025-08-26 16:03:11][354255811793167][1 ms][DEBUG] START check_scloud [2025-08-26 16:03:11][354255811793167][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:03:12][354255811793167][269 ms][DEBUG] SU: done in 269 ms; outu0_a118 20675 4969 23961708 149740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:03:12][354255811793167][269 ms][DEBUG] targetPkg: running [2025-08-26 16:03:12][354255811793167][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-26 16:03:12][354255811793167][270 ms][DEBUG] START check_boot_completed [2025-08-26 16:03:12][354255811793167][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:03:12][354255811793167][316 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:03:12][354255811793167][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:03:12][354255811793167][363 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:03:12][354255811793167][363 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 16:03:12][354255811793167][363 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:03:12][354255811793167][363 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255811793167\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5380\"}'\'' -e'"" [2025-08-26 16:03:12][354255811793167][364 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:03:12][354255811793167][364 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255811793167\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5380\"}'\'' -e'"" [2025-08-26 16:03:16][354255811793167][4253 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a0fcbf1-67cc-459e-b292-1c3e84632933","id":"QR_0a0fcbf1-67cc-459e-b292-1c3e84632933","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:03:16][354255811793167][4409 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-08-26 16:03:16][354255811793167][4409 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-08-26 16:03:16][354255811793167][4409 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:05:03][359118660645711][0 ms][INFO] === Request start === [2025-08-26 16:05:03][359118660645711][1 ms][DEBUG] START check_scloud [2025-08-26 16:05:03][359118660645711][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:05:04][359118660645711][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 20675 4969 24103148 160828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:05:04][359118660645711][314 ms][DEBUG] targetPkg: running [2025-08-26 16:05:04][359118660645711][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-26 16:05:04][359118660645711][314 ms][DEBUG] START check_boot_completed [2025-08-26 16:05:04][359118660645711][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:05:04][359118660645711][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 16:05:04][359118660645711][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:05:04][359118660645711][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:05:04][359118660645711][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 16:05:04][359118660645711][407 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:05:04][359118660645711][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359118660645711\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9692\"}'\'' -e'"" [2025-08-26 16:05:04][359118660645711][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:05:04][359118660645711][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359118660645711\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9692\"}'\'' -e'"" [2025-08-26 16:05:08][359118660645711][4391 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b34ca998-9ecf-4f66-9f84-6be2b7212c69","id":"QR_b34ca998-9ecf-4f66-9f84-6be2b7212c69","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:05:08][359118660645711][4547 ms][DEBUG] proc_open done in 4140 ms; code=255; res.len=3343 [2025-08-26 16:05:08][359118660645711][4547 ms][DEBUG] END runCmdUntilRes#1 in 4140 ms [2025-08-26 16:05:08][359118660645711][4547 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:06:05][350896382956602][1 ms][INFO] === Request start === [2025-08-26 16:06:05][350896382956602][1 ms][DEBUG] START check_scloud [2025-08-26 16:06:05][350896382956602][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:06:05][350896382956602][289 ms][DEBUG] SU: done in 287 ms; outu0_a118 20675 4969 24266192 172020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:06:05][350896382956602][289 ms][DEBUG] targetPkg: running [2025-08-26 16:06:05][350896382956602][289 ms][DEBUG] END check_scloud in 288 ms [2025-08-26 16:06:05][350896382956602][289 ms][DEBUG] START check_boot_completed [2025-08-26 16:06:05][350896382956602][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:06:05][350896382956602][320 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 16:06:05][350896382956602][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:06:05][350896382956602][367 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:06:05][350896382956602][367 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 16:06:05][350896382956602][367 ms][DEBUG] START check_internet [2025-08-26 16:06:05][350896382956602][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:06:05][350896382956602][695 ms][DEBUG] SU: done in 327 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=207 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 207.991/207.991/207.991/0.000 ms\n [2025-08-26 16:06:05][350896382956602][695 ms][DEBUG] check_internet: online [2025-08-26 16:06:05][350896382956602][695 ms][DEBUG] END check_internet in 328 ms [2025-08-26 16:06:05][350896382956602][695 ms][DEBUG] rawBody.length=1149 [2025-08-26 16:06:05][350896382956602][695 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350896382956602\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3850\"}'\'' -e'"" [2025-08-26 16:06:05][350896382956602][695 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:06:05][350896382956602][695 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350896382956602\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3850\"}'\'' -e'"" [2025-08-26 16:06:10][350896382956602][5740 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fcb785e7-de74-4a45-8688-fa16c2bb302f","id":"QR_fcb785e7-de74-4a45-8688-fa16c2bb302f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:06:11][350896382956602][5897 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-08-26 16:06:11][350896382956602][5897 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-08-26 16:06:11][350896382956602][5897 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:07:03][358141430104836][0 ms][INFO] === Request start === [2025-08-26 16:07:03][358141430104836][1 ms][DEBUG] START check_scloud [2025-08-26 16:07:03][358141430104836][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:07:04][358141430104836][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 20675 4969 24371892 183784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:07:04][358141430104836][314 ms][DEBUG] targetPkg: running [2025-08-26 16:07:04][358141430104836][314 ms][DEBUG] END check_scloud in 314 ms [2025-08-26 16:07:04][358141430104836][314 ms][DEBUG] START check_boot_completed [2025-08-26 16:07:04][358141430104836][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:07:04][358141430104836][345 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 16:07:04][358141430104836][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:07:04][358141430104836][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:07:04][358141430104836][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 16:07:04][358141430104836][393 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:07:04][358141430104836][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141430104836\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2641\"}'\'' -e'"" [2025-08-26 16:07:04][358141430104836][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:07:04][358141430104836][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141430104836\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2641\"}'\'' -e'"" [2025-08-26 16:07:08][358141430104836][4313 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_30d92a73-e077-4e98-8272-512501ff595c","id":"QR_30d92a73-e077-4e98-8272-512501ff595c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:07:08][358141430104836][4469 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-26 16:07:08][358141430104836][4469 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-26 16:07:08][358141430104836][4470 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:08:04][351997884070196][0 ms][INFO] === Request start === [2025-08-26 16:08:04][351997884070196][1 ms][DEBUG] START check_scloud [2025-08-26 16:08:04][351997884070196][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:08:04][351997884070196][241 ms][DEBUG] SU: done in 240 ms; outu0_a118 20675 4969 24528792 194824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:08:04][351997884070196][241 ms][DEBUG] targetPkg: running [2025-08-26 16:08:04][351997884070196][241 ms][DEBUG] END check_scloud in 240 ms [2025-08-26 16:08:04][351997884070196][241 ms][DEBUG] START check_boot_completed [2025-08-26 16:08:04][351997884070196][241 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:08:04][351997884070196][287 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:08:04][351997884070196][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:08:04][351997884070196][334 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:08:04][351997884070196][334 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 16:08:04][351997884070196][334 ms][DEBUG] START check_internet [2025-08-26 16:08:04][351997884070196][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:08:05][351997884070196][584 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=139 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 139.211/139.211/139.211/0.000 ms\n [2025-08-26 16:08:05][351997884070196][584 ms][DEBUG] check_internet: online [2025-08-26 16:08:05][351997884070196][584 ms][DEBUG] END check_internet in 250 ms [2025-08-26 16:08:05][351997884070196][584 ms][DEBUG] rawBody.length=1149 [2025-08-26 16:08:05][351997884070196][584 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351997884070196\",\"model\":\"SM-S916U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4687\"}'\'' -e'"" [2025-08-26 16:08:05][351997884070196][584 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:08:05][351997884070196][584 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351997884070196\",\"model\":\"SM-S916U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAG\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4687\"}'\'' -e'"" [2025-08-26 16:08:10][351997884070196][5848 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b72de231-6b95-4d5f-8abc-f204f0d9a8ae","id":"QR_b72de231-6b95-4d5f-8abc-f204f0d9a8ae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:08:10][351997884070196][6005 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-08-26 16:08:10][351997884070196][6005 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-08-26 16:08:10][351997884070196][6005 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:08:17][352635111918683][1 ms][INFO] === Request start === [2025-08-26 16:08:17][352635111918683][1 ms][DEBUG] START check_scloud [2025-08-26 16:08:17][352635111918683][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:08:17][352635111918683][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 20675 4969 24661152 206824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:08:17][352635111918683][302 ms][DEBUG] targetPkg: running [2025-08-26 16:08:17][352635111918683][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-26 16:08:17][352635111918683][302 ms][DEBUG] START check_boot_completed [2025-08-26 16:08:17][352635111918683][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:08:17][352635111918683][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:08:17][352635111918683][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:08:17][352635111918683][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:08:17][352635111918683][396 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 16:08:17][352635111918683][396 ms][DEBUG] START check_internet [2025-08-26 16:08:17][352635111918683][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:08:17][352635111918683][661 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=167 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 167.301/167.301/167.301/0.000 ms\n [2025-08-26 16:08:17][352635111918683][662 ms][DEBUG] check_internet: online [2025-08-26 16:08:17][352635111918683][662 ms][DEBUG] END check_internet in 266 ms [2025-08-26 16:08:17][352635111918683][662 ms][DEBUG] rawBody.length=1149 [2025-08-26 16:08:17][352635111918683][662 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352635111918683\",\"model\":\"SM-A715F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8951\"}'\'' -e'"" [2025-08-26 16:08:17][352635111918683][662 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:08:17][352635111918683][662 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352635111918683\",\"model\":\"SM-A715F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8951\"}'\'' -e'"" [2025-08-26 16:08:22][352635111918683][5207 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5cd4a571-a920-47c2-93d0-ff0756941673","id":"QR_5cd4a571-a920-47c2-93d0-ff0756941673","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:08:22][352635111918683][5363 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-08-26 16:08:22][352635111918683][5363 ms][DEBUG] END runCmdUntilRes#1 in 4701 ms [2025-08-26 16:08:22][352635111918683][5363 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:10:03][354269782748837][0 ms][INFO] === Request start === [2025-08-26 16:10:03][354269782748837][1 ms][DEBUG] START check_scloud [2025-08-26 16:10:03][354269782748837][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:10:03][354269782748837][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 20675 4969 24797536 217632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:10:03][354269782748837][314 ms][DEBUG] targetPkg: running [2025-08-26 16:10:03][354269782748837][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-26 16:10:03][354269782748837][314 ms][DEBUG] START check_boot_completed [2025-08-26 16:10:03][354269782748837][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:10:04][354269782748837][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:10:04][354269782748837][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:10:04][354269782748837][408 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 16:10:04][354269782748837][408 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 16:10:04][354269782748837][408 ms][DEBUG] START check_internet [2025-08-26 16:10:04][354269782748837][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:10:04][354269782748837][860 ms][DEBUG] SU: done in 452 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.847/201.847/201.847/0.000 ms\n [2025-08-26 16:10:04][354269782748837][861 ms][DEBUG] check_internet: online [2025-08-26 16:10:04][354269782748837][861 ms][DEBUG] END check_internet in 452 ms [2025-08-26 16:10:04][354269782748837][861 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:10:04][354269782748837][861 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354269782748837\",\"model\":\"SM-A346N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3153\"}'\'' -e'"" [2025-08-26 16:10:04][354269782748837][861 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:10:04][354269782748837][861 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354269782748837\",\"model\":\"SM-A346N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3153\"}'\'' -e'"" [2025-08-26 16:10:08][354269782748837][5187 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_728538d2-8141-43b5-8d02-d9f363ebb7ad","id":"QR_728538d2-8141-43b5-8d02-d9f363ebb7ad","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:10:09][354269782748837][5343 ms][DEBUG] proc_open done in 4482 ms; code=255; res.len=3343 [2025-08-26 16:10:09][354269782748837][5344 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-26 16:10:09][354269782748837][5344 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:11:04][350962375739791][1 ms][INFO] === Request start === [2025-08-26 16:11:04][350962375739791][1 ms][DEBUG] START check_scloud [2025-08-26 16:11:04][350962375739791][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:11:04][350962375739791][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 20675 4969 24915396 229444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:11:04][350962375739791][314 ms][DEBUG] targetPkg: running [2025-08-26 16:11:04][350962375739791][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-26 16:11:04][350962375739791][314 ms][DEBUG] START check_boot_completed [2025-08-26 16:11:04][350962375739791][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:11:04][350962375739791][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 16:11:04][350962375739791][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:11:04][350962375739791][423 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 16:11:04][350962375739791][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 16:11:04][350962375739791][423 ms][DEBUG] rawBody.length=1149 [2025-08-26 16:11:04][350962375739791][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962375739791\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3690\"}'\'' -e'"" [2025-08-26 16:11:04][350962375739791][424 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:11:04][350962375739791][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962375739791\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3690\"}'\'' -e'"" [2025-08-26 16:11:10][350962375739791][5578 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4f3dfc8a-9c95-4405-8d9b-e653e97044cb","id":"QR_4f3dfc8a-9c95-4405-8d9b-e653e97044cb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:11:10][350962375739791][5734 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-08-26 16:11:10][350962375739791][5734 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-08-26 16:11:10][350962375739791][5734 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:12:05][351879981364906][0 ms][INFO] === Request start === [2025-08-26 16:12:05][351879981364906][1 ms][DEBUG] START check_scloud [2025-08-26 16:12:05][351879981364906][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:12:05][351879981364906][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 20675 4969 25023016 240592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:12:05][351879981364906][290 ms][DEBUG] targetPkg: running [2025-08-26 16:12:05][351879981364906][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-26 16:12:05][351879981364906][290 ms][DEBUG] START check_boot_completed [2025-08-26 16:12:05][351879981364906][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:12:05][351879981364906][337 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:12:05][351879981364906][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:12:05][351879981364906][399 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 16:12:05][351879981364906][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 16:12:05][351879981364906][399 ms][DEBUG] START check_internet [2025-08-26 16:12:05][351879981364906][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:12:05][351879981364906][665 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.520/141.520/141.520/0.000 ms\n [2025-08-26 16:12:05][351879981364906][665 ms][DEBUG] check_internet: online [2025-08-26 16:12:05][351879981364906][665 ms][DEBUG] END check_internet in 266 ms [2025-08-26 16:12:05][351879981364906][665 ms][DEBUG] rawBody.length=1149 [2025-08-26 16:12:05][351879981364906][665 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351879981364906\",\"model\":\"SM-A546U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AIO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9722\"}'\'' -e'"" [2025-08-26 16:12:05][351879981364906][665 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:12:05][351879981364906][665 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351879981364906\",\"model\":\"SM-A546U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AIO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9722\"}'\'' -e'"" [2025-08-26 16:12:09][351879981364906][4539 ms][DEBUG] proc_open done in 3874 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 16:12:09][351879981364906][4539 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-26 16:12:09][351879981364906][4539 ms][WARN] Detected error: Process with pid 20675 either refused to load frida-agent, or terminated during injection [2025-08-26 16:12:09][351879981364906][4539 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 16:12:09][351879981364906][4695 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 16:12:09][351879981364906][4695 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 16:12:09][351879981364906][4695 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 16:12:10][351879981364906][4836 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 16:12:10][351879981364906][4836 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 16:12:10][351879981364906][4992 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 16:12:12][351879981364906][7007 ms][DEBUG] START check_boot_completed [2025-08-26 16:12:12][351879981364906][7007 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:12:12][351879981364906][7054 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 16:12:12][351879981364906][7054 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:12:12][351879981364906][7148 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 16:12:12][351879981364906][7148 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-26 16:12:15][351879981364906][10162 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 16:12:15][351879981364906][10162 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351879981364906\",\"model\":\"SM-A546U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AIO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9722\"}'\'' -e'"" [2025-08-26 16:12:20][351879981364906][14818 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_79ab5c55-2017-4634-8418-fcfbdc48fd7d","id":"QR_79ab5c55-2017-4634-8418-fcfbdc48fd7d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:12:20][351879981364906][14974 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-08-26 16:12:20][351879981364906][14974 ms][DEBUG] END runCmdUntilRes#2 in 4812 ms [2025-08-26 16:12:20][351879981364906][14974 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:13:03][352789380600975][0 ms][INFO] === Request start === [2025-08-26 16:13:03][352789380600975][1 ms][DEBUG] START check_scloud [2025-08-26 16:13:03][352789380600975][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:13:03][352789380600975][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 22186 4969 23687564 127724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:13:03][352789380600975][299 ms][DEBUG] targetPkg: running [2025-08-26 16:13:03][352789380600975][299 ms][DEBUG] END check_scloud in 299 ms [2025-08-26 16:13:03][352789380600975][299 ms][DEBUG] START check_boot_completed [2025-08-26 16:13:03][352789380600975][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:13:03][352789380600975][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:13:03][352789380600975][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:13:03][352789380600975][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:13:03][352789380600975][393 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 16:13:03][352789380600975][393 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:13:03][352789380600975][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352789380600975\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7703\"}'\'' -e'"" [2025-08-26 16:13:03][352789380600975][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:13:03][352789380600975][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352789380600975\",\"model\":\"SM-G990E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7703\"}'\'' -e'"" [2025-08-26 16:13:07][352789380600975][4470 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_331a5e00-bdde-417b-b845-970ae24bda5b","id":"QR_331a5e00-bdde-417b-b845-970ae24bda5b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:13:08][352789380600975][4626 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-26 16:13:08][352789380600975][4626 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-26 16:13:08][352789380600975][4626 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:13:10][352879321479884][1 ms][INFO] === Request start === [2025-08-26 16:13:10][352879321479884][1 ms][DEBUG] START check_scloud [2025-08-26 16:13:10][352879321479884][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:13:10][352879321479884][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 22186 4969 23848340 137980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:13:10][352879321479884][299 ms][DEBUG] targetPkg: running [2025-08-26 16:13:10][352879321479884][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-26 16:13:10][352879321479884][299 ms][DEBUG] START check_boot_completed [2025-08-26 16:13:10][352879321479884][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:13:11][352879321479884][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:13:11][352879321479884][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:13:11][352879321479884][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:13:11][352879321479884][392 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 16:13:11][352879321479884][392 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:13:11][352879321479884][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352879321479884\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2671\"}'\'' -e'"" [2025-08-26 16:13:11][352879321479884][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:13:11][352879321479884][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352879321479884\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2671\"}'\'' -e'"" [2025-08-26 16:13:15][352879321479884][4375 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1f4290c0-7434-4eed-b2fa-7ee01a01b223","id":"QR_1f4290c0-7434-4eed-b2fa-7ee01a01b223","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:13:15][352879321479884][4532 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-08-26 16:13:15][352879321479884][4532 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-08-26 16:13:15][352879321479884][4532 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:13:17][350518497419868][0 ms][INFO] === Request start === [2025-08-26 16:13:17][350518497419868][1 ms][DEBUG] START check_scloud [2025-08-26 16:13:17][350518497419868][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:13:18][350518497419868][314 ms][DEBUG] SU: done in 314 ms; outu0_a118 22186 4969 23974748 149804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:13:18][350518497419868][314 ms][DEBUG] targetPkg: running [2025-08-26 16:13:18][350518497419868][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-26 16:13:18][350518497419868][315 ms][DEBUG] START check_boot_completed [2025-08-26 16:13:18][350518497419868][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:13:18][350518497419868][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:13:18][350518497419868][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:13:18][350518497419868][410 ms][DEBUG] SU: done in 49 ms; out [2025-08-26 16:13:18][350518497419868][410 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 16:13:18][350518497419868][410 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:13:18][350518497419868][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350518497419868\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9435\"}'\'' -e'"" [2025-08-26 16:13:18][350518497419868][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:13:18][350518497419868][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350518497419868\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9435\"}'\'' -e'"" [2025-08-26 16:13:21][350518497419868][4032 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b2bd0f42-5e27-493f-8316-e5a3933e1cd6","id":"QR_b2bd0f42-5e27-493f-8316-e5a3933e1cd6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:13:21][350518497419868][4188 ms][DEBUG] proc_open done in 3778 ms; code=255; res.len=3343 [2025-08-26 16:13:21][350518497419868][4188 ms][DEBUG] END runCmdUntilRes#1 in 3778 ms [2025-08-26 16:13:21][350518497419868][4188 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:13:24][353684147280790][0 ms][INFO] === Request start === [2025-08-26 16:13:24][353684147280790][1 ms][DEBUG] START check_scloud [2025-08-26 16:13:24][353684147280790][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:13:24][353684147280790][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 22186 4969 24121280 160848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:13:24][353684147280790][315 ms][DEBUG] targetPkg: running [2025-08-26 16:13:24][353684147280790][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-26 16:13:24][353684147280790][315 ms][DEBUG] START check_boot_completed [2025-08-26 16:13:24][353684147280790][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:13:24][353684147280790][346 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 16:13:24][353684147280790][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:13:24][353684147280790][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:13:24][353684147280790][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 16:13:24][353684147280790][393 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:13:24][353684147280790][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684147280790\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3617\"}'\'' -e'"" [2025-08-26 16:13:24][353684147280790][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:13:24][353684147280790][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684147280790\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3617\"}'\'' -e'"" [2025-08-26 16:13:28][353684147280790][4235 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0cadde7d-07ff-4878-a8c7-324b8140caa5","id":"QR_0cadde7d-07ff-4878-a8c7-324b8140caa5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:13:28][353684147280790][4392 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-08-26 16:13:28][353684147280790][4392 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-26 16:13:28][353684147280790][4392 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:16:05][356663763517104][1 ms][INFO] === Request start === [2025-08-26 16:16:05][356663763517104][1 ms][DEBUG] START check_scloud [2025-08-26 16:16:05][356663763517104][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:16:06][356663763517104][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 22186 4969 24184848 173180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:16:06][356663763517104][298 ms][DEBUG] targetPkg: running [2025-08-26 16:16:06][356663763517104][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-26 16:16:06][356663763517104][298 ms][DEBUG] START check_boot_completed [2025-08-26 16:16:06][356663763517104][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:16:06][356663763517104][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:16:06][356663763517104][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:16:06][356663763517104][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:16:06][356663763517104][392 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 16:16:06][356663763517104][392 ms][DEBUG] START check_internet [2025-08-26 16:16:06][356663763517104][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:16:06][356663763517104][907 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.382/200.382/200.382/0.000 ms\n [2025-08-26 16:16:06][356663763517104][907 ms][DEBUG] check_internet: online [2025-08-26 16:16:06][356663763517104][907 ms][DEBUG] END check_internet in 515 ms [2025-08-26 16:16:06][356663763517104][907 ms][DEBUG] rawBody.length=1159 [2025-08-26 16:16:06][356663763517104][907 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663763517104\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YW60S187L\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1125\"}'\'' -e'"" [2025-08-26 16:16:06][356663763517104][907 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:16:06][356663763517104][907 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663763517104\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YW60S187L\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1125\"}'\'' -e'"" [2025-08-26 16:16:12][356663763517104][6359 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_633a541c-291e-4444-8bf4-c9bc78269e1e","id":"QR_633a541c-291e-4444-8bf4-c9bc78269e1e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:16:12][356663763517104][6515 ms][DEBUG] proc_open done in 5608 ms; code=255; res.len=3343 [2025-08-26 16:16:12][356663763517104][6516 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-08-26 16:16:12][356663763517104][6516 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:17:03][350026556211218][0 ms][INFO] === Request start === [2025-08-26 16:17:03][350026556211218][1 ms][DEBUG] START check_scloud [2025-08-26 16:17:03][350026556211218][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:17:03][350026556211218][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 22186 4969 24309932 183904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:17:03][350026556211218][306 ms][DEBUG] targetPkg: running [2025-08-26 16:17:03][350026556211218][306 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 16:17:03][350026556211218][306 ms][DEBUG] START check_boot_completed [2025-08-26 16:17:03][350026556211218][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:17:03][350026556211218][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:17:03][350026556211218][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:17:03][350026556211218][402 ms][DEBUG] SU: done in 49 ms; out [2025-08-26 16:17:03][350026556211218][402 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 16:17:03][350026556211218][402 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:17:03][350026556211218][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026556211218\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1316\"}'\'' -e'"" [2025-08-26 16:17:03][350026556211218][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:17:03][350026556211218][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026556211218\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1316\"}'\'' -e'"" [2025-08-26 16:17:07][350026556211218][4336 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f38a5ec7-b791-402f-a423-e3833c2a83a4","id":"QR_f38a5ec7-b791-402f-a423-e3833c2a83a4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:17:07][350026556211218][4492 ms][DEBUG] proc_open done in 4090 ms; code=255; res.len=3343 [2025-08-26 16:17:07][350026556211218][4492 ms][DEBUG] END runCmdUntilRes#1 in 4091 ms [2025-08-26 16:17:07][350026556211218][4492 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:20:04][353600815696570][1 ms][INFO] === Request start === [2025-08-26 16:20:04][353600815696570][1 ms][DEBUG] START check_scloud [2025-08-26 16:20:04][353600815696570][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:20:05][353600815696570][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 22186 4969 24448272 195864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:20:05][353600815696570][285 ms][DEBUG] targetPkg: running [2025-08-26 16:20:05][353600815696570][286 ms][DEBUG] END check_scloud in 284 ms [2025-08-26 16:20:05][353600815696570][286 ms][DEBUG] START check_boot_completed [2025-08-26 16:20:05][353600815696570][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:20:05][353600815696570][316 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 16:20:05][353600815696570][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:20:05][353600815696570][363 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:20:05][353600815696570][364 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 16:20:05][353600815696570][364 ms][DEBUG] START check_internet [2025-08-26 16:20:05][353600815696570][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:20:05][353600815696570][832 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.824/197.824/197.824/0.000 ms\n [2025-08-26 16:20:05][353600815696570][832 ms][DEBUG] check_internet: online [2025-08-26 16:20:05][353600815696570][832 ms][DEBUG] END check_internet in 468 ms [2025-08-26 16:20:05][353600815696570][832 ms][DEBUG] rawBody.length=1149 [2025-08-26 16:20:05][353600815696570][832 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600815696570\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1497\"}'\'' -e'"" [2025-08-26 16:20:05][353600815696570][832 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:20:05][353600815696570][832 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600815696570\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1497\"}'\'' -e'"" [2025-08-26 16:20:10][353600815696570][5378 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e66618e1-a41e-4ad1-8e12-5e7a3ea34ded","id":"QR_e66618e1-a41e-4ad1-8e12-5e7a3ea34ded","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:20:10][353600815696570][5534 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-08-26 16:20:10][353600815696570][5534 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-08-26 16:20:10][353600815696570][5534 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:20:14][351917371217449][0 ms][INFO] === Request start === [2025-08-26 16:20:14][351917371217449][1 ms][DEBUG] START check_scloud [2025-08-26 16:20:14][351917371217449][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:20:14][351917371217449][270 ms][DEBUG] SU: done in 270 ms; outu0_a118 22186 4969 24605080 206524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:20:14][351917371217449][270 ms][DEBUG] targetPkg: running [2025-08-26 16:20:14][351917371217449][270 ms][DEBUG] END check_scloud in 270 ms [2025-08-26 16:20:14][351917371217449][270 ms][DEBUG] START check_boot_completed [2025-08-26 16:20:14][351917371217449][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:20:14][351917371217449][302 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 16:20:14][351917371217449][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:20:14][351917371217449][348 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:20:14][351917371217449][348 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 16:20:14][351917371217449][348 ms][DEBUG] START check_internet [2025-08-26 16:20:14][351917371217449][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:20:15][351917371217449][599 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=144 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 144.327/144.327/144.327/0.000 ms\n [2025-08-26 16:20:15][351917371217449][599 ms][DEBUG] check_internet: online [2025-08-26 16:20:15][351917371217449][599 ms][DEBUG] END check_internet in 250 ms [2025-08-26 16:20:15][351917371217449][599 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:20:15][351917371217449][599 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351917371217449\",\"model\":\"SM-S721N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2653\"}'\'' -e'"" [2025-08-26 16:20:15][351917371217449][599 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:20:15][351917371217449][599 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351917371217449\",\"model\":\"SM-S721N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2653\"}'\'' -e'"" [2025-08-26 16:20:19][351917371217449][4488 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2aa1fe5f-a710-421d-b427-2292876321d7","id":"QR_2aa1fe5f-a710-421d-b427-2292876321d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:20:19][351917371217449][4644 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-08-26 16:20:19][351917371217449][4644 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-08-26 16:20:19][351917371217449][4644 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:24:04][359097842585161][1 ms][INFO] === Request start === [2025-08-26 16:24:04][359097842585161][1 ms][DEBUG] START check_scloud [2025-08-26 16:24:04][359097842585161][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:24:05][359097842585161][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 22186 4969 24740340 217840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:24:05][359097842585161][307 ms][DEBUG] targetPkg: running [2025-08-26 16:24:05][359097842585161][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 16:24:05][359097842585161][307 ms][DEBUG] START check_boot_completed [2025-08-26 16:24:05][359097842585161][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:24:05][359097842585161][338 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 16:24:05][359097842585161][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:24:05][359097842585161][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:24:05][359097842585161][386 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 16:24:05][359097842585161][386 ms][DEBUG] START check_internet [2025-08-26 16:24:05][359097842585161][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:24:05][359097842585161][713 ms][DEBUG] SU: done in 327 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=211 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 211.382/211.382/211.382/0.000 ms\n [2025-08-26 16:24:05][359097842585161][713 ms][DEBUG] check_internet: online [2025-08-26 16:24:05][359097842585161][713 ms][DEBUG] END check_internet in 328 ms [2025-08-26 16:24:05][359097842585161][714 ms][DEBUG] rawBody.length=1149 [2025-08-26 16:24:05][359097842585161][714 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359097842585161\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2025\"}'\'' -e'"" [2025-08-26 16:24:05][359097842585161][714 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:24:05][359097842585161][714 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359097842585161\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2025\"}'\'' -e'"" [2025-08-26 16:24:10][359097842585161][5665 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5430a396-4955-4093-9e00-878a3cb9e670","id":"QR_5430a396-4955-4093-9e00-878a3cb9e670","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:24:10][359097842585161][5821 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3343 [2025-08-26 16:24:10][359097842585161][5821 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-08-26 16:24:10][359097842585161][5821 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:25:03][354747956563009][0 ms][INFO] === Request start === [2025-08-26 16:25:03][354747956563009][1 ms][DEBUG] START check_scloud [2025-08-26 16:25:03][354747956563009][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:25:03][354747956563009][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 22186 4969 24884888 177176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:25:03][354747956563009][286 ms][DEBUG] targetPkg: running [2025-08-26 16:25:03][354747956563009][286 ms][DEBUG] END check_scloud in 285 ms [2025-08-26 16:25:03][354747956563009][286 ms][DEBUG] START check_boot_completed [2025-08-26 16:25:03][354747956563009][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:25:03][354747956563009][332 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:25:03][354747956563009][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:25:03][354747956563009][426 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 16:25:03][354747956563009][426 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 16:25:03][354747956563009][426 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:25:03][354747956563009][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747956563009\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3313\"}'\'' -e'"" [2025-08-26 16:25:03][354747956563009][426 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:25:03][354747956563009][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747956563009\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3313\"}'\'' -e'"" [2025-08-26 16:25:08][354747956563009][4816 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f305a915-a138-4799-adb9-d2e3e4b5df21","id":"QR_f305a915-a138-4799-adb9-d2e3e4b5df21","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:25:08][354747956563009][4972 ms][DEBUG] proc_open done in 4545 ms; code=255; res.len=3343 [2025-08-26 16:25:08][354747956563009][4972 ms][DEBUG] END runCmdUntilRes#1 in 4545 ms [2025-08-26 16:25:08][354747956563009][4972 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:26:04][350033885567120][0 ms][INFO] === Request start === [2025-08-26 16:26:04][350033885567120][1 ms][DEBUG] START check_scloud [2025-08-26 16:26:04][350033885567120][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:26:05][350033885567120][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 22186 4969 24999744 186644 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:26:05][350033885567120][329 ms][DEBUG] targetPkg: running [2025-08-26 16:26:05][350033885567120][329 ms][DEBUG] END check_scloud in 328 ms [2025-08-26 16:26:05][350033885567120][329 ms][DEBUG] START check_boot_completed [2025-08-26 16:26:05][350033885567120][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:26:05][350033885567120][376 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 16:26:05][350033885567120][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:26:05][350033885567120][438 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 16:26:05][350033885567120][438 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 16:26:05][350033885567120][438 ms][DEBUG] START check_internet [2025-08-26 16:26:05][350033885567120][438 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:26:05][350033885567120][876 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.041/201.041/201.041/0.000 ms\n [2025-08-26 16:26:05][350033885567120][876 ms][DEBUG] check_internet: online [2025-08-26 16:26:05][350033885567120][876 ms][DEBUG] END check_internet in 437 ms [2025-08-26 16:26:05][350033885567120][876 ms][DEBUG] rawBody.length=1150 [2025-08-26 16:26:05][350033885567120][876 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350033885567120\",\"model\":\"SM-S136DL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9287\"}'\'' -e'"" [2025-08-26 16:26:05][350033885567120][876 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:26:05][350033885567120][876 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350033885567120\",\"model\":\"SM-S136DL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9287\"}'\'' -e'"" [2025-08-26 16:26:09][350033885567120][4906 ms][DEBUG] proc_open done in 4030 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 16:26:09][350033885567120][4906 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-26 16:26:09][350033885567120][4906 ms][WARN] Detected error: Process with pid 22186 either refused to load frida-agent, or terminated during injection [2025-08-26 16:26:09][350033885567120][4906 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 16:26:09][350033885567120][5062 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 16:26:09][350033885567120][5062 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 16:26:09][350033885567120][5062 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 16:26:09][350033885567120][5187 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 16:26:09][350033885567120][5187 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 16:26:10][350033885567120][5375 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 16:26:12][350033885567120][7390 ms][DEBUG] START check_boot_completed [2025-08-26 16:26:12][350033885567120][7390 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:26:12][350033885567120][7421 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 16:26:12][350033885567120][7421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:26:12][350033885567120][7468 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:26:12][350033885567120][7468 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 16:26:15][350033885567120][10483 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 16:26:15][350033885567120][10483 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350033885567120\",\"model\":\"SM-S136DL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9287\"}'\'' -e'"" [2025-08-26 16:26:20][350033885567120][15466 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a9da43d3-40e7-408d-b66e-ca2733fcbe14","id":"QR_a9da43d3-40e7-408d-b66e-ca2733fcbe14","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:26:20][350033885567120][15622 ms][DEBUG] proc_open done in 5139 ms; code=255; res.len=3343 [2025-08-26 16:26:20][350033885567120][15622 ms][DEBUG] END runCmdUntilRes#2 in 5140 ms [2025-08-26 16:26:20][350033885567120][15622 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:27:03][352192666404552][1 ms][INFO] === Request start === [2025-08-26 16:27:03][352192666404552][1 ms][DEBUG] START check_scloud [2025-08-26 16:27:03][352192666404552][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:27:04][352192666404552][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 24727 4969 23678768 126664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:27:04][352192666404552][315 ms][DEBUG] targetPkg: running [2025-08-26 16:27:04][352192666404552][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-26 16:27:04][352192666404552][316 ms][DEBUG] START check_boot_completed [2025-08-26 16:27:04][352192666404552][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:27:04][352192666404552][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:27:04][352192666404552][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:27:04][352192666404552][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:27:04][352192666404552][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 16:27:04][352192666404552][409 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:27:04][352192666404552][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192666404552\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1304\"}'\'' -e'"" [2025-08-26 16:27:04][352192666404552][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:27:04][352192666404552][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192666404552\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1304\"}'\'' -e'"" [2025-08-26 16:27:08][352192666404552][4267 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f131796a-168c-4211-b19f-4f2fb62da685","id":"QR_f131796a-168c-4211-b19f-4f2fb62da685","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:27:08][352192666404552][4423 ms][DEBUG] proc_open done in 4015 ms; code=255; res.len=3343 [2025-08-26 16:27:08][352192666404552][4423 ms][DEBUG] END runCmdUntilRes#1 in 4015 ms [2025-08-26 16:27:08][352192666404552][4423 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:28:03][354097155458241][0 ms][INFO] === Request start === [2025-08-26 16:28:03][354097155458241][1 ms][DEBUG] START check_scloud [2025-08-26 16:28:03][354097155458241][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:28:03][354097155458241][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 24727 4969 23835604 137132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:28:03][354097155458241][308 ms][DEBUG] targetPkg: running [2025-08-26 16:28:03][354097155458241][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-26 16:28:03][354097155458241][308 ms][DEBUG] START check_boot_completed [2025-08-26 16:28:03][354097155458241][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:28:03][354097155458241][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 16:28:03][354097155458241][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:28:03][354097155458241][417 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 16:28:03][354097155458241][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 16:28:03][354097155458241][417 ms][DEBUG] START check_internet [2025-08-26 16:28:03][354097155458241][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:28:03][354097155458241][729 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=173 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 173.225/173.225/173.225/0.000 ms\n [2025-08-26 16:28:03][354097155458241][729 ms][DEBUG] check_internet: online [2025-08-26 16:28:03][354097155458241][729 ms][DEBUG] END check_internet in 312 ms [2025-08-26 16:28:03][354097155458241][730 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:28:03][354097155458241][730 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354097155458241\",\"model\":\"SM-A166P\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1048\"}'\'' -e'"" [2025-08-26 16:28:03][354097155458241][730 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:28:03][354097155458241][730 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354097155458241\",\"model\":\"SM-A166P\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1048\"}'\'' -e'"" [2025-08-26 16:28:07][354097155458241][4509 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_95e444a7-4935-45c2-9e0c-d49c9517dc42","id":"QR_95e444a7-4935-45c2-9e0c-d49c9517dc42","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:28:07][354097155458241][4666 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-26 16:28:07][354097155458241][4666 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-26 16:28:07][354097155458241][4666 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:29:02][350040125315772][0 ms][INFO] === Request start === [2025-08-26 16:29:02][350040125315772][1 ms][DEBUG] START check_scloud [2025-08-26 16:29:02][350040125315772][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:29:02][350040125315772][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 24727 4969 23958444 149108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:29:02][350040125315772][310 ms][DEBUG] targetPkg: running [2025-08-26 16:29:02][350040125315772][310 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 16:29:02][350040125315772][310 ms][DEBUG] START check_boot_completed [2025-08-26 16:29:02][350040125315772][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:29:02][350040125315772][357 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 16:29:02][350040125315772][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:29:02][350040125315772][435 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 16:29:02][350040125315772][435 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 16:29:02][350040125315772][435 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:29:02][350040125315772][436 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350040125315772\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3156\"}'\'' -e'"" [2025-08-26 16:29:02][350040125315772][436 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:29:02][350040125315772][436 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350040125315772\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3156\"}'\'' -e'"" [2025-08-26 16:29:06][350040125315772][4637 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1493e2a0-4f11-4b3b-8508-ebe4044f53a2","id":"QR_1493e2a0-4f11-4b3b-8508-ebe4044f53a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:29:06][350040125315772][4793 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3343 [2025-08-26 16:29:06][350040125315772][4793 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-26 16:29:06][350040125315772][4793 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:30:04][352060488785997][1 ms][INFO] === Request start === [2025-08-26 16:30:04][352060488785997][1 ms][DEBUG] START check_scloud [2025-08-26 16:30:04][352060488785997][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:30:04][352060488785997][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 24727 4969 24101200 160180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:30:04][352060488785997][302 ms][DEBUG] targetPkg: running [2025-08-26 16:30:04][352060488785997][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-26 16:30:04][352060488785997][302 ms][DEBUG] START check_boot_completed [2025-08-26 16:30:04][352060488785997][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:30:05][352060488785997][333 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 16:30:05][352060488785997][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:30:05][352060488785997][380 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:30:05][352060488785997][381 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 16:30:05][352060488785997][381 ms][DEBUG] START check_internet [2025-08-26 16:30:05][352060488785997][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:30:05][352060488785997][896 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.520/201.520/201.520/0.000 ms\n [2025-08-26 16:30:05][352060488785997][896 ms][DEBUG] check_internet: online [2025-08-26 16:30:05][352060488785997][896 ms][DEBUG] END check_internet in 515 ms [2025-08-26 16:30:05][352060488785997][896 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:30:05][352060488785997][896 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060488785997\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7184\"}'\'' -e'"" [2025-08-26 16:30:05][352060488785997][896 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:30:05][352060488785997][896 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060488785997\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7184\"}'\'' -e'"" [2025-08-26 16:30:09][352060488785997][4816 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dc2b4c6d-49f7-49aa-ab0c-ecb13a8dc7d2","id":"QR_dc2b4c6d-49f7-49aa-ab0c-ecb13a8dc7d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:30:09][352060488785997][4973 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-26 16:30:09][352060488785997][4973 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-26 16:30:09][352060488785997][4973 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:30:11][352549930037700][0 ms][INFO] === Request start === [2025-08-26 16:30:11][352549930037700][1 ms][DEBUG] START check_scloud [2025-08-26 16:30:11][352549930037700][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:30:11][352549930037700][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 24727 4969 24294360 171020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:30:11][352549930037700][270 ms][DEBUG] targetPkg: running [2025-08-26 16:30:11][352549930037700][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-26 16:30:11][352549930037700][270 ms][DEBUG] START check_boot_completed [2025-08-26 16:30:11][352549930037700][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:30:11][352549930037700][301 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 16:30:11][352549930037700][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:30:11][352549930037700][348 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:30:11][352549930037700][348 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 16:30:11][352549930037700][348 ms][DEBUG] START check_internet [2025-08-26 16:30:11][352549930037700][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:30:11][352549930037700][629 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=177 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 177.565/177.565/177.565/0.000 ms\n [2025-08-26 16:30:11][352549930037700][629 ms][DEBUG] check_internet: online [2025-08-26 16:30:11][352549930037700][629 ms][DEBUG] END check_internet in 281 ms [2025-08-26 16:30:11][352549930037700][629 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:30:11][352549930037700][629 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549930037700\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4752\"}'\'' -e'"" [2025-08-26 16:30:11][352549930037700][630 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:30:11][352549930037700][630 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549930037700\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4752\"}'\'' -e'"" [2025-08-26 16:30:15][352549930037700][4363 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_da6bab54-8da4-4a18-8dfa-49d6be9f0dc0","id":"QR_da6bab54-8da4-4a18-8dfa-49d6be9f0dc0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:30:15][352549930037700][4519 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-08-26 16:30:15][352549930037700][4519 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-26 16:30:15][352549930037700][4519 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:31:03][354484225606092][0 ms][INFO] === Request start === [2025-08-26 16:31:03][354484225606092][1 ms][DEBUG] START check_scloud [2025-08-26 16:31:03][354484225606092][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:31:04][354484225606092][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 24727 4969 24403124 183088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:31:04][354484225606092][316 ms][DEBUG] targetPkg: running [2025-08-26 16:31:04][354484225606092][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-26 16:31:04][354484225606092][317 ms][DEBUG] START check_boot_completed [2025-08-26 16:31:04][354484225606092][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:31:04][354484225606092][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 16:31:04][354484225606092][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:31:04][354484225606092][457 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 16:31:04][354484225606092][457 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 16:31:04][354484225606092][457 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:31:04][354484225606092][457 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354484225606092\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4568\"}'\'' -e'"" [2025-08-26 16:31:04][354484225606092][457 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:31:04][354484225606092][457 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354484225606092\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4568\"}'\'' -e'"" [2025-08-26 16:31:07][354484225606092][4018 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-26 16:31:07][354484225606092][4175 ms][DEBUG] proc_open done in 3717 ms; code=255; res.len=115 [2025-08-26 16:31:07][354484225606092][4175 ms][DEBUG] END runCmdUntilRes#1 in 3717 ms [2025-08-26 16:31:07][354484225606092][4175 ms][INFO] SUCCESS response from frida (len=115) [2025-08-26 16:31:08][][0 ms][INFO] === Request start === [2025-08-26 16:31:08][][1 ms][DEBUG] START check_scloud [2025-08-26 16:31:08][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:31:08][][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 24727 4969 24565052 193956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:31:08][][311 ms][DEBUG] targetPkg: running [2025-08-26 16:31:08][][311 ms][DEBUG] END check_scloud in 311 ms [2025-08-26 16:31:08][][311 ms][DEBUG] START check_boot_completed [2025-08-26 16:31:08][][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:31:08][][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 16:31:08][][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:31:08][][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 16:31:08][][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 16:31:08][][421 ms][DEBUG] rawBody.length=1129 [2025-08-26 16:31:08][][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW10KRBZN\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3319\"}'\'' -e'"" [2025-08-26 16:31:08][][421 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:31:08][][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW10KRBZN\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3319\"}'\'' -e'"" [2025-08-26 16:31:12][][4091 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 16:31:12][][4247 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=107 [2025-08-26 16:31:12][][4247 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-26 16:31:12][][4248 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 16:31:14][354484225606092][0 ms][INFO] === Request start === [2025-08-26 16:31:14][354484225606092][1 ms][DEBUG] START check_scloud [2025-08-26 16:31:14][354484225606092][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:31:14][354484225606092][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 24727 4969 24691268 205996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:31:14][354484225606092][325 ms][DEBUG] targetPkg: running [2025-08-26 16:31:14][354484225606092][325 ms][DEBUG] END check_scloud in 324 ms [2025-08-26 16:31:14][354484225606092][325 ms][DEBUG] START check_boot_completed [2025-08-26 16:31:14][354484225606092][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:31:14][354484225606092][372 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 16:31:14][354484225606092][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:31:14][354484225606092][418 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:31:14][354484225606092][419 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 16:31:14][354484225606092][419 ms][DEBUG] rawBody.length=1149 [2025-08-26 16:31:14][354484225606092][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354484225606092\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3835\"}'\'' -e'"" [2025-08-26 16:31:14][354484225606092][419 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:31:14][354484225606092][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354484225606092\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3835\"}'\'' -e'"" [2025-08-26 16:31:19][354484225606092][5058 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cfd480f0-68f7-4c02-b67a-885a9a272c7b","id":"QR_cfd480f0-68f7-4c02-b67a-885a9a272c7b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:31:19][354484225606092][5214 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3343 [2025-08-26 16:31:19][354484225606092][5214 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-08-26 16:31:19][354484225606092][5214 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:32:05][355198113253804][1 ms][INFO] === Request start === [2025-08-26 16:32:05][355198113253804][1 ms][DEBUG] START check_scloud [2025-08-26 16:32:05][355198113253804][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:32:05][355198113253804][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 24727 4969 24807136 217036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:32:05][355198113253804][308 ms][DEBUG] targetPkg: running [2025-08-26 16:32:05][355198113253804][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-26 16:32:05][355198113253804][308 ms][DEBUG] START check_boot_completed [2025-08-26 16:32:05][355198113253804][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:32:05][355198113253804][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 16:32:05][355198113253804][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:32:05][355198113253804][433 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 16:32:05][355198113253804][433 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 16:32:05][355198113253804][433 ms][DEBUG] START check_internet [2025-08-26 16:32:05][355198113253804][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:32:05][355198113253804][761 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.090/201.090/201.090/0.000 ms\n [2025-08-26 16:32:05][355198113253804][761 ms][DEBUG] check_internet: online [2025-08-26 16:32:05][355198113253804][761 ms][DEBUG] END check_internet in 328 ms [2025-08-26 16:32:05][355198113253804][761 ms][DEBUG] rawBody.length=1158 [2025-08-26 16:32:05][355198113253804][761 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355198113253804\",\"model\":\"SM-P610\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52N50XCTGH\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6361\"}'\'' -e'"" [2025-08-26 16:32:05][355198113253804][761 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:32:05][355198113253804][761 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355198113253804\",\"model\":\"SM-P610\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52N50XCTGH\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"PHE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6361\"}'\'' -e'"" [2025-08-26 16:32:10][355198113253804][4994 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_73ad80a7-83ce-4a07-8a9a-8236c2dd94f1","id":"QR_73ad80a7-83ce-4a07-8a9a-8236c2dd94f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:32:10][355198113253804][5150 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-26 16:32:10][355198113253804][5150 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-26 16:32:10][355198113253804][5150 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:33:03][352288966563327][0 ms][INFO] === Request start === [2025-08-26 16:33:03][352288966563327][1 ms][DEBUG] START check_scloud [2025-08-26 16:33:03][352288966563327][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:33:03][352288966563327][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 24727 4969 24941508 228836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:33:03][352288966563327][305 ms][DEBUG] targetPkg: running [2025-08-26 16:33:03][352288966563327][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 16:33:03][352288966563327][305 ms][DEBUG] START check_boot_completed [2025-08-26 16:33:03][352288966563327][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:33:03][352288966563327][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 16:33:03][352288966563327][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:33:03][352288966563327][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:33:03][352288966563327][399 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 16:33:03][352288966563327][399 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:33:03][352288966563327][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966563327\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5512\"}'\'' -e'"" [2025-08-26 16:33:03][352288966563327][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:33:03][352288966563327][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966563327\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5512\"}'\'' -e'"" [2025-08-26 16:33:08][352288966563327][4429 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_de332190-4d25-4325-9ff5-b24007fa3a5c","id":"QR_de332190-4d25-4325-9ff5-b24007fa3a5c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:33:08][352288966563327][4585 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-26 16:33:08][352288966563327][4585 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-26 16:33:08][352288966563327][4585 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:33:10][350042730501085][0 ms][INFO] === Request start === [2025-08-26 16:33:10][350042730501085][1 ms][DEBUG] START check_scloud [2025-08-26 16:33:10][350042730501085][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:33:10][350042730501085][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 24727 4969 25073740 240560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:33:10][350042730501085][268 ms][DEBUG] targetPkg: running [2025-08-26 16:33:10][350042730501085][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-26 16:33:10][350042730501085][268 ms][DEBUG] START check_boot_completed [2025-08-26 16:33:10][350042730501085][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:33:11][350042730501085][314 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:33:11][350042730501085][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:33:11][350042730501085][361 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:33:11][350042730501085][361 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 16:33:11][350042730501085][361 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:33:11][350042730501085][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042730501085\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3795\"}'\'' -e'"" [2025-08-26 16:33:11][350042730501085][361 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:33:11][350042730501085][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042730501085\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3795\"}'\'' -e'"" [2025-08-26 16:33:14][350042730501085][4220 ms][DEBUG] proc_open done in 3858 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 16:33:14][350042730501085][4220 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-26 16:33:14][350042730501085][4220 ms][WARN] Detected error: Process with pid 24727 either refused to load frida-agent, or terminated during injection [2025-08-26 16:33:14][350042730501085][4220 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 16:33:15][350042730501085][4376 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 16:33:15][350042730501085][4376 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 16:33:15][350042730501085][4376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 16:33:15][350042730501085][4517 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 16:33:15][350042730501085][4517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 16:33:15][350042730501085][4704 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 16:33:17][350042730501085][6719 ms][DEBUG] START check_boot_completed [2025-08-26 16:33:17][350042730501085][6719 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:33:17][350042730501085][6766 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 16:33:17][350042730501085][6766 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:33:17][350042730501085][6829 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 16:33:17][350042730501085][6829 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 16:33:20][350042730501085][9843 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 16:33:20][350042730501085][9843 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350042730501085\",\"model\":\"SM-A346B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3795\"}'\'' -e'"" [2025-08-26 16:33:24][350042730501085][13514 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_43af80a9-d95d-4adf-978b-706442438d80","id":"QR_43af80a9-d95d-4adf-978b-706442438d80","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:33:24][350042730501085][13670 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=3343 [2025-08-26 16:33:24][350042730501085][13670 ms][DEBUG] END runCmdUntilRes#2 in 3827 ms [2025-08-26 16:33:24][350042730501085][13670 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:33:27][356722918273987][0 ms][INFO] === Request start === [2025-08-26 16:33:27][356722918273987][1 ms][DEBUG] START check_scloud [2025-08-26 16:33:27][356722918273987][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:33:27][356722918273987][237 ms][DEBUG] SU: done in 237 ms; outu0_a118 25960 4969 23713816 124380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:33:27][356722918273987][237 ms][DEBUG] targetPkg: running [2025-08-26 16:33:27][356722918273987][238 ms][DEBUG] END check_scloud in 237 ms [2025-08-26 16:33:27][356722918273987][238 ms][DEBUG] START check_boot_completed [2025-08-26 16:33:27][356722918273987][238 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:33:27][356722918273987][284 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 16:33:27][356722918273987][284 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:33:27][356722918273987][333 ms][DEBUG] SU: done in 49 ms; out [2025-08-26 16:33:27][356722918273987][333 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 16:33:27][356722918273987][333 ms][DEBUG] rawBody.length=1149 [2025-08-26 16:33:27][356722918273987][333 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722918273987\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5159\"}'\'' -e'"" [2025-08-26 16:33:27][356722918273987][333 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:33:27][356722918273987][333 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722918273987\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5159\"}'\'' -e'"" [2025-08-26 16:33:32][356722918273987][5392 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_475b28d3-3aff-4536-9103-ba1eec98dcfd","id":"QR_475b28d3-3aff-4536-9103-ba1eec98dcfd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:33:32][356722918273987][5548 ms][DEBUG] proc_open done in 5215 ms; code=255; res.len=3343 [2025-08-26 16:33:32][356722918273987][5548 ms][DEBUG] END runCmdUntilRes#1 in 5215 ms [2025-08-26 16:33:32][356722918273987][5548 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:34:05][350722246153311][0 ms][INFO] === Request start === [2025-08-26 16:34:05][350722246153311][1 ms][DEBUG] START check_scloud [2025-08-26 16:34:05][350722246153311][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:34:05][350722246153311][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 25960 4969 23773112 137968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:34:05][350722246153311][328 ms][DEBUG] targetPkg: running [2025-08-26 16:34:05][350722246153311][328 ms][DEBUG] END check_scloud in 327 ms [2025-08-26 16:34:05][350722246153311][328 ms][DEBUG] START check_boot_completed [2025-08-26 16:34:05][350722246153311][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:34:05][350722246153311][375 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 16:34:05][350722246153311][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:34:05][350722246153311][453 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 16:34:05][350722246153311][453 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 16:34:05][350722246153311][453 ms][DEBUG] START check_internet [2025-08-26 16:34:05][350722246153311][453 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:34:06][350722246153311][750 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=160 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 160.456/160.456/160.456/0.000 ms\n [2025-08-26 16:34:06][350722246153311][750 ms][DEBUG] check_internet: online [2025-08-26 16:34:06][350722246153311][750 ms][DEBUG] END check_internet in 297 ms [2025-08-26 16:34:06][350722246153311][750 ms][DEBUG] rawBody.length=1149 [2025-08-26 16:34:06][350722246153311][750 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350722246153311\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6058\"}'\'' -e'"" [2025-08-26 16:34:06][350722246153311][750 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:34:06][350722246153311][750 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350722246153311\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6058\"}'\'' -e'"" [2025-08-26 16:34:09][350722246153311][4623 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-26 16:34:10][350722246153311][4780 ms][DEBUG] proc_open done in 4029 ms; code=255; res.len=101 [2025-08-26 16:34:10][350722246153311][4780 ms][DEBUG] END runCmdUntilRes#1 in 4029 ms [2025-08-26 16:34:10][350722246153311][4780 ms][INFO] SUCCESS response from frida (len=101) [2025-08-26 16:34:10][][1 ms][INFO] === Request start === [2025-08-26 16:34:10][][1 ms][DEBUG] START check_scloud [2025-08-26 16:34:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:34:10][][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 25960 4969 23907584 149844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:34:10][][303 ms][DEBUG] targetPkg: running [2025-08-26 16:34:10][][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 16:34:10][][303 ms][DEBUG] START check_boot_completed [2025-08-26 16:34:10][][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:34:10][][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:34:10][][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:34:10][][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:34:10][][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 16:34:10][][397 ms][DEBUG] START check_internet [2025-08-26 16:34:10][][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:34:10][][600 ms][DEBUG] SU: done in 203 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=114 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 114.583/114.583/114.583/0.000 ms\n [2025-08-26 16:34:10][][600 ms][DEBUG] check_internet: online [2025-08-26 16:34:10][][600 ms][DEBUG] END check_internet in 203 ms [2025-08-26 16:34:10][][600 ms][DEBUG] rawBody.length=1130 [2025-08-26 16:34:10][][600 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCY11NYTKJ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4647\"}'\'' -e'"" [2025-08-26 16:34:10][][600 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:34:10][][600 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCY11NYTKJ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4647\"}'\'' -e'"" [2025-08-26 16:34:14][][4318 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-26 16:34:14][][4474 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=101 [2025-08-26 16:34:14][][4474 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-26 16:34:14][][4474 ms][INFO] SUCCESS response from frida (len=101) [2025-08-26 16:34:15][350722246153311][0 ms][INFO] === Request start === [2025-08-26 16:34:15][350722246153311][1 ms][DEBUG] START check_scloud [2025-08-26 16:34:15][350722246153311][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:34:15][350722246153311][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 25960 4969 24070536 160844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:34:15][350722246153311][315 ms][DEBUG] targetPkg: running [2025-08-26 16:34:15][350722246153311][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-26 16:34:15][350722246153311][315 ms][DEBUG] START check_boot_completed [2025-08-26 16:34:15][350722246153311][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:34:15][350722246153311][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:34:15][350722246153311][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:34:15][350722246153311][410 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 16:34:15][350722246153311][410 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 16:34:15][350722246153311][410 ms][DEBUG] START check_internet [2025-08-26 16:34:15][350722246153311][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:34:16][350722246153311][643 ms][DEBUG] SU: done in 233 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=114 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 114.510/114.510/114.510/0.000 ms\n [2025-08-26 16:34:16][350722246153311][643 ms][DEBUG] check_internet: online [2025-08-26 16:34:16][350722246153311][643 ms][DEBUG] END check_internet in 233 ms [2025-08-26 16:34:16][350722246153311][643 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:34:16][350722246153311][643 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350722246153311\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9170\"}'\'' -e'"" [2025-08-26 16:34:16][350722246153311][643 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:34:16][350722246153311][643 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350722246153311\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9170\"}'\'' -e'"" [2025-08-26 16:34:20][350722246153311][4735 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d18088a8-1bd7-47a5-8e45-7d4642deebb4","id":"QR_d18088a8-1bd7-47a5-8e45-7d4642deebb4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:34:20][350722246153311][4891 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-08-26 16:34:20][350722246153311][4892 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-26 16:34:20][350722246153311][4892 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:35:34][356463671238145][0 ms][INFO] === Request start === [2025-08-26 16:35:34][356463671238145][1 ms][DEBUG] START check_scloud [2025-08-26 16:35:34][356463671238145][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:35:34][356463671238145][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 25960 4969 24157776 171712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:35:34][356463671238145][299 ms][DEBUG] targetPkg: running [2025-08-26 16:35:34][356463671238145][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-26 16:35:34][356463671238145][299 ms][DEBUG] START check_boot_completed [2025-08-26 16:35:34][356463671238145][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:35:34][356463671238145][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:35:34][356463671238145][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:35:34][356463671238145][394 ms][DEBUG] SU: done in 49 ms; out [2025-08-26 16:35:35][356463671238145][394 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 16:35:35][356463671238145][394 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:35:35][356463671238145][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356463671238145\",\"model\":\"SM-A245N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7532\"}'\'' -e'"" [2025-08-26 16:35:35][356463671238145][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:35:35][356463671238145][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356463671238145\",\"model\":\"SM-A245N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7532\"}'\'' -e'"" [2025-08-26 16:35:38][356463671238145][3985 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 16:35:38][356463671238145][4141 ms][DEBUG] proc_open done in 3747 ms; code=255; res.len=107 [2025-08-26 16:35:38][356463671238145][4141 ms][DEBUG] END runCmdUntilRes#1 in 3747 ms [2025-08-26 16:35:38][356463671238145][4141 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 16:35:39][][0 ms][INFO] === Request start === [2025-08-26 16:35:39][][1 ms][DEBUG] START check_scloud [2025-08-26 16:35:39][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:35:39][][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 25960 4969 24321880 183532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:35:39][][314 ms][DEBUG] targetPkg: running [2025-08-26 16:35:39][][314 ms][DEBUG] END check_scloud in 314 ms [2025-08-26 16:35:39][][314 ms][DEBUG] START check_boot_completed [2025-08-26 16:35:39][][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:35:39][][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 16:35:39][][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:35:39][][423 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 16:35:39][][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 16:35:39][][424 ms][DEBUG] rawBody.length=1129 [2025-08-26 16:35:39][][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A245N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R59X4003SZV\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4092\"}'\'' -e'"" [2025-08-26 16:35:39][][424 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:35:39][][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A245N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R59X4003SZV\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4092\"}'\'' -e'"" [2025-08-26 16:35:43][][3938 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 16:35:43][][4094 ms][DEBUG] proc_open done in 3670 ms; code=255; res.len=107 [2025-08-26 16:35:43][][4095 ms][DEBUG] END runCmdUntilRes#1 in 3670 ms [2025-08-26 16:35:43][][4095 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 16:35:45][356463671238145][0 ms][INFO] === Request start === [2025-08-26 16:35:45][356463671238145][1 ms][DEBUG] START check_scloud [2025-08-26 16:35:45][356463671238145][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:35:45][356463671238145][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 25960 4969 24510944 194308 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:35:45][356463671238145][306 ms][DEBUG] targetPkg: running [2025-08-26 16:35:45][356463671238145][306 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 16:35:45][356463671238145][306 ms][DEBUG] START check_boot_completed [2025-08-26 16:35:45][356463671238145][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:35:45][356463671238145][337 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 16:35:45][356463671238145][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:35:45][356463671238145][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:35:45][356463671238145][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 16:35:45][356463671238145][384 ms][DEBUG] rawBody.length=1149 [2025-08-26 16:35:45][356463671238145][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356463671238145\",\"model\":\"SM-A245N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2917\"}'\'' -e'"" [2025-08-26 16:35:45][356463671238145][384 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:35:45][356463671238145][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356463671238145\",\"model\":\"SM-A245N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2917\"}'\'' -e'"" [2025-08-26 16:35:50][356463671238145][5430 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6f086c73-12ef-4b8d-b2ad-8817ba278580","id":"QR_6f086c73-12ef-4b8d-b2ad-8817ba278580","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:35:50][356463671238145][5586 ms][DEBUG] proc_open done in 5202 ms; code=255; res.len=3343 [2025-08-26 16:35:50][356463671238145][5586 ms][DEBUG] END runCmdUntilRes#1 in 5202 ms [2025-08-26 16:35:50][356463671238145][5586 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:36:04][357967977528537][0 ms][INFO] === Request start === [2025-08-26 16:36:04][357967977528537][1 ms][DEBUG] START check_scloud [2025-08-26 16:36:04][357967977528537][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:36:04][357967977528537][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 25960 4969 24618656 206420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:36:04][357967977528537][297 ms][DEBUG] targetPkg: running [2025-08-26 16:36:04][357967977528537][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-26 16:36:04][357967977528537][297 ms][DEBUG] START check_boot_completed [2025-08-26 16:36:04][357967977528537][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:36:04][357967977528537][343 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:36:04][357967977528537][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:36:04][357967977528537][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:36:04][357967977528537][390 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 16:36:04][357967977528537][390 ms][DEBUG] START check_internet [2025-08-26 16:36:04][357967977528537][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:36:04][357967977528537][767 ms][DEBUG] SU: done in 376 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.291/202.291/202.291/0.000 ms\n [2025-08-26 16:36:04][357967977528537][767 ms][DEBUG] check_internet: online [2025-08-26 16:36:04][357967977528537][767 ms][DEBUG] END check_internet in 377 ms [2025-08-26 16:36:04][357967977528537][767 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:36:04][357967977528537][767 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967977528537\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8977\"}'\'' -e'"" [2025-08-26 16:36:04][357967977528537][767 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:36:04][357967977528537][767 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967977528537\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8977\"}'\'' -e'"" [2025-08-26 16:36:08][357967977528537][4202 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-26 16:36:08][357967977528537][4358 ms][DEBUG] proc_open done in 3591 ms; code=255; res.len=115 [2025-08-26 16:36:08][357967977528537][4358 ms][DEBUG] END runCmdUntilRes#1 in 3591 ms [2025-08-26 16:36:08][357967977528537][4358 ms][INFO] SUCCESS response from frida (len=115) [2025-08-26 16:36:08][][0 ms][INFO] === Request start === [2025-08-26 16:36:08][][1 ms][DEBUG] START check_scloud [2025-08-26 16:36:08][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:36:09][][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 25960 4969 24734596 217156 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:36:09][][310 ms][DEBUG] targetPkg: running [2025-08-26 16:36:09][][310 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 16:36:09][][310 ms][DEBUG] START check_boot_completed [2025-08-26 16:36:09][][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:36:09][][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 16:36:09][][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:36:09][][388 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:36:09][][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 16:36:09][][388 ms][DEBUG] START check_internet [2025-08-26 16:36:09][][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:36:09][][591 ms][DEBUG] SU: done in 203 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=114 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 114.499/114.499/114.499/0.000 ms\n [2025-08-26 16:36:09][][591 ms][DEBUG] check_internet: online [2025-08-26 16:36:09][][591 ms][DEBUG] END check_internet in 203 ms [2025-08-26 16:36:09][][591 ms][DEBUG] rawBody.length=1129 [2025-08-26 16:36:09][][591 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y309VEWA\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7991\"}'\'' -e'"" [2025-08-26 16:36:09][][591 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:36:09][][591 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y309VEWA\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7991\"}'\'' -e'"" [2025-08-26 16:36:12][][3872 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 16:36:12][][4028 ms][DEBUG] proc_open done in 3437 ms; code=255; res.len=107 [2025-08-26 16:36:12][][4028 ms][DEBUG] END runCmdUntilRes#1 in 3437 ms [2025-08-26 16:36:12][][4028 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 16:36:14][357967977528537][1 ms][INFO] === Request start === [2025-08-26 16:36:14][357967977528537][1 ms][DEBUG] START check_scloud [2025-08-26 16:36:14][357967977528537][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:36:15][357967977528537][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 25960 4969 24907788 229176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:36:15][357967977528537][303 ms][DEBUG] targetPkg: running [2025-08-26 16:36:15][357967977528537][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 16:36:15][357967977528537][303 ms][DEBUG] START check_boot_completed [2025-08-26 16:36:15][357967977528537][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:36:15][357967977528537][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:36:15][357967977528537][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:36:15][357967977528537][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:36:15][357967977528537][397 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 16:36:15][357967977528537][397 ms][DEBUG] START check_internet [2025-08-26 16:36:15][357967977528537][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:36:15][357967977528537][725 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=178 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 178.992/178.992/178.992/0.000 ms\n [2025-08-26 16:36:15][357967977528537][725 ms][DEBUG] check_internet: online [2025-08-26 16:36:15][357967977528537][725 ms][DEBUG] END check_internet in 328 ms [2025-08-26 16:36:15][357967977528537][725 ms][DEBUG] rawBody.length=1149 [2025-08-26 16:36:15][357967977528537][725 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967977528537\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5226\"}'\'' -e'"" [2025-08-26 16:36:15][357967977528537][725 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:36:15][357967977528537][725 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967977528537\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5226\"}'\'' -e'"" [2025-08-26 16:36:20][357967977528537][5817 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a13e6cfb-a485-4fd7-92a4-96cf1340a01d","id":"QR_a13e6cfb-a485-4fd7-92a4-96cf1340a01d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:36:20][357967977528537][5973 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3343 [2025-08-26 16:36:20][357967977528537][5973 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-08-26 16:36:20][357967977528537][5973 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:41:29][351351020657393][1 ms][INFO] === Request start === [2025-08-26 16:41:29][351351020657393][1 ms][DEBUG] START check_scloud [2025-08-26 16:41:29][351351020657393][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:41:30][351351020657393][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 25960 4969 25002116 240548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:41:30][351351020657393][295 ms][DEBUG] targetPkg: running [2025-08-26 16:41:30][351351020657393][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-26 16:41:30][351351020657393][295 ms][DEBUG] START check_boot_completed [2025-08-26 16:41:30][351351020657393][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:41:30][351351020657393][326 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 16:41:30][351351020657393][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:41:30][351351020657393][373 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:41:30][351351020657393][373 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 16:41:30][351351020657393][373 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:41:30][351351020657393][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351020657393\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2207\"}'\'' -e'"" [2025-08-26 16:41:30][351351020657393][373 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:41:30][351351020657393][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351020657393\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2207\"}'\'' -e'"" [2025-08-26 16:41:33][351351020657393][4169 ms][DEBUG] proc_open done in 3796 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 16:41:33][351351020657393][4170 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-26 16:41:33][351351020657393][4170 ms][WARN] Detected error: Process with pid 25960 either refused to load frida-agent, or terminated during injection [2025-08-26 16:41:33][351351020657393][4170 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 16:41:34][351351020657393][4326 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 16:41:34][351351020657393][4326 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 16:41:34][351351020657393][4326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 16:41:34][351351020657393][4482 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 16:41:34][351351020657393][4482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 16:41:34][351351020657393][4638 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 16:41:36][351351020657393][6653 ms][DEBUG] START check_boot_completed [2025-08-26 16:41:36][351351020657393][6653 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:41:36][351351020657393][6700 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 16:41:36][351351020657393][6700 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:41:36][351351020657393][6747 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:41:36][351351020657393][6747 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 16:41:39][351351020657393][9762 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 16:41:39][351351020657393][9762 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351020657393\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2207\"}'\'' -e'"" [2025-08-26 16:41:43][351351020657393][13339 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 16:41:43][351351020657393][13495 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=107 [2025-08-26 16:41:43][351351020657393][13495 ms][DEBUG] END runCmdUntilRes#2 in 3734 ms [2025-08-26 16:41:43][351351020657393][13495 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 16:41:43][][0 ms][INFO] === Request start === [2025-08-26 16:41:43][][1 ms][DEBUG] START check_scloud [2025-08-26 16:41:43][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:41:43][][248 ms][DEBUG] SU: done in 247 ms; outu0_a118 27210 4969 23736348 124108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:41:43][][248 ms][DEBUG] targetPkg: running [2025-08-26 16:41:43][][248 ms][DEBUG] END check_scloud in 248 ms [2025-08-26 16:41:43][][248 ms][DEBUG] START check_boot_completed [2025-08-26 16:41:43][][248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:41:43][][295 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:41:43][][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:41:43][][342 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:41:43][][342 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 16:41:43][][342 ms][DEBUG] rawBody.length=1129 [2025-08-26 16:41:43][][342 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX3153RSD\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1479\"}'\'' -e'"" [2025-08-26 16:41:43][][342 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:41:43][][342 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX3153RSD\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1479\"}'\'' -e'"" [2025-08-26 16:41:47][][3841 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 16:41:47][][3997 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=107 [2025-08-26 16:41:47][][3997 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-26 16:41:47][][3997 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 16:41:49][351351020657393][0 ms][INFO] === Request start === [2025-08-26 16:41:49][351351020657393][1 ms][DEBUG] START check_scloud [2025-08-26 16:41:49][351351020657393][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:41:49][351351020657393][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 27210 4969 23887076 135520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:41:49][351351020657393][257 ms][DEBUG] targetPkg: running [2025-08-26 16:41:49][351351020657393][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-26 16:41:49][351351020657393][257 ms][DEBUG] START check_boot_completed [2025-08-26 16:41:49][351351020657393][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:41:49][351351020657393][303 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:41:49][351351020657393][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:41:49][351351020657393][350 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:41:49][351351020657393][350 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 16:41:49][351351020657393][350 ms][DEBUG] rawBody.length=1149 [2025-08-26 16:41:49][351351020657393][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351020657393\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2889\"}'\'' -e'"" [2025-08-26 16:41:49][351351020657393][351 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:41:49][351351020657393][351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351020657393\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2889\"}'\'' -e'"" [2025-08-26 16:41:54][351351020657393][5052 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d1b1fbb-c733-4bef-a3f7-e4a20192003d","id":"QR_7d1b1fbb-c733-4bef-a3f7-e4a20192003d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:41:54][351351020657393][5208 ms][DEBUG] proc_open done in 4857 ms; code=255; res.len=3343 [2025-08-26 16:41:54][351351020657393][5208 ms][DEBUG] END runCmdUntilRes#1 in 4857 ms [2025-08-26 16:41:54][351351020657393][5208 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:43:05][355707110896736][0 ms][INFO] === Request start === [2025-08-26 16:43:05][355707110896736][1 ms][DEBUG] START check_scloud [2025-08-26 16:43:05][355707110896736][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:43:05][355707110896736][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 27210 4969 23957240 149616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:43:05][355707110896736][311 ms][DEBUG] targetPkg: running [2025-08-26 16:43:05][355707110896736][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 16:43:05][355707110896736][311 ms][DEBUG] START check_boot_completed [2025-08-26 16:43:05][355707110896736][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:43:05][355707110896736][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:43:05][355707110896736][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:43:05][355707110896736][406 ms][DEBUG] SU: done in 49 ms; out [2025-08-26 16:43:05][355707110896736][406 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 16:43:05][355707110896736][406 ms][DEBUG] rawBody.length=1149 [2025-08-26 16:43:05][355707110896736][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707110896736\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2516\"}'\'' -e'"" [2025-08-26 16:43:05][355707110896736][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:43:05][355707110896736][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707110896736\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2516\"}'\'' -e'"" [2025-08-26 16:43:10][355707110896736][5059 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2624d75a-5d9c-4542-9ac1-8c82e1d8e363","id":"QR_2624d75a-5d9c-4542-9ac1-8c82e1d8e363","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:43:10][355707110896736][5216 ms][DEBUG] proc_open done in 4809 ms; code=255; res.len=3343 [2025-08-26 16:43:10][355707110896736][5216 ms][DEBUG] END runCmdUntilRes#1 in 4809 ms [2025-08-26 16:43:10][355707110896736][5216 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:44:03][357358510923296][1 ms][INFO] === Request start === [2025-08-26 16:44:03][357358510923296][1 ms][DEBUG] START check_scloud [2025-08-26 16:44:03][357358510923296][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:44:03][357358510923296][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 27210 4969 24094480 161004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:44:03][357358510923296][300 ms][DEBUG] targetPkg: running [2025-08-26 16:44:03][357358510923296][301 ms][DEBUG] END check_scloud in 299 ms [2025-08-26 16:44:03][357358510923296][301 ms][DEBUG] START check_boot_completed [2025-08-26 16:44:03][357358510923296][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:44:03][357358510923296][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:44:03][357358510923296][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:44:03][357358510923296][410 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 16:44:03][357358510923296][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 16:44:03][357358510923296][410 ms][DEBUG] START check_internet [2025-08-26 16:44:03][357358510923296][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:44:03][357358510923296][847 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.699/200.699/200.699/0.000 ms\n [2025-08-26 16:44:03][357358510923296][847 ms][DEBUG] check_internet: online [2025-08-26 16:44:03][357358510923296][847 ms][DEBUG] END check_internet in 438 ms [2025-08-26 16:44:03][357358510923296][847 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:44:03][357358510923296][847 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357358510923296\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9618\"}'\'' -e'"" [2025-08-26 16:44:03][357358510923296][847 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:44:03][357358510923296][848 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357358510923296\",\"model\":\"SM-M325F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9618\"}'\'' -e'"" [2025-08-26 16:44:07][357358510923296][4784 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5fe45e91-4c22-47c2-b00a-1ebd49e291d3","id":"QR_5fe45e91-4c22-47c2-b00a-1ebd49e291d3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:44:08][357358510923296][4940 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-08-26 16:44:08][357358510923296][4940 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-26 16:44:08][357358510923296][4940 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:44:10][357962501636443][0 ms][INFO] === Request start === [2025-08-26 16:44:10][357962501636443][0 ms][DEBUG] START check_scloud [2025-08-26 16:44:10][357962501636443][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:44:10][357962501636443][299 ms][DEBUG] SU: done in 299 ms; outu0_a118 27210 4969 24261400 171600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:44:10][357962501636443][299 ms][DEBUG] targetPkg: running [2025-08-26 16:44:10][357962501636443][299 ms][DEBUG] END check_scloud in 299 ms [2025-08-26 16:44:10][357962501636443][299 ms][DEBUG] START check_boot_completed [2025-08-26 16:44:10][357962501636443][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:44:10][357962501636443][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 16:44:10][357962501636443][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:44:10][357962501636443][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:44:10][357962501636443][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 16:44:10][357962501636443][377 ms][DEBUG] START check_internet [2025-08-26 16:44:10][357962501636443][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:44:11][357962501636443][627 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=160 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 160.565/160.565/160.565/0.000 ms\n [2025-08-26 16:44:11][357962501636443][627 ms][DEBUG] check_internet: online [2025-08-26 16:44:11][357962501636443][627 ms][DEBUG] END check_internet in 250 ms [2025-08-26 16:44:11][357962501636443][627 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:44:11][357962501636443][627 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962501636443\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4007\"}'\'' -e'"" [2025-08-26 16:44:11][357962501636443][627 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:44:11][357962501636443][627 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962501636443\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4007\"}'\'' -e'"" [2025-08-26 16:44:14][357962501636443][4298 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_33b1d695-2e26-434a-a8b1-6281a91b4f47","id":"QR_33b1d695-2e26-434a-a8b1-6281a91b4f47","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:44:15][357962501636443][4454 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=3343 [2025-08-26 16:44:15][357962501636443][4454 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-26 16:44:15][357962501636443][4454 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:45:04][350033888485759][0 ms][INFO] === Request start === [2025-08-26 16:45:04][350033888485759][1 ms][DEBUG] START check_scloud [2025-08-26 16:45:04][350033888485759][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:45:04][350033888485759][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 27210 4969 24395672 183588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:45:04][350033888485759][297 ms][DEBUG] targetPkg: running [2025-08-26 16:45:04][350033888485759][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-26 16:45:04][350033888485759][297 ms][DEBUG] START check_boot_completed [2025-08-26 16:45:04][350033888485759][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:45:05][350033888485759][344 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 16:45:05][350033888485759][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:45:05][350033888485759][406 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 16:45:05][350033888485759][406 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 16:45:05][350033888485759][406 ms][DEBUG] rawBody.length=1150 [2025-08-26 16:45:05][350033888485759][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350033888485759\",\"model\":\"SM-S136DL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3825\"}'\'' -e'"" [2025-08-26 16:45:05][350033888485759][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:45:05][350033888485759][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350033888485759\",\"model\":\"SM-S136DL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3825\"}'\'' -e'"" [2025-08-26 16:45:10][350033888485759][5592 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_afc4ed24-596e-4b71-99fb-b7a274668ea0","id":"QR_afc4ed24-596e-4b71-99fb-b7a274668ea0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:45:10][350033888485759][5748 ms][DEBUG] proc_open done in 5342 ms; code=255; res.len=3343 [2025-08-26 16:45:10][350033888485759][5748 ms][DEBUG] END runCmdUntilRes#1 in 5342 ms [2025-08-26 16:45:10][350033888485759][5748 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:51:31][356933581386804][1 ms][INFO] === Request start === [2025-08-26 16:51:31][356933581386804][1 ms][DEBUG] START check_scloud [2025-08-26 16:51:31][356933581386804][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:51:31][356933581386804][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 27210 4969 24481840 195604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:51:31][356933581386804][264 ms][DEBUG] targetPkg: running [2025-08-26 16:51:31][356933581386804][264 ms][DEBUG] END check_scloud in 263 ms [2025-08-26 16:51:31][356933581386804][264 ms][DEBUG] START check_boot_completed [2025-08-26 16:51:31][356933581386804][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:51:31][356933581386804][311 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:51:31][356933581386804][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:51:31][356933581386804][358 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:51:31][356933581386804][358 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 16:51:31][356933581386804][358 ms][DEBUG] rawBody.length=1149 [2025-08-26 16:51:31][356933581386804][358 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356933581386804\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5505\"}'\'' -e'"" [2025-08-26 16:51:31][356933581386804][358 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:51:31][356933581386804][358 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356933581386804\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5505\"}'\'' -e'"" [2025-08-26 16:51:36][356933581386804][5309 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2e59d0e7-6c7a-43ec-922f-0d036056d1c7","id":"QR_2e59d0e7-6c7a-43ec-922f-0d036056d1c7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:51:36][356933581386804][5466 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-08-26 16:51:36][356933581386804][5466 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-08-26 16:51:36][356933581386804][5466 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:53:04][354425640362365][0 ms][INFO] === Request start === [2025-08-26 16:53:04][354425640362365][1 ms][DEBUG] START check_scloud [2025-08-26 16:53:04][354425640362365][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:53:05][354425640362365][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 27210 4969 24647968 207440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:53:05][354425640362365][315 ms][DEBUG] targetPkg: running [2025-08-26 16:53:05][354425640362365][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-26 16:53:05][354425640362365][315 ms][DEBUG] START check_boot_completed [2025-08-26 16:53:05][354425640362365][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:53:05][354425640362365][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:53:05][354425640362365][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:53:05][354425640362365][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:53:05][354425640362365][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 16:53:05][354425640362365][408 ms][DEBUG] rawBody.length=1149 [2025-08-26 16:53:05][354425640362365][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354425640362365\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9087\"}'\'' -e'"" [2025-08-26 16:53:05][354425640362365][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:53:05][354425640362365][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354425640362365\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9087\"}'\'' -e'"" [2025-08-26 16:53:09][354425640362365][5220 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fb026686-4664-43ab-af28-c2488bc516cd","id":"QR_fb026686-4664-43ab-af28-c2488bc516cd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:53:10][354425640362365][5376 ms][DEBUG] proc_open done in 4967 ms; code=255; res.len=3343 [2025-08-26 16:53:10][354425640362365][5376 ms][DEBUG] END runCmdUntilRes#1 in 4967 ms [2025-08-26 16:53:10][354425640362365][5376 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:53:15][352549935863159][0 ms][INFO] === Request start === [2025-08-26 16:53:15][352549935863159][1 ms][DEBUG] START check_scloud [2025-08-26 16:53:15][352549935863159][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:53:15][352549935863159][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 27210 4969 24792616 218104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:53:15][352549935863159][297 ms][DEBUG] targetPkg: running [2025-08-26 16:53:15][352549935863159][297 ms][DEBUG] END check_scloud in 297 ms [2025-08-26 16:53:15][352549935863159][297 ms][DEBUG] START check_boot_completed [2025-08-26 16:53:15][352549935863159][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:53:15][352549935863159][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:53:15][352549935863159][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:53:15][352549935863159][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:53:15][352549935863159][391 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 16:53:15][352549935863159][391 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:53:15][352549935863159][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549935863159\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2243\"}'\'' -e'"" [2025-08-26 16:53:15][352549935863159][391 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:53:15][352549935863159][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549935863159\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2243\"}'\'' -e'"" [2025-08-26 16:53:19][352549935863159][4390 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bc82b79f-5ae4-472d-b6bb-00983930b38d","id":"QR_bc82b79f-5ae4-472d-b6bb-00983930b38d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:53:19][352549935863159][4546 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3343 [2025-08-26 16:53:19][352549935863159][4546 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-26 16:53:19][352549935863159][4546 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:55:03][354916449531127][1 ms][INFO] === Request start === [2025-08-26 16:55:03][354916449531127][1 ms][DEBUG] START check_scloud [2025-08-26 16:55:03][354916449531127][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:55:04][354916449531127][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 27210 4969 24908520 230248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:55:04][354916449531127][261 ms][DEBUG] targetPkg: running [2025-08-26 16:55:04][354916449531127][261 ms][DEBUG] END check_scloud in 260 ms [2025-08-26 16:55:04][354916449531127][261 ms][DEBUG] START check_boot_completed [2025-08-26 16:55:04][354916449531127][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:55:04][354916449531127][308 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:55:04][354916449531127][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:55:04][354916449531127][355 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:55:04][354916449531127][355 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 16:55:04][354916449531127][355 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:55:04][354916449531127][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916449531127\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8079\"}'\'' -e'"" [2025-08-26 16:55:04][354916449531127][356 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:55:04][354916449531127][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916449531127\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8079\"}'\'' -e'"" [2025-08-26 16:55:08][354916449531127][4541 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_91961103-1cd9-49b5-8564-cd83f9b59d22","id":"QR_91961103-1cd9-49b5-8564-cd83f9b59d22","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:55:08][354916449531127][4698 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3343 [2025-08-26 16:55:08][354916449531127][4698 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-26 16:55:08][354916449531127][4698 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:55:11][350731011001787][0 ms][INFO] === Request start === [2025-08-26 16:55:11][350731011001787][1 ms][DEBUG] START check_scloud [2025-08-26 16:55:11][350731011001787][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:55:11][350731011001787][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 27210 4969 25060336 240536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:55:11][350731011001787][322 ms][DEBUG] targetPkg: running [2025-08-26 16:55:11][350731011001787][322 ms][DEBUG] END check_scloud in 322 ms [2025-08-26 16:55:11][350731011001787][322 ms][DEBUG] START check_boot_completed [2025-08-26 16:55:11][350731011001787][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:55:11][350731011001787][369 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:55:11][350731011001787][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:55:11][350731011001787][416 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:55:11][350731011001787][416 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 16:55:11][350731011001787][416 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:55:11][350731011001787][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731011001787\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7448\"}'\'' -e'"" [2025-08-26 16:55:11][350731011001787][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:55:11][350731011001787][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731011001787\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7448\"}'\'' -e'"" [2025-08-26 16:55:15][350731011001787][4243 ms][DEBUG] proc_open done in 3827 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 16:55:15][350731011001787][4243 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-26 16:55:15][350731011001787][4243 ms][WARN] Detected error: Process with pid 27210 either refused to load frida-agent, or terminated during injection [2025-08-26 16:55:15][350731011001787][4243 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 16:55:15][350731011001787][4384 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 16:55:15][350731011001787][4384 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 16:55:15][350731011001787][4384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 16:55:15][350731011001787][4508 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 16:55:15][350731011001787][4509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 16:55:15][350731011001787][4649 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 16:55:17][350731011001787][6664 ms][DEBUG] START check_boot_completed [2025-08-26 16:55:17][350731011001787][6664 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:55:17][350731011001787][6711 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 16:55:17][350731011001787][6711 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:55:17][350731011001787][6758 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:55:17][350731011001787][6758 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 16:55:20][350731011001787][9773 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 16:55:20][350731011001787][9773 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350731011001787\",\"model\":\"SM-A336B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7448\"}'\'' -e'"" [2025-08-26 16:55:24][350731011001787][13569 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_710fa151-7eb1-4600-8084-a7bf71cbd077","id":"QR_710fa151-7eb1-4600-8084-a7bf71cbd077","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:55:24][350731011001787][13725 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-08-26 16:55:24][350731011001787][13725 ms][DEBUG] END runCmdUntilRes#2 in 3952 ms [2025-08-26 16:55:24][350731011001787][13725 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:58:02][351380440513811][1 ms][INFO] === Request start === [2025-08-26 16:58:02][351380440513811][1 ms][DEBUG] START check_scloud [2025-08-26 16:58:02][351380440513811][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:58:03][351380440513811][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 29333 4969 23627464 127148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:58:03][351380440513811][304 ms][DEBUG] targetPkg: running [2025-08-26 16:58:03][351380440513811][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-26 16:58:03][351380440513811][304 ms][DEBUG] START check_boot_completed [2025-08-26 16:58:03][351380440513811][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:58:03][351380440513811][335 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 16:58:03][351380440513811][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:58:03][351380440513811][382 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:58:03][351380440513811][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 16:58:03][351380440513811][382 ms][DEBUG] START check_internet [2025-08-26 16:58:03][351380440513811][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:58:03][351380440513811][866 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.949/201.949/201.949/0.000 ms\n [2025-08-26 16:58:03][351380440513811][866 ms][DEBUG] check_internet: online [2025-08-26 16:58:03][351380440513811][866 ms][DEBUG] END check_internet in 484 ms [2025-08-26 16:58:03][351380440513811][866 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:58:03][351380440513811][866 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351380440513811\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6011\"}'\'' -e'"" [2025-08-26 16:58:03][351380440513811][866 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:58:03][351380440513811][866 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351380440513811\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6011\"}'\'' -e'"" [2025-08-26 16:58:07][351380440513811][4427 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 16:58:07][351380440513811][4583 ms][DEBUG] proc_open done in 3718 ms; code=255; res.len=107 [2025-08-26 16:58:07][351380440513811][4584 ms][DEBUG] END runCmdUntilRes#1 in 3718 ms [2025-08-26 16:58:07][351380440513811][4584 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 16:58:07][][0 ms][INFO] === Request start === [2025-08-26 16:58:07][][1 ms][DEBUG] START check_scloud [2025-08-26 16:58:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:58:08][][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 29333 4969 23761296 137800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:58:08][][321 ms][DEBUG] targetPkg: running [2025-08-26 16:58:08][][321 ms][DEBUG] END check_scloud in 320 ms [2025-08-26 16:58:08][][321 ms][DEBUG] START check_boot_completed [2025-08-26 16:58:08][][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:58:08][][368 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 16:58:08][][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:58:08][][431 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 16:58:08][][431 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 16:58:08][][431 ms][DEBUG] START check_internet [2025-08-26 16:58:08][][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:58:08][][649 ms][DEBUG] SU: done in 217 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=114 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 114.501/114.501/114.501/0.000 ms\n [2025-08-26 16:58:08][][649 ms][DEBUG] check_internet: online [2025-08-26 16:58:08][][649 ms][DEBUG] END check_internet in 218 ms [2025-08-26 16:58:08][][649 ms][DEBUG] rawBody.length=1129 [2025-08-26 16:58:08][][649 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX722T78L\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8684\"}'\'' -e'"" [2025-08-26 16:58:08][][649 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:58:08][][649 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX722T78L\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8684\"}'\'' -e'"" [2025-08-26 16:58:11][][4164 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 16:58:12][][4320 ms][DEBUG] proc_open done in 3671 ms; code=255; res.len=107 [2025-08-26 16:58:12][][4320 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-26 16:58:12][][4320 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 16:58:12][350362537007494][0 ms][INFO] === Request start === [2025-08-26 16:58:12][350362537007494][1 ms][DEBUG] START check_scloud [2025-08-26 16:58:12][350362537007494][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:58:12][350362537007494][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 29333 4969 23899672 149360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:58:12][350362537007494][310 ms][DEBUG] targetPkg: running [2025-08-26 16:58:12][350362537007494][310 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 16:58:12][350362537007494][310 ms][DEBUG] START check_boot_completed [2025-08-26 16:58:12][350362537007494][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:58:13][350362537007494][342 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 16:58:13][350362537007494][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:58:13][350362537007494][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:58:13][350362537007494][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 16:58:13][350362537007494][389 ms][DEBUG] START check_internet [2025-08-26 16:58:13][350362537007494][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:58:13][350362537007494][685 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=195 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 195.988/195.988/195.988/0.000 ms\n [2025-08-26 16:58:13][350362537007494][685 ms][DEBUG] check_internet: online [2025-08-26 16:58:13][350362537007494][685 ms][DEBUG] END check_internet in 297 ms [2025-08-26 16:58:13][350362537007494][685 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:58:13][350362537007494][685 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350362537007494\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6610\"}'\'' -e'"" [2025-08-26 16:58:13][350362537007494][685 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:58:13][350362537007494][685 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350362537007494\",\"model\":\"SM-A065F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6610\"}'\'' -e'"" [2025-08-26 16:58:17][350362537007494][4356 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e07bbe68-5a84-4328-beb6-d4321ab16a37","id":"QR_e07bbe68-5a84-4328-beb6-d4321ab16a37","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:58:17][350362537007494][4512 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=3343 [2025-08-26 16:58:17][350362537007494][4513 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-26 16:58:17][350362537007494][4513 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:58:18][355755470526757][0 ms][INFO] === Request start === [2025-08-26 16:58:18][355755470526757][1 ms][DEBUG] START check_scloud [2025-08-26 16:58:18][355755470526757][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:58:18][355755470526757][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 29333 4969 24078140 160572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:58:18][355755470526757][315 ms][DEBUG] targetPkg: running [2025-08-26 16:58:18][355755470526757][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-26 16:58:18][355755470526757][316 ms][DEBUG] START check_boot_completed [2025-08-26 16:58:18][355755470526757][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:58:18][355755470526757][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:58:18][355755470526757][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:58:18][355755470526757][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:58:18][355755470526757][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 16:58:18][355755470526757][409 ms][DEBUG] START check_internet [2025-08-26 16:58:18][355755470526757][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:58:19][355755470526757][643 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=114 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 114.633/114.633/114.633/0.000 ms\n [2025-08-26 16:58:19][355755470526757][643 ms][DEBUG] check_internet: online [2025-08-26 16:58:19][355755470526757][643 ms][DEBUG] END check_internet in 235 ms [2025-08-26 16:58:19][355755470526757][643 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:58:19][355755470526757][643 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355755470526757\",\"model\":\"SM-F731N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5672\"}'\'' -e'"" [2025-08-26 16:58:19][355755470526757][643 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:58:19][355755470526757][644 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355755470526757\",\"model\":\"SM-F731N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5672\"}'\'' -e'"" [2025-08-26 16:58:22][355755470526757][4283 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_79972773-8aa2-40c0-9b5e-b2b34446e1a1","id":"QR_79972773-8aa2-40c0-9b5e-b2b34446e1a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:58:22][355755470526757][4439 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=3343 [2025-08-26 16:58:22][355755470526757][4439 ms][DEBUG] END runCmdUntilRes#1 in 3795 ms [2025-08-26 16:58:22][355755470526757][4439 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:58:24][352863162291350][0 ms][INFO] === Request start === [2025-08-26 16:58:24][352863162291350][1 ms][DEBUG] START check_scloud [2025-08-26 16:58:24][352863162291350][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:58:24][352863162291350][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 29333 4969 24210400 172512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:58:24][352863162291350][311 ms][DEBUG] targetPkg: running [2025-08-26 16:58:24][352863162291350][311 ms][DEBUG] END check_scloud in 311 ms [2025-08-26 16:58:24][352863162291350][311 ms][DEBUG] START check_boot_completed [2025-08-26 16:58:24][352863162291350][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:58:24][352863162291350][342 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 16:58:24][352863162291350][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:58:24][352863162291350][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:58:24][352863162291350][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 16:58:24][352863162291350][389 ms][DEBUG] START check_internet [2025-08-26 16:58:24][352863162291350][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:58:24][352863162291350][686 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=147 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 147.443/147.443/147.443/0.000 ms\n [2025-08-26 16:58:24][352863162291350][686 ms][DEBUG] check_internet: online [2025-08-26 16:58:24][352863162291350][686 ms][DEBUG] END check_internet in 297 ms [2025-08-26 16:58:24][352863162291350][686 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:58:24][352863162291350][686 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352863162291350\",\"model\":\"SM-S928N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8845\"}'\'' -e'"" [2025-08-26 16:58:24][352863162291350][687 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:58:24][352863162291350][687 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352863162291350\",\"model\":\"SM-S928N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8845\"}'\'' -e'"" [2025-08-26 16:58:29][352863162291350][5154 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_97e98ed9-1245-4654-99de-2efae18c312f","id":"QR_97e98ed9-1245-4654-99de-2efae18c312f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:58:29][352863162291350][5310 ms][DEBUG] proc_open done in 4623 ms; code=255; res.len=3343 [2025-08-26 16:58:29][352863162291350][5310 ms][DEBUG] END runCmdUntilRes#1 in 4623 ms [2025-08-26 16:58:29][352863162291350][5310 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:58:33][356544397057800][0 ms][INFO] === Request start === [2025-08-26 16:58:33][356544397057800][1 ms][DEBUG] START check_scloud [2025-08-26 16:58:33][356544397057800][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:58:33][356544397057800][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 29333 4969 24342560 183496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:58:33][356544397057800][292 ms][DEBUG] targetPkg: running [2025-08-26 16:58:33][356544397057800][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-26 16:58:33][356544397057800][292 ms][DEBUG] START check_boot_completed [2025-08-26 16:58:33][356544397057800][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:58:33][356544397057800][323 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 16:58:33][356544397057800][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:58:33][356544397057800][386 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 16:58:33][356544397057800][386 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 16:58:33][356544397057800][386 ms][DEBUG] START check_internet [2025-08-26 16:58:33][356544397057800][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 16:58:33][356544397057800][683 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=168 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 168.081/168.081/168.081/0.000 ms\n [2025-08-26 16:58:33][356544397057800][683 ms][DEBUG] check_internet: online [2025-08-26 16:58:33][356544397057800][683 ms][DEBUG] END check_internet in 297 ms [2025-08-26 16:58:33][356544397057800][683 ms][DEBUG] rawBody.length=1149 [2025-08-26 16:58:33][356544397057800][683 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544397057800\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7204\"}'\'' -e'"" [2025-08-26 16:58:33][356544397057800][683 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:58:33][356544397057800][683 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544397057800\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7204\"}'\'' -e'"" [2025-08-26 16:58:39][356544397057800][6041 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1deb4623-235b-4206-a02d-a4695c17b49b","id":"QR_1deb4623-235b-4206-a02d-a4695c17b49b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:58:39][356544397057800][6197 ms][DEBUG] proc_open done in 5513 ms; code=255; res.len=3343 [2025-08-26 16:58:39][356544397057800][6197 ms][DEBUG] END runCmdUntilRes#1 in 5513 ms [2025-08-26 16:58:39][356544397057800][6197 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:59:02][352844251194978][0 ms][INFO] === Request start === [2025-08-26 16:59:02][352844251194978][1 ms][DEBUG] START check_scloud [2025-08-26 16:59:02][352844251194978][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:59:02][352844251194978][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 29333 4969 24466620 195684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:59:02][352844251194978][310 ms][DEBUG] targetPkg: running [2025-08-26 16:59:02][352844251194978][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 16:59:02][352844251194978][310 ms][DEBUG] START check_boot_completed [2025-08-26 16:59:02][352844251194978][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:59:02][352844251194978][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:59:02][352844251194978][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:59:02][352844251194978][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:59:02][352844251194978][403 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 16:59:02][352844251194978][403 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:59:02][352844251194978][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352844251194978\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4468\"}'\'' -e'"" [2025-08-26 16:59:02][352844251194978][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:59:02][352844251194978][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352844251194978\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4468\"}'\'' -e'"" [2025-08-26 16:59:06][352844251194978][3762 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 16:59:06][352844251194978][3918 ms][DEBUG] proc_open done in 3514 ms; code=255; res.len=107 [2025-08-26 16:59:06][352844251194978][3918 ms][DEBUG] END runCmdUntilRes#1 in 3514 ms [2025-08-26 16:59:06][352844251194978][3918 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 16:59:06][][0 ms][INFO] === Request start === [2025-08-26 16:59:06][][1 ms][DEBUG] START check_scloud [2025-08-26 16:59:06][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:59:06][][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 29333 4969 24600060 206604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:59:06][][307 ms][DEBUG] targetPkg: running [2025-08-26 16:59:06][][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 16:59:06][][307 ms][DEBUG] START check_boot_completed [2025-08-26 16:59:06][][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:59:07][][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:59:07][][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:59:07][][447 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 16:59:07][][447 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 16:59:07][][447 ms][DEBUG] rawBody.length=1129 [2025-08-26 16:59:07][][447 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8T40PQEWN\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7631\"}'\'' -e'"" [2025-08-26 16:59:07][][447 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:59:07][][447 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8T40PQEWN\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7631\"}'\'' -e'"" [2025-08-26 16:59:10][][4024 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 16:59:10][][4180 ms][DEBUG] proc_open done in 3733 ms; code=255; res.len=107 [2025-08-26 16:59:10][][4180 ms][DEBUG] END runCmdUntilRes#1 in 3733 ms [2025-08-26 16:59:10][][4181 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 16:59:13][350209362976048][0 ms][INFO] === Request start === [2025-08-26 16:59:13][350209362976048][1 ms][DEBUG] START check_scloud [2025-08-26 16:59:13][350209362976048][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:59:13][350209362976048][299 ms][DEBUG] SU: done in 299 ms; outu0_a118 29333 4969 24775428 218552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:59:13][350209362976048][300 ms][DEBUG] targetPkg: running [2025-08-26 16:59:13][350209362976048][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-26 16:59:13][350209362976048][300 ms][DEBUG] START check_boot_completed [2025-08-26 16:59:13][350209362976048][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:59:13][350209362976048][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:59:13][350209362976048][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:59:13][350209362976048][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 16:59:13][350209362976048][393 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 16:59:13][350209362976048][393 ms][DEBUG] rawBody.length=1149 [2025-08-26 16:59:13][350209362976048][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350209362976048\",\"model\":\"SM-S918W\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9264\"}'\'' -e'"" [2025-08-26 16:59:13][350209362976048][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:59:13][350209362976048][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350209362976048\",\"model\":\"SM-S918W\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9264\"}'\'' -e'"" [2025-08-26 16:59:17][350209362976048][4783 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9d0b895b-33f6-4f8e-a4bf-47d811ae6946","id":"QR_9d0b895b-33f6-4f8e-a4bf-47d811ae6946","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:59:18][350209362976048][4939 ms][DEBUG] proc_open done in 4546 ms; code=255; res.len=3343 [2025-08-26 16:59:18][350209362976048][4939 ms][DEBUG] END runCmdUntilRes#1 in 4546 ms [2025-08-26 16:59:18][350209362976048][4939 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:59:21][351031121667422][0 ms][INFO] === Request start === [2025-08-26 16:59:21][351031121667422][1 ms][DEBUG] START check_scloud [2025-08-26 16:59:21][351031121667422][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:59:21][351031121667422][283 ms][DEBUG] SU: done in 283 ms; outu0_a118 29333 4969 24926184 229608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:59:21][351031121667422][284 ms][DEBUG] targetPkg: running [2025-08-26 16:59:21][351031121667422][284 ms][DEBUG] END check_scloud in 283 ms [2025-08-26 16:59:21][351031121667422][284 ms][DEBUG] START check_boot_completed [2025-08-26 16:59:21][351031121667422][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:59:22][351031121667422][329 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 16:59:22][351031121667422][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:59:22][351031121667422][391 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 16:59:22][351031121667422][391 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-26 16:59:22][351031121667422][392 ms][DEBUG] rawBody.length=1148 [2025-08-26 16:59:22][351031121667422][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351031121667422\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6026\"}'\'' -e'"" [2025-08-26 16:59:22][351031121667422][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:59:22][351031121667422][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351031121667422\",\"model\":\"SM-A156E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6026\"}'\'' -e'"" [2025-08-26 16:59:25][351031121667422][4203 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fb53d4bd-d0e4-40ad-b618-5f5c8a81b7df","id":"QR_fb53d4bd-d0e4-40ad-b618-5f5c8a81b7df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:59:26][351031121667422][4359 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-26 16:59:26][351031121667422][4359 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-26 16:59:26][351031121667422][4359 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 16:59:28][353182770074416][0 ms][INFO] === Request start === [2025-08-26 16:59:28][353182770074416][1 ms][DEBUG] START check_scloud [2025-08-26 16:59:28][353182770074416][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 16:59:28][353182770074416][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 29333 4969 25087184 241844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 16:59:28][353182770074416][314 ms][DEBUG] targetPkg: running [2025-08-26 16:59:28][353182770074416][314 ms][DEBUG] END check_scloud in 314 ms [2025-08-26 16:59:28][353182770074416][314 ms][DEBUG] START check_boot_completed [2025-08-26 16:59:28][353182770074416][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:59:28][353182770074416][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 16:59:28][353182770074416][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:59:28][353182770074416][409 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 16:59:28][353182770074416][409 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 16:59:28][353182770074416][409 ms][DEBUG] rawBody.length=1149 [2025-08-26 16:59:28][353182770074416][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182770074416\",\"model\":\"SM-S918U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PCT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3209\"}'\'' -e'"" [2025-08-26 16:59:28][353182770074416][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 16:59:28][353182770074416][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182770074416\",\"model\":\"SM-S918U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PCT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3209\"}'\'' -e'"" [2025-08-26 16:59:32][353182770074416][4219 ms][DEBUG] proc_open done in 3810 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 16:59:32][353182770074416][4219 ms][DEBUG] END runCmdUntilRes#1 in 3810 ms [2025-08-26 16:59:32][353182770074416][4219 ms][WARN] Detected error: Process with pid 29333 either refused to load frida-agent, or terminated during injection [2025-08-26 16:59:32][353182770074416][4219 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 16:59:32][353182770074416][4360 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 16:59:32][353182770074416][4360 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 16:59:32][353182770074416][4360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 16:59:33][353182770074416][4485 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 16:59:33][353182770074416][4485 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 16:59:33][353182770074416][4641 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 16:59:35][353182770074416][6656 ms][DEBUG] START check_boot_completed [2025-08-26 16:59:35][353182770074416][6656 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 16:59:35][353182770074416][6703 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 16:59:35][353182770074416][6703 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 16:59:35][353182770074416][6766 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 16:59:35][353182770074416][6766 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 16:59:38][353182770074416][9780 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 16:59:38][353182770074416][9781 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182770074416\",\"model\":\"SM-S918U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PCT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3209\"}'\'' -e'"" [2025-08-26 16:59:43][353182770074416][14607 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f94add74-e48f-4ad5-8a82-08029bed0bdc","id":"QR_f94add74-e48f-4ad5-8a82-08029bed0bdc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 16:59:43][353182770074416][14764 ms][DEBUG] proc_open done in 4983 ms; code=255; res.len=3343 [2025-08-26 16:59:43][353182770074416][14764 ms][DEBUG] END runCmdUntilRes#2 in 4983 ms [2025-08-26 16:59:43][353182770074416][14764 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:00:03][356826103147466][1 ms][INFO] === Request start === [2025-08-26 17:00:03][356826103147466][1 ms][DEBUG] START check_scloud [2025-08-26 17:00:03][356826103147466][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:00:03][356826103147466][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 30633 4969 23631152 127456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:00:03][356826103147466][261 ms][DEBUG] targetPkg: running [2025-08-26 17:00:03][356826103147466][261 ms][DEBUG] END check_scloud in 260 ms [2025-08-26 17:00:03][356826103147466][261 ms][DEBUG] START check_boot_completed [2025-08-26 17:00:03][356826103147466][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:00:03][356826103147466][308 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 17:00:03][356826103147466][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:00:04][356826103147466][356 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 17:00:04][356826103147466][356 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 17:00:04][356826103147466][356 ms][DEBUG] START check_internet [2025-08-26 17:00:04][356826103147466][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 17:00:04][356826103147466][902 ms][DEBUG] SU: done in 545 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.399/200.399/200.399/0.000 ms\n [2025-08-26 17:00:04][356826103147466][902 ms][DEBUG] check_internet: online [2025-08-26 17:00:04][356826103147466][902 ms][DEBUG] END check_internet in 546 ms [2025-08-26 17:00:04][356826103147466][902 ms][DEBUG] rawBody.length=1149 [2025-08-26 17:00:04][356826103147466][902 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356826103147466\",\"model\":\"SM-A505W\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3996\"}'\'' -e'"" [2025-08-26 17:00:04][356826103147466][902 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:00:04][356826103147466][902 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356826103147466\",\"model\":\"SM-A505W\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3996\"}'\'' -e'"" [2025-08-26 17:00:08][356826103147466][5244 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3af916ca-5035-437d-922d-8514b760f02e","id":"QR_3af916ca-5035-437d-922d-8514b760f02e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:00:09][356826103147466][5400 ms][DEBUG] proc_open done in 4498 ms; code=255; res.len=3343 [2025-08-26 17:00:09][356826103147466][5400 ms][DEBUG] END runCmdUntilRes#1 in 4498 ms [2025-08-26 17:00:09][356826103147466][5401 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:00:12][359156947998529][0 ms][INFO] === Request start === [2025-08-26 17:00:12][359156947998529][0 ms][DEBUG] START check_scloud [2025-08-26 17:00:12][359156947998529][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:00:13][359156947998529][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 30633 4969 23762352 138128 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:00:13][359156947998529][288 ms][DEBUG] targetPkg: running [2025-08-26 17:00:13][359156947998529][288 ms][DEBUG] END check_scloud in 288 ms [2025-08-26 17:00:13][359156947998529][288 ms][DEBUG] START check_boot_completed [2025-08-26 17:00:13][359156947998529][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:00:13][359156947998529][333 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 17:00:13][359156947998529][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:00:13][359156947998529][380 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 17:00:13][359156947998529][380 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-26 17:00:13][359156947998529][380 ms][DEBUG] START check_internet [2025-08-26 17:00:13][359156947998529][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 17:00:13][359156947998529][645 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.203/142.203/142.203/0.000 ms\n [2025-08-26 17:00:13][359156947998529][645 ms][DEBUG] check_internet: online [2025-08-26 17:00:13][359156947998529][645 ms][DEBUG] END check_internet in 265 ms [2025-08-26 17:00:13][359156947998529][645 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:00:13][359156947998529][645 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947998529\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6010\"}'\'' -e'"" [2025-08-26 17:00:13][359156947998529][645 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:00:13][359156947998529][645 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947998529\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6010\"}'\'' -e'"" [2025-08-26 17:00:17][359156947998529][4863 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0136c889-0f6c-4af7-ac0f-e3fd82575322","id":"QR_0136c889-0f6c-4af7-ac0f-e3fd82575322","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:00:17][359156947998529][5019 ms][DEBUG] proc_open done in 4374 ms; code=255; res.len=3343 [2025-08-26 17:00:17][359156947998529][5019 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-26 17:00:17][359156947998529][5019 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:00:20][359496120462673][0 ms][INFO] === Request start === [2025-08-26 17:00:20][359496120462673][1 ms][DEBUG] START check_scloud [2025-08-26 17:00:20][359496120462673][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:00:20][359496120462673][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 30633 4969 23888440 149896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:00:20][359496120462673][320 ms][DEBUG] targetPkg: running [2025-08-26 17:00:20][359496120462673][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-26 17:00:20][359496120462673][320 ms][DEBUG] START check_boot_completed [2025-08-26 17:00:20][359496120462673][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:00:20][359496120462673][366 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 17:00:20][359496120462673][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:00:20][359496120462673][429 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 17:00:20][359496120462673][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 17:00:20][359496120462673][429 ms][DEBUG] START check_internet [2025-08-26 17:00:20][359496120462673][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 17:00:21][359496120462673][694 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=154 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 154.660/154.660/154.660/0.000 ms\n [2025-08-26 17:00:21][359496120462673][695 ms][DEBUG] check_internet: online [2025-08-26 17:00:21][359496120462673][695 ms][DEBUG] END check_internet in 266 ms [2025-08-26 17:00:21][359496120462673][695 ms][DEBUG] rawBody.length=1149 [2025-08-26 17:00:21][359496120462673][695 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359496120462673\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7022\"}'\'' -e'"" [2025-08-26 17:00:21][359496120462673][695 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:00:21][359496120462673][695 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359496120462673\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7022\"}'\'' -e'"" [2025-08-26 17:00:25][359496120462673][5537 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_abc35c81-59a9-4943-ae11-4316df765b68","id":"QR_abc35c81-59a9-4943-ae11-4316df765b68","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:00:26][359496120462673][5693 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-08-26 17:00:26][359496120462673][5693 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-08-26 17:00:26][359496120462673][5693 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:00:31][353026642926875][0 ms][INFO] === Request start === [2025-08-26 17:00:31][353026642926875][1 ms][DEBUG] START check_scloud [2025-08-26 17:00:31][353026642926875][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:00:31][353026642926875][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 30633 4969 24076920 160840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:00:31][353026642926875][268 ms][DEBUG] targetPkg: running [2025-08-26 17:00:31][353026642926875][268 ms][DEBUG] END check_scloud in 268 ms [2025-08-26 17:00:31][353026642926875][268 ms][DEBUG] START check_boot_completed [2025-08-26 17:00:31][353026642926875][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:00:31][353026642926875][315 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 17:00:31][353026642926875][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:00:31][353026642926875][362 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:00:31][353026642926875][362 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 17:00:31][353026642926875][362 ms][DEBUG] START check_internet [2025-08-26 17:00:31][353026642926875][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 17:00:31][353026642926875][675 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=205 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 205.929/205.929/205.929/0.000 ms\n [2025-08-26 17:00:31][353026642926875][675 ms][DEBUG] check_internet: online [2025-08-26 17:00:31][353026642926875][675 ms][DEBUG] END check_internet in 314 ms [2025-08-26 17:00:31][353026642926875][675 ms][DEBUG] rawBody.length=1149 [2025-08-26 17:00:31][353026642926875][675 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353026642926875\",\"model\":\"SM-A166U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6319\"}'\'' -e'"" [2025-08-26 17:00:31][353026642926875][675 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:00:31][353026642926875][676 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353026642926875\",\"model\":\"SM-A166U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6319\"}'\'' -e'"" [2025-08-26 17:00:36][353026642926875][5829 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_861bc96d-6bce-4d5e-acff-d581b35f9837","id":"QR_861bc96d-6bce-4d5e-acff-d581b35f9837","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:00:37][353026642926875][5985 ms][DEBUG] proc_open done in 5309 ms; code=255; res.len=3343 [2025-08-26 17:00:37][353026642926875][5985 ms][DEBUG] END runCmdUntilRes#1 in 5310 ms [2025-08-26 17:00:37][353026642926875][5985 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:01:03][353427864802309][1 ms][INFO] === Request start === [2025-08-26 17:01:03][353427864802309][1 ms][DEBUG] START check_scloud [2025-08-26 17:01:03][353427864802309][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:01:04][353427864802309][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 30633 4969 24186516 172484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:01:04][353427864802309][295 ms][DEBUG] targetPkg: running [2025-08-26 17:01:04][353427864802309][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-26 17:01:04][353427864802309][295 ms][DEBUG] START check_boot_completed [2025-08-26 17:01:04][353427864802309][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:01:04][353427864802309][342 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 17:01:04][353427864802309][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:01:04][353427864802309][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:01:04][353427864802309][389 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 17:01:04][353427864802309][389 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:01:04][353427864802309][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353427864802309\",\"model\":\"SM-A326B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9380\"}'\'' -e'"" [2025-08-26 17:01:04][353427864802309][389 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:01:04][353427864802309][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353427864802309\",\"model\":\"SM-A326B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9380\"}'\'' -e'"" [2025-08-26 17:01:08][353427864802309][4263 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d3bd1815-8480-40c6-ba10-a3c5034c728d","id":"QR_d3bd1815-8480-40c6-ba10-a3c5034c728d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:01:08][353427864802309][4419 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3343 [2025-08-26 17:01:08][353427864802309][4419 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-26 17:01:08][353427864802309][4419 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:05:03][351642487648051][1 ms][INFO] === Request start === [2025-08-26 17:05:03][351642487648051][1 ms][DEBUG] START check_scloud [2025-08-26 17:05:03][351642487648051][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:05:04][351642487648051][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 30633 4969 24287020 183532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:05:04][351642487648051][318 ms][DEBUG] targetPkg: running [2025-08-26 17:05:04][351642487648051][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-26 17:05:04][351642487648051][318 ms][DEBUG] START check_boot_completed [2025-08-26 17:05:04][351642487648051][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:05:04][351642487648051][349 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 17:05:04][351642487648051][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:05:04][351642487648051][412 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 17:05:04][351642487648051][412 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 17:05:04][351642487648051][412 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:05:04][351642487648051][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642487648051\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5953\"}'\'' -e'"" [2025-08-26 17:05:04][351642487648051][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:05:04][351642487648051][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642487648051\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5953\"}'\'' -e'"" [2025-08-26 17:05:08][351642487648051][4458 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_73bb465f-79a8-44c4-8fb1-32d3c64b4ec0","id":"QR_73bb465f-79a8-44c4-8fb1-32d3c64b4ec0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:05:08][351642487648051][4614 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-08-26 17:05:08][351642487648051][4614 ms][DEBUG] END runCmdUntilRes#1 in 4201 ms [2025-08-26 17:05:08][351642487648051][4614 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:06:04][356126210828938][0 ms][INFO] === Request start === [2025-08-26 17:06:04][356126210828938][1 ms][DEBUG] START check_scloud [2025-08-26 17:06:04][356126210828938][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:06:05][356126210828938][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 30633 4969 24450000 195428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:06:05][356126210828938][315 ms][DEBUG] targetPkg: running [2025-08-26 17:06:05][356126210828938][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-26 17:06:05][356126210828938][315 ms][DEBUG] START check_boot_completed [2025-08-26 17:06:05][356126210828938][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:06:05][356126210828938][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 17:06:05][356126210828938][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:06:05][356126210828938][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:06:05][356126210828938][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 17:06:05][356126210828938][408 ms][DEBUG] START check_internet [2025-08-26 17:06:05][356126210828938][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 17:06:05][356126210828938][924 ms][DEBUG] SU: done in 516 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.277/201.277/201.277/0.000 ms\n [2025-08-26 17:06:05][356126210828938][924 ms][DEBUG] check_internet: online [2025-08-26 17:06:05][356126210828938][924 ms][DEBUG] END check_internet in 516 ms [2025-08-26 17:06:05][356126210828938][924 ms][DEBUG] rawBody.length=1149 [2025-08-26 17:06:05][356126210828938][924 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356126210828938\",\"model\":\"SM-A047M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4736\"}'\'' -e'"" [2025-08-26 17:06:05][356126210828938][924 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:06:05][356126210828938][924 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356126210828938\",\"model\":\"SM-A047M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4736\"}'\'' -e'"" [2025-08-26 17:06:11][356126210828938][6469 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_88dcaa27-ccf0-45e7-98fe-023257b576d6","id":"QR_88dcaa27-ccf0-45e7-98fe-023257b576d6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:06:11][356126210828938][6626 ms][DEBUG] proc_open done in 5701 ms; code=255; res.len=3343 [2025-08-26 17:06:11][356126210828938][6626 ms][DEBUG] END runCmdUntilRes#1 in 5701 ms [2025-08-26 17:06:11][356126210828938][6626 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:07:04][350068480064206][1 ms][INFO] === Request start === [2025-08-26 17:07:04][350068480064206][1 ms][DEBUG] START check_scloud [2025-08-26 17:07:04][350068480064206][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:07:04][350068480064206][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 30633 4969 24578036 206860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:07:04][350068480064206][297 ms][DEBUG] targetPkg: running [2025-08-26 17:07:04][350068480064206][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-26 17:07:04][350068480064206][297 ms][DEBUG] START check_boot_completed [2025-08-26 17:07:04][350068480064206][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:07:05][350068480064206][342 ms][DEBUG] ADB: done in 44 ms; out [2025-08-26 17:07:05][350068480064206][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:07:05][350068480064206][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:07:05][350068480064206][389 ms][DEBUG] END check_boot_completed in 91 ms [2025-08-26 17:07:05][350068480064206][389 ms][DEBUG] rawBody.length=1149 [2025-08-26 17:07:05][350068480064206][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350068480064206\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3224\"}'\'' -e'"" [2025-08-26 17:07:05][350068480064206][389 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:07:05][350068480064206][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350068480064206\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3224\"}'\'' -e'"" [2025-08-26 17:07:10][350068480064206][5481 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd010416-771b-47b4-8332-b58e1ed4f133","id":"QR_dd010416-771b-47b4-8332-b58e1ed4f133","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:07:10][350068480064206][5637 ms][DEBUG] proc_open done in 5249 ms; code=255; res.len=3343 [2025-08-26 17:07:10][350068480064206][5637 ms][DEBUG] END runCmdUntilRes#1 in 5249 ms [2025-08-26 17:07:10][350068480064206][5637 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:09:06][351184063270430][1 ms][INFO] === Request start === [2025-08-26 17:09:06][351184063270430][1 ms][DEBUG] START check_scloud [2025-08-26 17:09:06][351184063270430][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:09:06][351184063270430][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 30633 4969 24724696 217844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:09:06][351184063270430][282 ms][DEBUG] targetPkg: running [2025-08-26 17:09:06][351184063270430][282 ms][DEBUG] END check_scloud in 281 ms [2025-08-26 17:09:06][351184063270430][283 ms][DEBUG] START check_boot_completed [2025-08-26 17:09:06][351184063270430][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:09:06][351184063270430][329 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 17:09:06][351184063270430][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:09:06][351184063270430][392 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 17:09:06][351184063270430][392 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 17:09:06][351184063270430][392 ms][DEBUG] rawBody.length=1149 [2025-08-26 17:09:06][351184063270430][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351184063270430\",\"model\":\"SM-S928U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7988\"}'\'' -e'"" [2025-08-26 17:09:06][351184063270430][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:09:06][351184063270430][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351184063270430\",\"model\":\"SM-S928U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7988\"}'\'' -e'"" [2025-08-26 17:09:10][351184063270430][4422 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 17:09:10][351184063270430][4578 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=107 [2025-08-26 17:09:10][351184063270430][4578 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-26 17:09:10][351184063270430][4578 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 17:09:11][][0 ms][INFO] === Request start === [2025-08-26 17:09:11][][0 ms][DEBUG] START check_scloud [2025-08-26 17:09:11][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:09:11][][293 ms][DEBUG] SU: done in 293 ms; outu0_a118 30633 4969 24883552 229584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:09:11][][293 ms][DEBUG] targetPkg: running [2025-08-26 17:09:11][][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-26 17:09:11][][294 ms][DEBUG] START check_boot_completed [2025-08-26 17:09:11][][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:09:11][][325 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 17:09:11][][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:09:11][][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:09:11][][372 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 17:09:11][][372 ms][DEBUG] rawBody.length=1130 [2025-08-26 17:09:11][][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S928U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX52VYHER\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7892\"}'\'' -e'"" [2025-08-26 17:09:11][][372 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:09:11][][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S928U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX52VYHER\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7892\"}'\'' -e'"" [2025-08-26 17:09:15][][4167 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 17:09:15][][4324 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=107 [2025-08-26 17:09:15][][4324 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-26 17:09:15][][4324 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 17:09:16][351184063270430][0 ms][INFO] === Request start === [2025-08-26 17:09:16][351184063270430][1 ms][DEBUG] START check_scloud [2025-08-26 17:09:16][351184063270430][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:09:16][351184063270430][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 30633 4969 25009772 241452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:09:16][351184063270430][316 ms][DEBUG] targetPkg: running [2025-08-26 17:09:16][351184063270430][316 ms][DEBUG] END check_scloud in 316 ms [2025-08-26 17:09:16][351184063270430][317 ms][DEBUG] START check_boot_completed [2025-08-26 17:09:16][351184063270430][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:09:16][351184063270430][363 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 17:09:16][351184063270430][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:09:16][351184063270430][410 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:09:16][351184063270430][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 17:09:16][351184063270430][410 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:09:16][351184063270430][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351184063270430\",\"model\":\"SM-S928U\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8416\"}'\'' -e'"" [2025-08-26 17:09:16][351184063270430][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:09:16][351184063270430][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351184063270430\",\"model\":\"SM-S928U\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8416\"}'\'' -e'"" [2025-08-26 17:09:20][351184063270430][4190 ms][DEBUG] proc_open done in 3780 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 17:09:20][351184063270430][4190 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-26 17:09:20][351184063270430][4190 ms][WARN] Detected error: Process with pid 30633 either refused to load frida-agent, or terminated during injection [2025-08-26 17:09:20][351184063270430][4190 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 17:09:20][351184063270430][4331 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 17:09:20][351184063270430][4331 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 17:09:20][351184063270430][4331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 17:09:20][351184063270430][4456 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 17:09:20][351184063270430][4456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 17:09:21][351184063270430][4643 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 17:09:23][351184063270430][6658 ms][DEBUG] START check_boot_completed [2025-08-26 17:09:23][351184063270430][6658 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:09:23][351184063270430][6705 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 17:09:23][351184063270430][6705 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:09:23][351184063270430][6752 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:09:23][351184063270430][6752 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 17:09:26][351184063270430][9767 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 17:09:26][351184063270430][9767 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351184063270430\",\"model\":\"SM-S928U\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8416\"}'\'' -e'"" [2025-08-26 17:09:30][351184063270430][13735 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_25c8662f-7303-482a-9e67-116f4c31f653","id":"QR_25c8662f-7303-482a-9e67-116f4c31f653","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:09:30][351184063270430][13891 ms][DEBUG] proc_open done in 4124 ms; code=255; res.len=3343 [2025-08-26 17:09:30][351184063270430][13891 ms][DEBUG] END runCmdUntilRes#2 in 4124 ms [2025-08-26 17:09:30][351184063270430][13891 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:14:04][350179384937577][1 ms][INFO] === Request start === [2025-08-26 17:14:04][350179384937577][1 ms][DEBUG] START check_scloud [2025-08-26 17:14:04][350179384937577][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:14:05][350179384937577][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 32033 4969 23638756 126712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:14:05][350179384937577][301 ms][DEBUG] targetPkg: running [2025-08-26 17:14:05][350179384937577][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 17:14:05][350179384937577][301 ms][DEBUG] START check_boot_completed [2025-08-26 17:14:05][350179384937577][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:14:05][350179384937577][346 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 17:14:05][350179384937577][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:14:05][350179384937577][424 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 17:14:05][350179384937577][424 ms][DEBUG] END check_boot_completed in 123 ms [2025-08-26 17:14:05][350179384937577][424 ms][DEBUG] START check_internet [2025-08-26 17:14:05][350179384937577][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 17:14:05][350179384937577][955 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.168/201.168/201.168/0.000 ms\n [2025-08-26 17:14:05][350179384937577][955 ms][DEBUG] check_internet: online [2025-08-26 17:14:05][350179384937577][955 ms][DEBUG] END check_internet in 531 ms [2025-08-26 17:14:05][350179384937577][955 ms][DEBUG] rawBody.length=1149 [2025-08-26 17:14:05][350179384937577][955 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350179384937577\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2465\"}'\'' -e'"" [2025-08-26 17:14:05][350179384937577][955 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:14:05][350179384937577][955 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350179384937577\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2465\"}'\'' -e'"" [2025-08-26 17:14:10][350179384937577][5844 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_61bef501-1a2d-4463-ae80-3021e7048a67","id":"QR_61bef501-1a2d-4463-ae80-3021e7048a67","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:14:10][350179384937577][6001 ms][DEBUG] proc_open done in 5046 ms; code=255; res.len=3343 [2025-08-26 17:14:10][350179384937577][6001 ms][DEBUG] END runCmdUntilRes#1 in 5046 ms [2025-08-26 17:14:10][350179384937577][6001 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:15:04][355291290169248][0 ms][INFO] === Request start === [2025-08-26 17:15:04][355291290169248][1 ms][DEBUG] START check_scloud [2025-08-26 17:15:04][355291290169248][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:15:04][355291290169248][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 32033 4969 23748488 137540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:15:04][355291290169248][298 ms][DEBUG] targetPkg: running [2025-08-26 17:15:04][355291290169248][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-26 17:15:04][355291290169248][298 ms][DEBUG] START check_boot_completed [2025-08-26 17:15:04][355291290169248][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:15:04][355291290169248][329 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 17:15:04][355291290169248][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:15:04][355291290169248][376 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:15:04][355291290169248][376 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 17:15:04][355291290169248][376 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:15:04][355291290169248][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355291290169248\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1690\"}'\'' -e'"" [2025-08-26 17:15:04][355291290169248][376 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:15:04][355291290169248][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355291290169248\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1690\"}'\'' -e'"" [2025-08-26 17:15:09][355291290169248][5062 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f7bc2b5f-3974-4150-9eea-c8fa3d99b783","id":"QR_f7bc2b5f-3974-4150-9eea-c8fa3d99b783","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:15:09][355291290169248][5219 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-08-26 17:15:09][355291290169248][5219 ms][DEBUG] END runCmdUntilRes#1 in 4842 ms [2025-08-26 17:15:09][355291290169248][5219 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:15:13][351123967094207][0 ms][INFO] === Request start === [2025-08-26 17:15:13][351123967094207][1 ms][DEBUG] START check_scloud [2025-08-26 17:15:13][351123967094207][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:15:13][351123967094207][282 ms][DEBUG] SU: done in 281 ms; out [2025-08-26 17:15:13][351123967094207][282 ms][WARN] targetPkg: not running, restarting [2025-08-26 17:15:13][351123967094207][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 17:15:14][351123967094207][438 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 17:15:14][351123967094207][439 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 17:15:14][351123967094207][610 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 17:15:16][351123967094207][2625 ms][DEBUG] END check_scloud in 2624 ms [2025-08-26 17:15:16][351123967094207][2625 ms][DEBUG] START check_boot_completed [2025-08-26 17:15:16][351123967094207][2625 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:15:16][351123967094207][2672 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 17:15:16][351123967094207][2672 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:15:16][351123967094207][2750 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 17:15:16][351123967094207][2750 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 17:15:16][351123967094207][2751 ms][DEBUG] rawBody.length=1149 [2025-08-26 17:15:16][351123967094207][2751 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123967094207\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5219\"}'\'' -e'"" [2025-08-26 17:15:16][351123967094207][2751 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:15:16][351123967094207][2751 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123967094207\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5219\"}'\'' -e'"" [2025-08-26 17:15:21][351123967094207][7718 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_27435510-7b14-406d-a29d-e3cbe5a347bc","id":"QR_27435510-7b14-406d-a29d-e3cbe5a347bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:15:21][351123967094207][7874 ms][DEBUG] proc_open done in 5123 ms; code=255; res.len=3343 [2025-08-26 17:15:21][351123967094207][7874 ms][DEBUG] END runCmdUntilRes#1 in 5123 ms [2025-08-26 17:15:21][351123967094207][7874 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:15:27][354898118085710][0 ms][INFO] === Request start === [2025-08-26 17:15:27][354898118085710][1 ms][DEBUG] START check_scloud [2025-08-26 17:15:27][354898118085710][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:15:27][354898118085710][303 ms][DEBUG] SU: done in 303 ms; outu0_a118 32536 4969 23683100 123948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:15:27][354898118085710][303 ms][DEBUG] targetPkg: running [2025-08-26 17:15:27][354898118085710][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-26 17:15:27][354898118085710][304 ms][DEBUG] START check_boot_completed [2025-08-26 17:15:27][354898118085710][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:15:27][354898118085710][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 17:15:27][354898118085710][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:15:27][354898118085710][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:15:27][354898118085710][397 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 17:15:27][354898118085710][397 ms][DEBUG] rawBody.length=1149 [2025-08-26 17:15:27][354898118085710][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354898118085710\",\"model\":\"SM-G988B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4908\"}'\'' -e'"" [2025-08-26 17:15:27][354898118085710][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:15:27][354898118085710][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354898118085710\",\"model\":\"SM-G988B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4908\"}'\'' -e'"" [2025-08-26 17:15:32][354898118085710][4708 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_98f6fca2-00af-40f1-8fec-b4a9c34c8b05","id":"QR_98f6fca2-00af-40f1-8fec-b4a9c34c8b05","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:15:32][354898118085710][4865 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3343 [2025-08-26 17:15:32][354898118085710][4865 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-08-26 17:15:32][354898118085710][4865 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:16:03][358799696823017][0 ms][INFO] === Request start === [2025-08-26 17:16:03][358799696823017][1 ms][DEBUG] START check_scloud [2025-08-26 17:16:03][358799696823017][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:16:03][358799696823017][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 32536 4969 23752504 138160 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:16:03][358799696823017][295 ms][DEBUG] targetPkg: running [2025-08-26 17:16:03][358799696823017][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-26 17:16:03][358799696823017][295 ms][DEBUG] START check_boot_completed [2025-08-26 17:16:03][358799696823017][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:16:03][358799696823017][342 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 17:16:03][358799696823017][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:16:04][358799696823017][404 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 17:16:04][358799696823017][405 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 17:16:04][358799696823017][405 ms][DEBUG] START check_internet [2025-08-26 17:16:04][358799696823017][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 17:16:04][358799696823017][842 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.082/202.082/202.082/0.000 ms\n [2025-08-26 17:16:04][358799696823017][842 ms][DEBUG] check_internet: online [2025-08-26 17:16:04][358799696823017][842 ms][DEBUG] END check_internet in 437 ms [2025-08-26 17:16:04][358799696823017][842 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:16:04][358799696823017][842 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799696823017\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4641\"}'\'' -e'"" [2025-08-26 17:16:04][358799696823017][842 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:16:04][358799696823017][842 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358799696823017\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4641\"}'\'' -e'"" [2025-08-26 17:16:08][358799696823017][5075 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c60cbec7-8f15-4733-82b9-156de1a5d370","id":"QR_c60cbec7-8f15-4733-82b9-156de1a5d370","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:16:08][358799696823017][5231 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3343 [2025-08-26 17:16:08][358799696823017][5231 ms][DEBUG] END runCmdUntilRes#1 in 4390 ms [2025-08-26 17:16:08][358799696823017][5231 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:17:04][351007065021602][1 ms][INFO] === Request start === [2025-08-26 17:17:04][351007065021602][1 ms][DEBUG] START check_scloud [2025-08-26 17:17:04][351007065021602][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:17:04][351007065021602][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 32536 4969 23914652 149204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:17:04][351007065021602][307 ms][DEBUG] targetPkg: running [2025-08-26 17:17:04][351007065021602][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 17:17:04][351007065021602][307 ms][DEBUG] START check_boot_completed [2025-08-26 17:17:04][351007065021602][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:17:04][351007065021602][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 17:17:04][351007065021602][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:17:04][351007065021602][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:17:04][351007065021602][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 17:17:04][351007065021602][401 ms][DEBUG] rawBody.length=1149 [2025-08-26 17:17:04][351007065021602][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007065021602\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1842\"}'\'' -e'"" [2025-08-26 17:17:04][351007065021602][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:17:04][351007065021602][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007065021602\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1842\"}'\'' -e'"" [2025-08-26 17:17:09][351007065021602][5118 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_41723a8e-1a6d-48ee-ac99-fc9e7f3cab88","id":"QR_41723a8e-1a6d-48ee-ac99-fc9e7f3cab88","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:17:09][351007065021602][5275 ms][DEBUG] proc_open done in 4874 ms; code=255; res.len=3343 [2025-08-26 17:17:09][351007065021602][5275 ms][DEBUG] END runCmdUntilRes#1 in 4874 ms [2025-08-26 17:17:09][351007065021602][5275 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:17:17][358975992531765][0 ms][INFO] === Request start === [2025-08-26 17:17:17][358975992531765][1 ms][DEBUG] START check_scloud [2025-08-26 17:17:17][358975992531765][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:17:17][358975992531765][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 32536 4969 24068184 160328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:17:17][358975992531765][301 ms][DEBUG] targetPkg: running [2025-08-26 17:17:17][358975992531765][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 17:17:17][358975992531765][301 ms][DEBUG] START check_boot_completed [2025-08-26 17:17:17][358975992531765][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:17:17][358975992531765][332 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 17:17:17][358975992531765][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:17:17][358975992531765][379 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:17:17][358975992531765][380 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 17:17:17][358975992531765][380 ms][DEBUG] rawBody.length=1159 [2025-08-26 17:17:17][358975992531765][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358975992531765\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YW10H0ASX\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6362\"}'\'' -e'"" [2025-08-26 17:17:17][358975992531765][380 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:17:17][358975992531765][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358975992531765\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YW10H0ASX\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6362\"}'\'' -e'"" [2025-08-26 17:17:22][358975992531765][5128 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c64e6547-aaa5-40f0-b205-e460b35a58f1","id":"QR_c64e6547-aaa5-40f0-b205-e460b35a58f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:17:22][358975992531765][5284 ms][DEBUG] proc_open done in 4904 ms; code=255; res.len=3343 [2025-08-26 17:17:22][358975992531765][5284 ms][DEBUG] END runCmdUntilRes#1 in 4904 ms [2025-08-26 17:17:22][358975992531765][5284 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:19:03][350315592555534][0 ms][INFO] === Request start === [2025-08-26 17:19:03][350315592555534][1 ms][DEBUG] START check_scloud [2025-08-26 17:19:03][350315592555534][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:19:04][350315592555534][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 32536 4969 24207540 171892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:19:04][350315592555534][311 ms][DEBUG] targetPkg: running [2025-08-26 17:19:04][350315592555534][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 17:19:04][350315592555534][311 ms][DEBUG] START check_boot_completed [2025-08-26 17:19:04][350315592555534][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:19:04][350315592555534][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 17:19:04][350315592555534][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:19:04][350315592555534][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:19:04][350315592555534][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 17:19:04][350315592555534][404 ms][DEBUG] rawBody.length=1149 [2025-08-26 17:19:04][350315592555534][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350315592555534\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7792\"}'\'' -e'"" [2025-08-26 17:19:04][350315592555534][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:19:04][350315592555534][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350315592555534\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7792\"}'\'' -e'"" [2025-08-26 17:19:08][350315592555534][5012 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bada161e-0628-46c9-8cc1-aefcff4d4f86","id":"QR_bada161e-0628-46c9-8cc1-aefcff4d4f86","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:19:09][350315592555534][5169 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-08-26 17:19:09][350315592555534][5169 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-08-26 17:19:09][350315592555534][5169 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:21:03][353607430214929][1 ms][INFO] === Request start === [2025-08-26 17:21:03][353607430214929][1 ms][DEBUG] START check_scloud [2025-08-26 17:21:03][353607430214929][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:21:03][353607430214929][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 32536 4969 24313240 182860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:21:03][353607430214929][295 ms][DEBUG] targetPkg: running [2025-08-26 17:21:03][353607430214929][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-26 17:21:03][353607430214929][295 ms][DEBUG] START check_boot_completed [2025-08-26 17:21:03][353607430214929][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:21:03][353607430214929][342 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 17:21:03][353607430214929][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:21:03][353607430214929][421 ms][DEBUG] SU: done in 79 ms; out [2025-08-26 17:21:03][353607430214929][421 ms][DEBUG] END check_boot_completed in 126 ms [2025-08-26 17:21:03][353607430214929][421 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:21:03][353607430214929][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353607430214929\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5576\"}'\'' -e'"" [2025-08-26 17:21:03][353607430214929][421 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:21:03][353607430214929][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353607430214929\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5576\"}'\'' -e'"" [2025-08-26 17:21:08][353607430214929][4966 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d21bcf3f-73b5-41dd-bed5-320d1a5ba563","id":"QR_d21bcf3f-73b5-41dd-bed5-320d1a5ba563","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:21:08][353607430214929][5122 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3343 [2025-08-26 17:21:08][353607430214929][5122 ms][DEBUG] END runCmdUntilRes#1 in 4701 ms [2025-08-26 17:21:08][353607430214929][5122 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:22:03][350070125364496][0 ms][INFO] === Request start === [2025-08-26 17:22:03][350070125364496][1 ms][DEBUG] START check_scloud [2025-08-26 17:22:03][350070125364496][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:22:04][350070125364496][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 32536 4969 24416892 195116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:22:04][350070125364496][299 ms][DEBUG] targetPkg: running [2025-08-26 17:22:04][350070125364496][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-26 17:22:04][350070125364496][299 ms][DEBUG] START check_boot_completed [2025-08-26 17:22:04][350070125364496][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:22:04][350070125364496][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 17:22:04][350070125364496][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:22:04][350070125364496][394 ms][DEBUG] SU: done in 49 ms; out [2025-08-26 17:22:04][350070125364496][395 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-26 17:22:04][350070125364496][395 ms][DEBUG] START check_internet [2025-08-26 17:22:04][350070125364496][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 17:22:04][350070125364496][799 ms][DEBUG] SU: done in 404 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.200/202.200/202.200/0.000 ms\n [2025-08-26 17:22:04][350070125364496][799 ms][DEBUG] check_internet: online [2025-08-26 17:22:04][350070125364496][799 ms][DEBUG] END check_internet in 404 ms [2025-08-26 17:22:04][350070125364496][799 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:22:04][350070125364496][799 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350070125364496\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1638\"}'\'' -e'"" [2025-08-26 17:22:04][350070125364496][799 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:22:04][350070125364496][799 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350070125364496\",\"model\":\"SM-S921B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1638\"}'\'' -e'"" [2025-08-26 17:22:08][350070125364496][4563 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_49f6ba90-a41b-4ad8-affd-e0dae7c8097c","id":"QR_49f6ba90-a41b-4ad8-affd-e0dae7c8097c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:22:08][350070125364496][4719 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-08-26 17:22:08][350070125364496][4719 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-08-26 17:22:08][350070125364496][4719 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:25:01][355857111468744][1 ms][INFO] === Request start === [2025-08-26 17:25:01][355857111468744][1 ms][DEBUG] START check_scloud [2025-08-26 17:25:01][355857111468744][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:25:02][355857111468744][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 32536 4969 24581984 206760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:25:02][355857111468744][302 ms][DEBUG] targetPkg: running [2025-08-26 17:25:02][355857111468744][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-26 17:25:02][355857111468744][302 ms][DEBUG] START check_boot_completed [2025-08-26 17:25:02][355857111468744][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:25:02][355857111468744][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 17:25:02][355857111468744][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:25:02][355857111468744][442 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 17:25:02][355857111468744][442 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 17:25:02][355857111468744][442 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:25:02][355857111468744][442 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857111468744\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5227\"}'\'' -e'"" [2025-08-26 17:25:02][355857111468744][442 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:25:02][355857111468744][443 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857111468744\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5227\"}'\'' -e'"" [2025-08-26 17:25:06][355857111468744][4379 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e9f103e9-9e9f-4ea2-8f95-e94e826d1f86","id":"QR_e9f103e9-9e9f-4ea2-8f95-e94e826d1f86","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:25:06][355857111468744][4535 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-08-26 17:25:06][355857111468744][4535 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-26 17:25:06][355857111468744][4535 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:26:06][355857113513844][1 ms][INFO] === Request start === [2025-08-26 17:26:06][355857113513844][1 ms][DEBUG] START check_scloud [2025-08-26 17:26:06][355857113513844][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:26:06][355857113513844][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 32536 4969 24738884 217624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:26:06][355857113513844][310 ms][DEBUG] targetPkg: running [2025-08-26 17:26:06][355857113513844][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 17:26:06][355857113513844][310 ms][DEBUG] START check_boot_completed [2025-08-26 17:26:06][355857113513844][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:26:06][355857113513844][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 17:26:06][355857113513844][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:26:06][355857113513844][405 ms][DEBUG] SU: done in 49 ms; out [2025-08-26 17:26:06][355857113513844][405 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 17:26:06][355857113513844][405 ms][DEBUG] START check_internet [2025-08-26 17:26:06][355857113513844][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 17:26:07][355857113513844][872 ms][DEBUG] SU: done in 466 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.798/202.798/202.798/0.000 ms\n [2025-08-26 17:26:07][355857113513844][872 ms][DEBUG] check_internet: online [2025-08-26 17:26:07][355857113513844][872 ms][DEBUG] END check_internet in 467 ms [2025-08-26 17:26:07][355857113513844][872 ms][DEBUG] rawBody.length=1159 [2025-08-26 17:26:07][355857113513844][872 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857113513844\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52T706TK3L\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9447\"}'\'' -e'"" [2025-08-26 17:26:07][355857113513844][872 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:26:07][355857113513844][872 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355857113513844\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52T706TK3L\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9447\"}'\'' -e'"" [2025-08-26 17:26:12][355857113513844][5793 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5986ae12-c359-426f-85d9-dd2837f4681d","id":"QR_5986ae12-c359-426f-85d9-dd2837f4681d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:26:12][355857113513844][5949 ms][DEBUG] proc_open done in 5077 ms; code=255; res.len=3343 [2025-08-26 17:26:12][355857113513844][5949 ms][DEBUG] END runCmdUntilRes#1 in 5077 ms [2025-08-26 17:26:12][355857113513844][5949 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:26:16][352334701672716][0 ms][INFO] === Request start === [2025-08-26 17:26:16][352334701672716][1 ms][DEBUG] START check_scloud [2025-08-26 17:26:16][352334701672716][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:26:16][352334701672716][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 32536 4969 24877388 229500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:26:16][352334701672716][311 ms][DEBUG] targetPkg: running [2025-08-26 17:26:16][352334701672716][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 17:26:16][352334701672716][311 ms][DEBUG] START check_boot_completed [2025-08-26 17:26:16][352334701672716][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:26:16][352334701672716][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 17:26:16][352334701672716][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:26:16][352334701672716][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 17:26:16][352334701672716][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 17:26:16][352334701672716][420 ms][DEBUG] START check_internet [2025-08-26 17:26:16][352334701672716][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 17:26:17][352334701672716][701 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.928/141.928/141.928/0.000 ms\n [2025-08-26 17:26:17][352334701672716][702 ms][DEBUG] check_internet: online [2025-08-26 17:26:17][352334701672716][702 ms][DEBUG] END check_internet in 281 ms [2025-08-26 17:26:17][352334701672716][702 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:26:17][352334701672716][702 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352334701672716\",\"model\":\"SM-F936B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3548\"}'\'' -e'"" [2025-08-26 17:26:17][352334701672716][702 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:26:17][352334701672716][702 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352334701672716\",\"model\":\"SM-F936B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3548\"}'\'' -e'"" [2025-08-26 17:26:20][352334701672716][4653 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_45d5c98c-5f7e-4600-ad19-65ba14e2bf90","id":"QR_45d5c98c-5f7e-4600-ad19-65ba14e2bf90","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:26:21][352334701672716][4810 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-26 17:26:21][352334701672716][4810 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-26 17:26:21][352334701672716][4810 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:27:04][356697219037226][1 ms][INFO] === Request start === [2025-08-26 17:27:04][356697219037226][1 ms][DEBUG] START check_scloud [2025-08-26 17:27:04][356697219037226][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:27:05][356697219037226][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 32536 4969 25015820 241552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:27:05][356697219037226][301 ms][DEBUG] targetPkg: running [2025-08-26 17:27:05][356697219037226][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 17:27:05][356697219037226][301 ms][DEBUG] START check_boot_completed [2025-08-26 17:27:05][356697219037226][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:27:05][356697219037226][332 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 17:27:05][356697219037226][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:27:05][356697219037226][379 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:27:05][356697219037226][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 17:27:05][356697219037226][379 ms][DEBUG] rawBody.length=1149 [2025-08-26 17:27:05][356697219037226][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356697219037226\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7892\"}'\'' -e'"" [2025-08-26 17:27:05][356697219037226][379 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:27:05][356697219037226][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356697219037226\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7892\"}'\'' -e'"" [2025-08-26 17:27:09][356697219037226][4550 ms][DEBUG] proc_open done in 4170 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 17:27:09][356697219037226][4550 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-26 17:27:09][356697219037226][4550 ms][WARN] Detected error: Process with pid 32536 either refused to load frida-agent, or terminated during injection [2025-08-26 17:27:09][356697219037226][4550 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 17:27:09][356697219037226][4675 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 17:27:09][356697219037226][4675 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 17:27:09][356697219037226][4675 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 17:27:09][356697219037226][4815 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 17:27:09][356697219037226][4815 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 17:27:09][356697219037226][4971 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 17:27:11][356697219037226][6986 ms][DEBUG] START check_boot_completed [2025-08-26 17:27:11][356697219037226][6987 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:27:11][356697219037226][7033 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 17:27:11][356697219037226][7033 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:27:11][356697219037226][7080 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:27:11][356697219037226][7080 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 17:27:14][356697219037226][10095 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 17:27:14][356697219037226][10095 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356697219037226\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7892\"}'\'' -e'"" [2025-08-26 17:27:19][356697219037226][14953 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4811de89-7acd-4064-a831-9d367df18ad0","id":"QR_4811de89-7acd-4064-a831-9d367df18ad0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:27:19][356697219037226][15110 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-08-26 17:27:19][356697219037226][15110 ms][DEBUG] END runCmdUntilRes#2 in 5015 ms [2025-08-26 17:27:19][356697219037226][15110 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:27:24][355255119248582][0 ms][INFO] === Request start === [2025-08-26 17:27:24][355255119248582][1 ms][DEBUG] START check_scloud [2025-08-26 17:27:24][355255119248582][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:27:25][355255119248582][245 ms][DEBUG] SU: done in 244 ms; outu0_a118 1873 4969 23687196 124900 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:27:25][355255119248582][245 ms][DEBUG] targetPkg: running [2025-08-26 17:27:25][355255119248582][245 ms][DEBUG] END check_scloud in 244 ms [2025-08-26 17:27:25][355255119248582][245 ms][DEBUG] START check_boot_completed [2025-08-26 17:27:25][355255119248582][245 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:27:25][355255119248582][292 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 17:27:25][355255119248582][292 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:27:25][355255119248582][354 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 17:27:25][355255119248582][354 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 17:27:25][355255119248582][354 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:27:25][355255119248582][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355255119248582\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2409\"}'\'' -e'"" [2025-08-26 17:27:25][355255119248582][354 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:27:25][355255119248582][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355255119248582\",\"model\":\"SM-A515F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2409\"}'\'' -e'"" [2025-08-26 17:27:29][355255119248582][4915 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e96ef316-379b-423c-be7b-0de33c5b532a","id":"QR_e96ef316-379b-423c-be7b-0de33c5b532a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:27:30][355255119248582][5072 ms][DEBUG] proc_open done in 4717 ms; code=255; res.len=3343 [2025-08-26 17:27:30][355255119248582][5072 ms][DEBUG] END runCmdUntilRes#1 in 4717 ms [2025-08-26 17:27:30][355255119248582][5072 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:28:03][351044512551725][0 ms][INFO] === Request start === [2025-08-26 17:28:03][351044512551725][1 ms][DEBUG] START check_scloud [2025-08-26 17:28:03][351044512551725][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:28:04][351044512551725][262 ms][DEBUG] SU: done in 262 ms; outu0_a118 1873 4969 23738104 138428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:28:04][351044512551725][262 ms][DEBUG] targetPkg: running [2025-08-26 17:28:04][351044512551725][262 ms][DEBUG] END check_scloud in 262 ms [2025-08-26 17:28:04][351044512551725][262 ms][DEBUG] START check_boot_completed [2025-08-26 17:28:04][351044512551725][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:28:04][351044512551725][294 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 17:28:04][351044512551725][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:28:04][351044512551725][341 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:28:04][351044512551725][341 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 17:28:04][351044512551725][341 ms][DEBUG] START check_internet [2025-08-26 17:28:04][351044512551725][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 17:28:04][351044512551725][622 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=173 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 173.293/173.293/173.293/0.000 ms\n [2025-08-26 17:28:04][351044512551725][622 ms][DEBUG] check_internet: online [2025-08-26 17:28:04][351044512551725][622 ms][DEBUG] END check_internet in 281 ms [2025-08-26 17:28:04][351044512551725][622 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:28:04][351044512551725][622 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044512551725\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5586\"}'\'' -e'"" [2025-08-26 17:28:04][351044512551725][622 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:28:04][351044512551725][623 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351044512551725\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5586\"}'\'' -e'"" [2025-08-26 17:28:08][351044512551725][4402 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_10ca5879-4934-4b60-8e17-af9317870af5","id":"QR_10ca5879-4934-4b60-8e17-af9317870af5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:28:08][351044512551725][4558 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-26 17:28:08][351044512551725][4558 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-26 17:28:08][351044512551725][4558 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:28:10][357967973550535][0 ms][INFO] === Request start === [2025-08-26 17:28:10][357967973550535][1 ms][DEBUG] START check_scloud [2025-08-26 17:28:10][357967973550535][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:28:11][357967973550535][300 ms][DEBUG] SU: done in 300 ms; outu0_a118 1873 4969 23910400 149756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:28:11][357967973550535][301 ms][DEBUG] targetPkg: running [2025-08-26 17:28:11][357967973550535][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 17:28:11][357967973550535][301 ms][DEBUG] START check_boot_completed [2025-08-26 17:28:11][357967973550535][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:28:11][357967973550535][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 17:28:11][357967973550535][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:28:11][357967973550535][441 ms][DEBUG] SU: done in 93 ms; out [2025-08-26 17:28:11][357967973550535][441 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 17:28:11][357967973550535][441 ms][DEBUG] START check_internet [2025-08-26 17:28:11][357967973550535][441 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 17:28:11][357967973550535][707 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=156 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 156.488/156.488/156.488/0.000 ms\n [2025-08-26 17:28:11][357967973550535][707 ms][DEBUG] check_internet: online [2025-08-26 17:28:11][357967973550535][707 ms][DEBUG] END check_internet in 266 ms [2025-08-26 17:28:11][357967973550535][707 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:28:11][357967973550535][707 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967973550535\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2626\"}'\'' -e'"" [2025-08-26 17:28:11][357967973550535][707 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:28:11][357967973550535][707 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967973550535\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2626\"}'\'' -e'"" [2025-08-26 17:28:15][357967973550535][4643 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f6cab2db-1439-48de-a6c3-507a510734df","id":"QR_f6cab2db-1439-48de-a6c3-507a510734df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:28:15][357967973550535][4799 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-08-26 17:28:15][357967973550535][4799 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-26 17:28:15][357967973550535][4799 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:31:03][355001763705836][1 ms][INFO] === Request start === [2025-08-26 17:31:03][355001763705836][1 ms][DEBUG] START check_scloud [2025-08-26 17:31:03][355001763705836][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:31:03][355001763705836][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 1873 4969 24024208 161116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:31:03][355001763705836][301 ms][DEBUG] targetPkg: running [2025-08-26 17:31:03][355001763705836][301 ms][DEBUG] END check_scloud in 301 ms [2025-08-26 17:31:03][355001763705836][302 ms][DEBUG] START check_boot_completed [2025-08-26 17:31:03][355001763705836][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:31:03][355001763705836][332 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 17:31:03][355001763705836][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:31:03][355001763705836][379 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:31:03][355001763705836][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 17:31:03][355001763705836][380 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:31:03][355001763705836][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355001763705836\",\"model\":\"SM-F711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1683\"}'\'' -e'"" [2025-08-26 17:31:03][355001763705836][380 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:31:03][355001763705836][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355001763705836\",\"model\":\"SM-F711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1683\"}'\'' -e'"" [2025-08-26 17:31:07][355001763705836][4175 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_950ecce8-12dc-4999-a722-259f227f42ac","id":"QR_950ecce8-12dc-4999-a722-259f227f42ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:31:07][355001763705836][4331 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-08-26 17:31:07][355001763705836][4331 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-26 17:31:07][355001763705836][4331 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:32:05][353454190149379][0 ms][INFO] === Request start === [2025-08-26 17:32:05][353454190149379][1 ms][DEBUG] START check_scloud [2025-08-26 17:32:05][353454190149379][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:32:05][353454190149379][327 ms][DEBUG] SU: done in 326 ms; outu0_a118 1873 4969 24178932 172264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:32:05][353454190149379][327 ms][DEBUG] targetPkg: running [2025-08-26 17:32:05][353454190149379][327 ms][DEBUG] END check_scloud in 326 ms [2025-08-26 17:32:05][353454190149379][327 ms][DEBUG] START check_boot_completed [2025-08-26 17:32:05][353454190149379][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:32:05][353454190149379][373 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 17:32:05][353454190149379][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:32:05][353454190149379][420 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:32:05][353454190149379][420 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 17:32:05][353454190149379][420 ms][DEBUG] START check_internet [2025-08-26 17:32:05][353454190149379][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 17:32:05][353454190149379][873 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.986/200.986/200.986/0.000 ms\n [2025-08-26 17:32:05][353454190149379][873 ms][DEBUG] check_internet: online [2025-08-26 17:32:05][353454190149379][873 ms][DEBUG] END check_internet in 453 ms [2025-08-26 17:32:05][353454190149379][873 ms][DEBUG] rawBody.length=1149 [2025-08-26 17:32:05][353454190149379][873 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353454190149379\",\"model\":\"SM-A536U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7650\"}'\'' -e'"" [2025-08-26 17:32:05][353454190149379][874 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:32:05][353454190149379][874 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353454190149379\",\"model\":\"SM-A536U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7650\"}'\'' -e'"" [2025-08-26 17:32:10][353454190149379][5716 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6cae9800-e0c8-465b-ad96-8c41b957182e","id":"QR_6cae9800-e0c8-465b-ad96-8c41b957182e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:32:10][353454190149379][5872 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-08-26 17:32:10][353454190149379][5872 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-08-26 17:32:10][353454190149379][5872 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:33:03][352682501650070][0 ms][INFO] === Request start === [2025-08-26 17:33:03][352682501650070][1 ms][DEBUG] START check_scloud [2025-08-26 17:33:03][352682501650070][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:33:03][352682501650070][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 1873 4969 24333784 184208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:33:03][352682501650070][287 ms][DEBUG] targetPkg: running [2025-08-26 17:33:03][352682501650070][287 ms][DEBUG] END check_scloud in 286 ms [2025-08-26 17:33:03][352682501650070][287 ms][DEBUG] START check_boot_completed [2025-08-26 17:33:03][352682501650070][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:33:03][352682501650070][333 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 17:33:03][352682501650070][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:33:03][352682501650070][396 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 17:33:03][352682501650070][396 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 17:33:03][352682501650070][396 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:33:03][352682501650070][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682501650070\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5312\"}'\'' -e'"" [2025-08-26 17:33:03][352682501650070][396 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:33:03][352682501650070][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352682501650070\",\"model\":\"SM-N985F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5312\"}'\'' -e'"" [2025-08-26 17:33:07][352682501650070][4364 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e43e1979-3996-475c-9aa7-b02d8209ac4f","id":"QR_e43e1979-3996-475c-9aa7-b02d8209ac4f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:33:07][352682501650070][4520 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-08-26 17:33:07][352682501650070][4520 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-26 17:33:07][352682501650070][4520 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:34:03][352554205289739][1 ms][INFO] === Request start === [2025-08-26 17:34:03][352554205289739][1 ms][DEBUG] START check_scloud [2025-08-26 17:34:03][352554205289739][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:34:03][352554205289739][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 1873 4969 24446708 195312 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:34:03][352554205289739][251 ms][DEBUG] targetPkg: running [2025-08-26 17:34:03][352554205289739][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-26 17:34:03][352554205289739][251 ms][DEBUG] START check_boot_completed [2025-08-26 17:34:03][352554205289739][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:34:04][352554205289739][298 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 17:34:04][352554205289739][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:34:04][352554205289739][345 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:34:04][352554205289739][345 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 17:34:04][352554205289739][345 ms][DEBUG] START check_internet [2025-08-26 17:34:04][352554205289739][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 17:34:04][352554205289739][627 ms][DEBUG] SU: done in 282 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=185 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 185.358/185.358/185.358/0.000 ms\n [2025-08-26 17:34:04][352554205289739][627 ms][DEBUG] check_internet: online [2025-08-26 17:34:04][352554205289739][627 ms][DEBUG] END check_internet in 282 ms [2025-08-26 17:34:04][352554205289739][627 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:34:04][352554205289739][627 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352554205289739\",\"model\":\"SM-M127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4975\"}'\'' -e'"" [2025-08-26 17:34:04][352554205289739][627 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:34:04][352554205289739][627 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352554205289739\",\"model\":\"SM-M127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4975\"}'\'' -e'"" [2025-08-26 17:34:08][352554205289739][4516 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c5d382b-91ee-4f1e-92be-f1b7d7a4bd65","id":"QR_8c5d382b-91ee-4f1e-92be-f1b7d7a4bd65","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:34:08][352554205289739][4672 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-08-26 17:34:08][352554205289739][4672 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-08-26 17:34:08][352554205289739][4672 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:35:03][353249141289716][0 ms][INFO] === Request start === [2025-08-26 17:35:03][353249141289716][1 ms][DEBUG] START check_scloud [2025-08-26 17:35:03][353249141289716][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:35:03][353249141289716][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 1873 4969 24605656 207440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:35:03][353249141289716][262 ms][DEBUG] targetPkg: running [2025-08-26 17:35:03][353249141289716][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-26 17:35:03][353249141289716][262 ms][DEBUG] START check_boot_completed [2025-08-26 17:35:03][353249141289716][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:35:03][353249141289716][309 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 17:35:03][353249141289716][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:35:03][353249141289716][356 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:35:03][353249141289716][356 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 17:35:03][353249141289716][356 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:35:03][353249141289716][356 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353249141289716\",\"model\":\"SM-F926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5968\"}'\'' -e'"" [2025-08-26 17:35:03][353249141289716][356 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:35:03][353249141289716][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353249141289716\",\"model\":\"SM-F926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5968\"}'\'' -e'"" [2025-08-26 17:35:07][353249141289716][4433 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_06f61c5d-82d6-4abe-b53c-9c1eabd3801b","id":"QR_06f61c5d-82d6-4abe-b53c-9c1eabd3801b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:35:07][353249141289716][4589 ms][DEBUG] proc_open done in 4232 ms; code=255; res.len=3343 [2025-08-26 17:35:07][353249141289716][4589 ms][DEBUG] END runCmdUntilRes#1 in 4232 ms [2025-08-26 17:35:07][353249141289716][4589 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:36:02][352927941099564][0 ms][INFO] === Request start === [2025-08-26 17:36:02][352927941099564][1 ms][DEBUG] START check_scloud [2025-08-26 17:36:02][352927941099564][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:36:02][352927941099564][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 1873 4969 24717372 217904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:36:02][352927941099564][305 ms][DEBUG] targetPkg: running [2025-08-26 17:36:02][352927941099564][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 17:36:02][352927941099564][305 ms][DEBUG] START check_boot_completed [2025-08-26 17:36:02][352927941099564][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:36:02][352927941099564][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 17:36:02][352927941099564][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:36:02][352927941099564][414 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 17:36:02][352927941099564][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 17:36:02][352927941099564][414 ms][DEBUG] START check_internet [2025-08-26 17:36:02][352927941099564][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 17:36:03][352927941099564][963 ms][DEBUG] SU: done in 548 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.771/201.771/201.771/0.000 ms\n [2025-08-26 17:36:03][352927941099564][963 ms][DEBUG] check_internet: online [2025-08-26 17:36:03][352927941099564][963 ms][DEBUG] END check_internet in 549 ms [2025-08-26 17:36:03][352927941099564][963 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:36:03][352927941099564][963 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927941099564\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2027\"}'\'' -e'"" [2025-08-26 17:36:03][352927941099564][963 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:36:03][352927941099564][963 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352927941099564\",\"model\":\"SM-M166P\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2027\"}'\'' -e'"" [2025-08-26 17:36:07][352927941099564][4851 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab1e6a79-7b1f-4834-b00b-4296fae0bd70","id":"QR_ab1e6a79-7b1f-4834-b00b-4296fae0bd70","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:36:07][352927941099564][5007 ms][DEBUG] proc_open done in 4043 ms; code=255; res.len=3343 [2025-08-26 17:36:07][352927941099564][5007 ms][DEBUG] END runCmdUntilRes#1 in 4044 ms [2025-08-26 17:36:07][352927941099564][5007 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:36:10][353684144422759][1 ms][INFO] === Request start === [2025-08-26 17:36:10][353684144422759][1 ms][DEBUG] START check_scloud [2025-08-26 17:36:10][353684144422759][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:36:10][353684144422759][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 1873 4969 24878276 229672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:36:10][353684144422759][298 ms][DEBUG] targetPkg: running [2025-08-26 17:36:10][353684144422759][299 ms][DEBUG] END check_scloud in 297 ms [2025-08-26 17:36:10][353684144422759][299 ms][DEBUG] START check_boot_completed [2025-08-26 17:36:10][353684144422759][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:36:10][353684144422759][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 17:36:10][353684144422759][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:36:11][353684144422759][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:36:11][353684144422759][392 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 17:36:11][353684144422759][392 ms][DEBUG] START check_internet [2025-08-26 17:36:11][353684144422759][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 17:36:11][353684144422759][704 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.132/200.132/200.132/0.000 ms\n [2025-08-26 17:36:11][353684144422759][705 ms][DEBUG] check_internet: online [2025-08-26 17:36:11][353684144422759][705 ms][DEBUG] END check_internet in 313 ms [2025-08-26 17:36:11][353684144422759][705 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:36:11][353684144422759][705 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684144422759\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7111\"}'\'' -e'"" [2025-08-26 17:36:11][353684144422759][705 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:36:11][353684144422759][705 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684144422759\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7111\"}'\'' -e'"" [2025-08-26 17:36:15][353684144422759][4860 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_21f363d9-c612-4556-9c20-0b81b9eb5a7e","id":"QR_21f363d9-c612-4556-9c20-0b81b9eb5a7e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:36:15][353684144422759][5016 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3343 [2025-08-26 17:36:15][353684144422759][5016 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-26 17:36:15][353684144422759][5016 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:37:03][353129156374449][0 ms][INFO] === Request start === [2025-08-26 17:37:03][353129156374449][1 ms][DEBUG] START check_scloud [2025-08-26 17:37:03][353129156374449][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:37:03][353129156374449][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 1873 4969 25007876 240764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:37:03][353129156374449][289 ms][DEBUG] targetPkg: running [2025-08-26 17:37:03][353129156374449][289 ms][DEBUG] END check_scloud in 289 ms [2025-08-26 17:37:03][353129156374449][289 ms][DEBUG] START check_boot_completed [2025-08-26 17:37:03][353129156374449][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:37:03][353129156374449][336 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 17:37:03][353129156374449][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:37:03][353129156374449][398 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 17:37:03][353129156374449][398 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 17:37:03][353129156374449][399 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:37:03][353129156374449][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353129156374449\",\"model\":\"SM-A136B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3562\"}'\'' -e'"" [2025-08-26 17:37:03][353129156374449][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:37:03][353129156374449][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353129156374449\",\"model\":\"SM-A136B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3562\"}'\'' -e'"" [2025-08-26 17:37:07][353129156374449][4179 ms][DEBUG] proc_open done in 3780 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-26 17:37:07][353129156374449][4179 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-26 17:37:07][353129156374449][4179 ms][WARN] Detected error: Process with pid 1873 either refused to load frida-agent, or terminated during injection [2025-08-26 17:37:07][353129156374449][4179 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 17:37:07][353129156374449][4320 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 17:37:07][353129156374449][4320 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 17:37:07][353129156374449][4320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 17:37:08][353129156374449][4445 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 17:37:08][353129156374449][4445 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 17:37:08][353129156374449][4569 ms][DEBUG] SU: done in 125 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 17:37:10][353129156374449][6584 ms][DEBUG] START check_boot_completed [2025-08-26 17:37:10][353129156374449][6585 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:37:10][353129156374449][6631 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 17:37:10][353129156374449][6631 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:37:10][353129156374449][6678 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:37:10][353129156374449][6678 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 17:37:13][353129156374449][9693 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 17:37:13][353129156374449][9693 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353129156374449\",\"model\":\"SM-A136B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3562\"}'\'' -e'"" [2025-08-26 17:37:18][353129156374449][14567 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4645782f-1bec-4dd5-b411-e1b30fc48780","id":"QR_4645782f-1bec-4dd5-b411-e1b30fc48780","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:37:18][353129156374449][14723 ms][DEBUG] proc_open done in 5030 ms; code=255; res.len=3343 [2025-08-26 17:37:18][353129156374449][14724 ms][DEBUG] END runCmdUntilRes#2 in 5031 ms [2025-08-26 17:37:18][353129156374449][14724 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:44:03][351240642933409][1 ms][INFO] === Request start === [2025-08-26 17:44:03][351240642933409][1 ms][DEBUG] START check_scloud [2025-08-26 17:44:03][351240642933409][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:44:03][351240642933409][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 3255 4969 23573720 127436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:44:03][351240642933409][291 ms][DEBUG] targetPkg: running [2025-08-26 17:44:03][351240642933409][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-26 17:44:03][351240642933409][291 ms][DEBUG] START check_boot_completed [2025-08-26 17:44:03][351240642933409][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:44:03][351240642933409][321 ms][DEBUG] ADB: done in 30 ms; out [2025-08-26 17:44:03][351240642933409][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:44:04][351240642933409][368 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:44:04][351240642933409][368 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 17:44:04][351240642933409][369 ms][DEBUG] START check_internet [2025-08-26 17:44:04][351240642933409][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 17:44:04][351240642933409][790 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.237/201.237/201.237/0.000 ms\n [2025-08-26 17:44:04][351240642933409][790 ms][DEBUG] check_internet: online [2025-08-26 17:44:04][351240642933409][790 ms][DEBUG] END check_internet in 421 ms [2025-08-26 17:44:04][351240642933409][790 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:44:04][351240642933409][790 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642933409\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7646\"}'\'' -e'"" [2025-08-26 17:44:04][351240642933409][790 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:44:04][351240642933409][790 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642933409\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7646\"}'\'' -e'"" [2025-08-26 17:44:08][351240642933409][4851 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9f41763a-a631-412d-9044-b469a4bde160","id":"QR_9f41763a-a631-412d-9044-b469a4bde160","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:44:08][351240642933409][5008 ms][DEBUG] proc_open done in 4218 ms; code=255; res.len=3343 [2025-08-26 17:44:08][351240642933409][5008 ms][DEBUG] END runCmdUntilRes#1 in 4218 ms [2025-08-26 17:44:08][351240642933409][5008 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:44:11][356663821732802][0 ms][INFO] === Request start === [2025-08-26 17:44:11][356663821732802][0 ms][DEBUG] START check_scloud [2025-08-26 17:44:11][356663821732802][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:44:11][356663821732802][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 3255 4969 23762220 138112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:44:11][356663821732802][300 ms][DEBUG] targetPkg: running [2025-08-26 17:44:11][356663821732802][300 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 17:44:11][356663821732802][300 ms][DEBUG] START check_boot_completed [2025-08-26 17:44:11][356663821732802][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:44:11][356663821732802][331 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 17:44:11][356663821732802][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:44:11][356663821732802][378 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:44:11][356663821732802][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 17:44:11][356663821732802][378 ms][DEBUG] START check_internet [2025-08-26 17:44:11][356663821732802][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 17:44:11][356663821732802][706 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=214 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 214.869/214.869/214.869/0.000 ms\n [2025-08-26 17:44:11][356663821732802][706 ms][DEBUG] check_internet: online [2025-08-26 17:44:11][356663821732802][706 ms][DEBUG] END check_internet in 328 ms [2025-08-26 17:44:11][356663821732802][706 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:44:11][356663821732802][706 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663821732802\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1124\"}'\'' -e'"" [2025-08-26 17:44:11][356663821732802][706 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:44:11][356663821732802][706 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663821732802\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1124\"}'\'' -e'"" [2025-08-26 17:44:15][356663821732802][4205 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e016768c-9a4f-4379-aef5-f3e84ec56dfc","id":"QR_e016768c-9a4f-4379-aef5-f3e84ec56dfc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:44:15][356663821732802][4361 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=3343 [2025-08-26 17:44:15][356663821732802][4361 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-26 17:44:15][356663821732802][4361 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:45:04][354239346856764][0 ms][INFO] === Request start === [2025-08-26 17:45:04][354239346856764][1 ms][DEBUG] START check_scloud [2025-08-26 17:45:04][354239346856764][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:45:04][354239346856764][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 3255 4969 23886188 149944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:45:04][354239346856764][305 ms][DEBUG] targetPkg: running [2025-08-26 17:45:04][354239346856764][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 17:45:04][354239346856764][305 ms][DEBUG] START check_boot_completed [2025-08-26 17:45:04][354239346856764][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:45:04][354239346856764][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 17:45:04][354239346856764][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:45:05][354239346856764][414 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 17:45:05][354239346856764][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 17:45:05][354239346856764][414 ms][DEBUG] rawBody.length=1149 [2025-08-26 17:45:05][354239346856764][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354239346856764\",\"model\":\"SM-X218U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3955\"}'\'' -e'"" [2025-08-26 17:45:05][354239346856764][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:45:05][354239346856764][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354239346856764\",\"model\":\"SM-X218U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3955\"}'\'' -e'"" [2025-08-26 17:45:09][354239346856764][5210 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_88d7bc43-76a0-4a63-88c6-111dba22e587","id":"QR_88d7bc43-76a0-4a63-88c6-111dba22e587","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:45:09][354239346856764][5366 ms][DEBUG] proc_open done in 4951 ms; code=255; res.len=3343 [2025-08-26 17:45:09][354239346856764][5366 ms][DEBUG] END runCmdUntilRes#1 in 4952 ms [2025-08-26 17:45:09][354239346856764][5366 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:47:03][352677532205779][1 ms][INFO] === Request start === [2025-08-26 17:47:03][352677532205779][1 ms][DEBUG] START check_scloud [2025-08-26 17:47:03][352677532205779][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:47:03][352677532205779][300 ms][DEBUG] SU: done in 298 ms; outu0_a118 3255 4969 24018384 160804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:47:03][352677532205779][300 ms][DEBUG] targetPkg: running [2025-08-26 17:47:03][352677532205779][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-26 17:47:03][352677532205779][300 ms][DEBUG] START check_boot_completed [2025-08-26 17:47:03][352677532205779][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:47:03][352677532205779][347 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 17:47:03][352677532205779][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:47:03][352677532205779][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:47:03][352677532205779][394 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 17:47:03][352677532205779][394 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:47:03][352677532205779][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532205779\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3404\"}'\'' -e'"" [2025-08-26 17:47:03][352677532205779][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:47:03][352677532205779][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532205779\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3404\"}'\'' -e'"" [2025-08-26 17:47:07][352677532205779][4189 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_127ac280-e359-4dee-91d3-f1550e9d49c1","id":"QR_127ac280-e359-4dee-91d3-f1550e9d49c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:47:07][352677532205779][4345 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-08-26 17:47:07][352677532205779][4345 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-26 17:47:07][352677532205779][4345 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:50:04][354916442663026][1 ms][INFO] === Request start === [2025-08-26 17:50:04][354916442663026][1 ms][DEBUG] START check_scloud [2025-08-26 17:50:04][354916442663026][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:50:05][354916442663026][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 3255 4969 24142516 171980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:50:05][354916442663026][268 ms][DEBUG] targetPkg: running [2025-08-26 17:50:05][354916442663026][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-26 17:50:05][354916442663026][268 ms][DEBUG] START check_boot_completed [2025-08-26 17:50:05][354916442663026][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:50:05][354916442663026][315 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 17:50:05][354916442663026][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:50:05][354916442663026][363 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 17:50:05][354916442663026][363 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 17:50:05][354916442663026][363 ms][DEBUG] START check_internet [2025-08-26 17:50:05][354916442663026][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 17:50:05][354916442663026][861 ms][DEBUG] SU: done in 498 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.463/200.463/200.463/0.000 ms\n [2025-08-26 17:50:05][354916442663026][861 ms][DEBUG] check_internet: online [2025-08-26 17:50:05][354916442663026][861 ms][DEBUG] END check_internet in 498 ms [2025-08-26 17:50:05][354916442663026][861 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:50:05][354916442663026][861 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916442663026\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1022\"}'\'' -e'"" [2025-08-26 17:50:05][354916442663026][862 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:50:05][354916442663026][862 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916442663026\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1022\"}'\'' -e'"" [2025-08-26 17:50:09][354916442663026][4782 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c85ecd77-104d-4f95-888b-17877f902cc9","id":"QR_c85ecd77-104d-4f95-888b-17877f902cc9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:50:09][354916442663026][4938 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-26 17:50:09][354916442663026][4939 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-26 17:50:09][354916442663026][4939 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:53:02][354321595397961][0 ms][INFO] === Request start === [2025-08-26 17:53:02][354321595397961][0 ms][DEBUG] START check_scloud [2025-08-26 17:53:02][354321595397961][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:53:03][354321595397961][300 ms][DEBUG] SU: done in 300 ms; outu0_a118 3255 4969 24258456 183936 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:53:03][354321595397961][300 ms][DEBUG] targetPkg: running [2025-08-26 17:53:03][354321595397961][300 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 17:53:03][354321595397961][300 ms][DEBUG] START check_boot_completed [2025-08-26 17:53:03][354321595397961][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:53:03][354321595397961][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 17:53:03][354321595397961][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:53:03][354321595397961][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:53:03][354321595397961][394 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 17:53:03][354321595397961][394 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:53:03][354321595397961][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354321595397961\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5194\"}'\'' -e'"" [2025-08-26 17:53:03][354321595397961][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:53:03][354321595397961][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354321595397961\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5194\"}'\'' -e'"" [2025-08-26 17:53:07][354321595397961][4533 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0d41f55a-b986-4a4f-aa8f-a7672cae8577","id":"QR_0d41f55a-b986-4a4f-aa8f-a7672cae8577","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:53:07][354321595397961][4689 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-08-26 17:53:07][354321595397961][4689 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-08-26 17:53:07][354321595397961][4690 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 17:54:03][357920542311814][0 ms][INFO] === Request start === [2025-08-26 17:54:03][357920542311814][1 ms][DEBUG] START check_scloud [2025-08-26 17:54:03][357920542311814][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 17:54:04][357920542311814][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 3255 4969 24368252 195112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 17:54:04][357920542311814][305 ms][DEBUG] targetPkg: running [2025-08-26 17:54:04][357920542311814][305 ms][DEBUG] END check_scloud in 305 ms [2025-08-26 17:54:04][357920542311814][305 ms][DEBUG] START check_boot_completed [2025-08-26 17:54:04][357920542311814][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 17:54:04][357920542311814][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 17:54:04][357920542311814][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 17:54:04][357920542311814][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 17:54:04][357920542311814][399 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 17:54:04][357920542311814][399 ms][DEBUG] START check_internet [2025-08-26 17:54:04][357920542311814][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 17:54:04][357920542311814][727 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=228 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 228.251/228.251/228.251/0.000 ms\n [2025-08-26 17:54:04][357920542311814][727 ms][DEBUG] check_internet: online [2025-08-26 17:54:04][357920542311814][727 ms][DEBUG] END check_internet in 328 ms [2025-08-26 17:54:04][357920542311814][727 ms][DEBUG] rawBody.length=1148 [2025-08-26 17:54:04][357920542311814][727 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357920542311814\",\"model\":\"SM-A325N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5447\"}'\'' -e'"" [2025-08-26 17:54:04][357920542311814][727 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 17:54:04][357920542311814][727 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357920542311814\",\"model\":\"SM-A325N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5447\"}'\'' -e'"" [2025-08-26 17:54:08][357920542311814][4804 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1cfb010b-ec49-4965-99f5-e5e114e196b5","id":"QR_1cfb010b-ec49-4965-99f5-e5e114e196b5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 17:54:08][357920542311814][4960 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3343 [2025-08-26 17:54:08][357920542311814][4960 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-26 17:54:08][357920542311814][4960 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:04:05][353610580960812][1 ms][INFO] === Request start === [2025-08-26 18:04:05][353610580960812][1 ms][DEBUG] START check_scloud [2025-08-26 18:04:05][353610580960812][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:04:05][353610580960812][300 ms][DEBUG] SU: done in 298 ms; outu0_a118 3255 4969 24516912 196056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:04:05][353610580960812][300 ms][DEBUG] targetPkg: running [2025-08-26 18:04:05][353610580960812][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-26 18:04:05][353610580960812][300 ms][DEBUG] START check_boot_completed [2025-08-26 18:04:05][353610580960812][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:04:05][353610580960812][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 18:04:05][353610580960812][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:04:05][353610580960812][409 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 18:04:05][353610580960812][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 18:04:05][353610580960812][409 ms][DEBUG] START check_internet [2025-08-26 18:04:05][353610580960812][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 18:04:05][353610580960812][721 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=151 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 151.669/151.669/151.669/0.000 ms\n [2025-08-26 18:04:05][353610580960812][722 ms][DEBUG] check_internet: online [2025-08-26 18:04:05][353610580960812][722 ms][DEBUG] END check_internet in 312 ms [2025-08-26 18:04:05][353610580960812][722 ms][DEBUG] rawBody.length=1149 [2025-08-26 18:04:05][353610580960812][722 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353610580960812\",\"model\":\"SM-G781W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2765\"}'\'' -e'"" [2025-08-26 18:04:05][353610580960812][722 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:04:05][353610580960812][722 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353610580960812\",\"model\":\"SM-G781W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2765\"}'\'' -e'"" [2025-08-26 18:04:10][353610580960812][5455 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_18db5aba-bd24-4dae-9669-dbb1b1d52ef7","id":"QR_18db5aba-bd24-4dae-9669-dbb1b1d52ef7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:04:10][353610580960812][5611 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-08-26 18:04:10][353610580960812][5611 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-08-26 18:04:10][353610580960812][5611 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:07:03][351877479421782][0 ms][INFO] === Request start === [2025-08-26 18:07:03][351877479421782][0 ms][DEBUG] START check_scloud [2025-08-26 18:07:03][351877479421782][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:07:03][351877479421782][311 ms][DEBUG] SU: done in 311 ms; outu0_a118 3255 4969 24689248 188540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:07:03][351877479421782][311 ms][DEBUG] targetPkg: running [2025-08-26 18:07:03][351877479421782][311 ms][DEBUG] END check_scloud in 311 ms [2025-08-26 18:07:03][351877479421782][311 ms][DEBUG] START check_boot_completed [2025-08-26 18:07:03][351877479421782][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:07:03][351877479421782][342 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 18:07:03][351877479421782][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:07:03][351877479421782][390 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 18:07:03][351877479421782][390 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 18:07:03][351877479421782][390 ms][DEBUG] rawBody.length=1148 [2025-08-26 18:07:03][351877479421782][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877479421782\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9625\"}'\'' -e'"" [2025-08-26 18:07:03][351877479421782][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:07:03][351877479421782][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877479421782\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9625\"}'\'' -e'"" [2025-08-26 18:07:08][351877479421782][5028 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6d57f63b-fd76-47e2-931e-623021e34084","id":"QR_6d57f63b-fd76-47e2-931e-623021e34084","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:07:08][351877479421782][5185 ms][DEBUG] proc_open done in 4794 ms; code=255; res.len=3343 [2025-08-26 18:07:08][351877479421782][5185 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-08-26 18:07:08][351877479421782][5185 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:08:04][351525590438496][0 ms][INFO] === Request start === [2025-08-26 18:08:04][351525590438496][1 ms][DEBUG] START check_scloud [2025-08-26 18:08:04][351525590438496][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:08:04][351525590438496][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 3255 4969 24810312 202820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:08:04][351525590438496][300 ms][DEBUG] targetPkg: running [2025-08-26 18:08:04][351525590438496][300 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 18:08:04][351525590438496][301 ms][DEBUG] START check_boot_completed [2025-08-26 18:08:04][351525590438496][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:08:04][351525590438496][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 18:08:04][351525590438496][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:08:04][351525590438496][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 18:08:04][351525590438496][394 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 18:08:04][351525590438496][394 ms][DEBUG] START check_internet [2025-08-26 18:08:04][351525590438496][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 18:08:05][351525590438496][973 ms][DEBUG] SU: done in 579 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.350/202.350/202.350/0.000 ms\n [2025-08-26 18:08:05][351525590438496][973 ms][DEBUG] check_internet: online [2025-08-26 18:08:05][351525590438496][973 ms][DEBUG] END check_internet in 579 ms [2025-08-26 18:08:05][351525590438496][973 ms][DEBUG] rawBody.length=1149 [2025-08-26 18:08:05][351525590438496][973 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351525590438496\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6694\"}'\'' -e'"" [2025-08-26 18:08:05][351525590438496][973 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:08:05][351525590438496][974 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351525590438496\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6694\"}'\'' -e'"" [2025-08-26 18:08:10][351525590438496][5861 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e41da2f8-9632-422c-91b5-9879e80b60de","id":"QR_e41da2f8-9632-422c-91b5-9879e80b60de","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:08:10][351525590438496][6017 ms][DEBUG] proc_open done in 5044 ms; code=255; res.len=3343 [2025-08-26 18:08:10][351525590438496][6018 ms][DEBUG] END runCmdUntilRes#1 in 5044 ms [2025-08-26 18:08:10][351525590438496][6018 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:08:14][352887811580707][0 ms][INFO] === Request start === [2025-08-26 18:08:14][352887811580707][1 ms][DEBUG] START check_scloud [2025-08-26 18:08:14][352887811580707][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:08:14][352887811580707][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 3255 4969 24979536 214544 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:08:14][352887811580707][306 ms][DEBUG] targetPkg: running [2025-08-26 18:08:14][352887811580707][306 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 18:08:14][352887811580707][307 ms][DEBUG] START check_boot_completed [2025-08-26 18:08:14][352887811580707][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:08:14][352887811580707][337 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 18:08:14][352887811580707][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:08:14][352887811580707][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 18:08:14][352887811580707][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 18:08:14][352887811580707][384 ms][DEBUG] START check_internet [2025-08-26 18:08:14][352887811580707][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 18:08:14][352887811580707][634 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=151 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 151.218/151.218/151.218/0.000 ms\n [2025-08-26 18:08:14][352887811580707][634 ms][DEBUG] check_internet: online [2025-08-26 18:08:14][352887811580707][634 ms][DEBUG] END check_internet in 250 ms [2025-08-26 18:08:14][352887811580707][634 ms][DEBUG] rawBody.length=1148 [2025-08-26 18:08:14][352887811580707][634 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352887811580707\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5467\"}'\'' -e'"" [2025-08-26 18:08:14][352887811580707][634 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:08:14][352887811580707][634 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352887811580707\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5467\"}'\'' -e'"" [2025-08-26 18:08:23][352887811580707][8742 ms][DEBUG] proc_open done in 8108 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-26 18:08:23][352887811580707][8742 ms][DEBUG] END runCmdUntilRes#1 in 8108 ms [2025-08-26 18:08:23][352887811580707][8742 ms][WARN] Detected error: Process with pid 3255 either refused to load frida-agent, or terminated during injectionProcess with pid 3255 either refused to load frida-agent, or terminated during injection\r\n [2025-08-26 18:08:23][352887811580707][8742 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-08-26 18:08:23][352887811580707][9117 ms][DEBUG] SU: done in 375 ms; out [2025-08-26 18:08:23][352887811580707][9117 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 18:08:23][352887811580707][9399 ms][DEBUG] SU: done in 283 ms; out [2025-08-26 18:08:23][352887811580707][9399 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 18:08:23][352887811580707][9399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 18:08:24][352887811580707][9710 ms][DEBUG] SU: done in 311 ms; out [2025-08-26 18:08:24][352887811580707][9710 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 18:08:24][352887811580707][9882 ms][DEBUG] SU: done in 172 ms; out [2025-08-26 18:08:26][352887811580707][11897 ms][DEBUG] START check_boot_completed [2025-08-26 18:08:26][352887811580707][11897 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:08:26][352887811580707][11944 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 18:08:26][352887811580707][11944 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:08:26][352887811580707][12006 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 18:08:26][352887811580707][12007 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 18:08:29][352887811580707][15021 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 18:08:29][352887811580707][15021 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352887811580707\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5467\"}'\'' -e'"" [2025-08-26 18:08:30][352887811580707][16552 ms][DEBUG] proc_open done in 1531 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-26 18:08:30][352887811580707][16553 ms][DEBUG] END runCmdUntilRes#2 in 1531 ms [2025-08-26 18:08:30][352887811580707][16553 ms][WARN] Detected error 2; Reboot the device [2025-08-26 18:08:30][352887811580707][16553 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-08-26 18:08:31][352887811580707][16818 ms][DEBUG] SU: done in 265 ms; outsystem 7665 7328 7252612 123120 wait_on_page_bit_common 0 D system_server\n [2025-08-26 18:08:31][352887811580707][16818 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-26 18:08:31][352887811580707][17458 ms][DEBUG] SU: done in 640 ms; out [2025-08-26 18:09:02][352887811580707][0 ms][INFO] === Request start === [2025-08-26 18:09:02][352887811580707][1 ms][DEBUG] START check_scloud [2025-08-26 18:09:02][352887811580707][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:09:02][352887811580707][36 ms][DEBUG] SU: done in 35 ms; out [2025-08-26 18:09:02][352887811580707][36 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-08-26 18:09:02][352887811580707][68 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-08-26 18:09:02][352887811580707][68 ms][WARN] check_devices: no device [2025-08-26 18:09:02][352887811580707][68 ms][WARN] check_devices: no device [2025-08-26 18:09:02][352887811580707][68 ms][DEBUG] END check_scloud in 67 ms [2025-08-26 18:10:03][352887811580707][0 ms][INFO] === Request start === [2025-08-26 18:10:03][352887811580707][0 ms][DEBUG] START check_scloud [2025-08-26 18:10:03][352887811580707][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:10:03][352887811580707][366 ms][DEBUG] SU: done in 365 ms; out [2025-08-26 18:10:03][352887811580707][366 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-08-26 18:10:03][352887811580707][397 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-08-26 18:10:03][352887811580707][397 ms][DEBUG] check_devices: device found [2025-08-26 18:10:03][352887811580707][397 ms][WARN] targetPkg: not running, restarting [2025-08-26 18:10:03][352887811580707][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 18:10:03][352887811580707][538 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 18:10:03][352887811580707][538 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 18:10:03][352887811580707][756 ms][DEBUG] SU: done in 218 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 18:10:05][352887811580707][2771 ms][DEBUG] END check_scloud in 2771 ms [2025-08-26 18:10:05][352887811580707][2772 ms][DEBUG] START check_boot_completed [2025-08-26 18:10:05][352887811580707][2772 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:10:05][352887811580707][2818 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 18:10:05][352887811580707][2819 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:10:06][352887811580707][2881 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 18:10:06][352887811580707][2881 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 18:10:06][352887811580707][2881 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 18:10:06][352887811580707][3053 ms][DEBUG] SU: done in 172 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31753 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 448\nsuccessfulTxPacketsPerSecond: 20.61587447818397\nretriedTxPackets: 51\nretriedTxPacketsPerSecond: 3.8841502640056755\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 725\nsuccessfulRxPacketsPerSecond: 24.350634347420193\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 18:10:06][352887811580707][3053 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 18:10:06][352887811580707][3835 ms][DEBUG] SU: done in 781 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.176/202.176/202.176/0.000 ms\n [2025-08-26 18:10:06][352887811580707][3835 ms][DEBUG] check_internet: online [2025-08-26 18:10:06][352887811580707][3835 ms][DEBUG] rawBody.length=1148 [2025-08-26 18:10:06][352887811580707][3835 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352887811580707\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7925\"}'\'' -e'"" [2025-08-26 18:10:06][352887811580707][3835 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:10:06][352887811580707][3835 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352887811580707\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7925\"}'\'' -e'"" [2025-08-26 18:10:12][352887811580707][9692 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_63fc527e-c432-43ea-a165-3cbc7d32cbaa","id":"QR_63fc527e-c432-43ea-a165-3cbc7d32cbaa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:10:12][352887811580707][9849 ms][DEBUG] proc_open done in 6014 ms; code=255; res.len=3343 [2025-08-26 18:10:12][352887811580707][9849 ms][DEBUG] END runCmdUntilRes#1 in 6014 ms [2025-08-26 18:10:12][352887811580707][9849 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:10:16][350455580176578][0 ms][INFO] === Request start === [2025-08-26 18:10:16][350455580176578][1 ms][DEBUG] START check_scloud [2025-08-26 18:10:16][350455580176578][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:10:17][350455580176578][342 ms][DEBUG] SU: done in 341 ms; outu0_a118 10344 5025 23647804 106120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:10:17][350455580176578][342 ms][DEBUG] targetPkg: running [2025-08-26 18:10:17][350455580176578][342 ms][DEBUG] END check_scloud in 341 ms [2025-08-26 18:10:17][350455580176578][342 ms][DEBUG] START check_boot_completed [2025-08-26 18:10:17][350455580176578][342 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:10:17][350455580176578][389 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 18:10:17][350455580176578][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:10:17][350455580176578][451 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 18:10:17][350455580176578][451 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 18:10:17][350455580176578][451 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 18:10:17][350455580176578][576 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31753 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 525\nsuccessfulTxPacketsPerSecond: 8.126838872183672\nretriedTxPackets: 62\nretriedTxPacketsPerSecond: 1.194054123530403\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 777\nsuccessfulRxPacketsPerSecond: 5.855588783766358\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 18:10:17][350455580176578][576 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 18:10:17][350455580176578][936 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=107 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 107.381/107.381/107.381/0.000 ms\n [2025-08-26 18:10:17][350455580176578][936 ms][DEBUG] check_internet: online [2025-08-26 18:10:17][350455580176578][936 ms][DEBUG] rawBody.length=1149 [2025-08-26 18:10:17][350455580176578][936 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455580176578\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7175\"}'\'' -e'"" [2025-08-26 18:10:17][350455580176578][936 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:10:17][350455580176578][936 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455580176578\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7175\"}'\'' -e'"" [2025-08-26 18:10:24][350455580176578][7449 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ec806120-66a0-4dfc-a5e1-c36d046bf548","id":"QR_ec806120-66a0-4dfc-a5e1-c36d046bf548","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:10:24][350455580176578][7606 ms][DEBUG] proc_open done in 6669 ms; code=255; res.len=3343 [2025-08-26 18:10:24][350455580176578][7606 ms][DEBUG] END runCmdUntilRes#1 in 6670 ms [2025-08-26 18:10:24][350455580176578][7606 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:10:29][351199555713879][0 ms][INFO] === Request start === [2025-08-26 18:10:29][351199555713879][1 ms][DEBUG] START check_scloud [2025-08-26 18:10:29][351199555713879][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:10:29][351199555713879][346 ms][DEBUG] SU: done in 346 ms; outu0_a118 10344 5025 23772524 91788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:10:29][351199555713879][346 ms][DEBUG] targetPkg: running [2025-08-26 18:10:29][351199555713879][347 ms][DEBUG] END check_scloud in 346 ms [2025-08-26 18:10:29][351199555713879][347 ms][DEBUG] START check_boot_completed [2025-08-26 18:10:29][351199555713879][347 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:10:29][351199555713879][393 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 18:10:29][351199555713879][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:10:29][351199555713879][456 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 18:10:29][351199555713879][456 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 18:10:29][351199555713879][456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 18:10:29][351199555713879][596 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31753 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 525\nsuccessfulTxPacketsPerSecond: 8.126838872183672\nretriedTxPackets: 62\nretriedTxPacketsPerSecond: 1.194054123530403\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 777\nsuccessfulRxPacketsPerSecond: 5.855588783766358\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 18:10:29][351199555713879][596 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 18:10:30][351199555713879][815 ms][DEBUG] SU: done in 219 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=107 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 107.331/107.331/107.331/0.000 ms\n [2025-08-26 18:10:30][351199555713879][815 ms][DEBUG] check_internet: online [2025-08-26 18:10:30][351199555713879][815 ms][DEBUG] rawBody.length=1148 [2025-08-26 18:10:30][351199555713879][815 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199555713879\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7434\"}'\'' -e'"" [2025-08-26 18:10:30][351199555713879][815 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:10:30][351199555713879][815 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199555713879\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7434\"}'\'' -e'"" [2025-08-26 18:10:34][351199555713879][4830 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_79317130-4172-4b25-8230-c7157e6a7077","id":"QR_79317130-4172-4b25-8230-c7157e6a7077","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:10:34][351199555713879][4986 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3343 [2025-08-26 18:10:34][351199555713879][4986 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-08-26 18:10:34][351199555713879][4986 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:11:04][354420573321058][0 ms][INFO] === Request start === [2025-08-26 18:11:04][354420573321058][1 ms][DEBUG] START check_scloud [2025-08-26 18:11:04][354420573321058][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:11:04][354420573321058][330 ms][DEBUG] SU: done in 329 ms; outu0_a118 10344 5025 23827380 64260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:11:04][354420573321058][330 ms][DEBUG] targetPkg: running [2025-08-26 18:11:04][354420573321058][330 ms][DEBUG] END check_scloud in 329 ms [2025-08-26 18:11:04][354420573321058][330 ms][DEBUG] START check_boot_completed [2025-08-26 18:11:04][354420573321058][330 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:11:04][354420573321058][361 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 18:11:04][354420573321058][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:11:04][354420573321058][424 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 18:11:04][354420573321058][424 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 18:11:04][354420573321058][424 ms][DEBUG] rawBody.length=1149 [2025-08-26 18:11:04][354420573321058][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354420573321058\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7923\"}'\'' -e'"" [2025-08-26 18:11:04][354420573321058][424 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:11:04][354420573321058][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354420573321058\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7923\"}'\'' -e'"" [2025-08-26 18:11:10][354420573321058][6016 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_18fb58f0-bf3b-4e77-8d89-b062be2d156e","id":"QR_18fb58f0-bf3b-4e77-8d89-b062be2d156e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:11:10][354420573321058][6172 ms][DEBUG] proc_open done in 5748 ms; code=255; res.len=3343 [2025-08-26 18:11:10][354420573321058][6172 ms][DEBUG] END runCmdUntilRes#1 in 5748 ms [2025-08-26 18:11:10][354420573321058][6172 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:11:16][350437734129588][0 ms][INFO] === Request start === [2025-08-26 18:11:16][350437734129588][1 ms][DEBUG] START check_scloud [2025-08-26 18:11:16][350437734129588][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:11:16][350437734129588][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 10344 5025 23957756 85136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:11:16][350437734129588][310 ms][DEBUG] targetPkg: running [2025-08-26 18:11:16][350437734129588][310 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 18:11:16][350437734129588][310 ms][DEBUG] START check_boot_completed [2025-08-26 18:11:16][350437734129588][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:11:16][350437734129588][357 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 18:11:16][350437734129588][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:11:17][350437734129588][419 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 18:11:17][350437734129588][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 18:11:17][350437734129588][420 ms][DEBUG] rawBody.length=1149 [2025-08-26 18:11:17][350437734129588][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350437734129588\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6430\"}'\'' -e'"" [2025-08-26 18:11:17][350437734129588][420 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:11:17][350437734129588][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350437734129588\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6430\"}'\'' -e'"" [2025-08-26 18:11:21][350437734129588][4746 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0d9c41c7-73b7-4dbb-b70d-d6dc5469c52c","id":"QR_0d9c41c7-73b7-4dbb-b70d-d6dc5469c52c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:11:21][350437734129588][4903 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-08-26 18:11:21][350437734129588][4903 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-26 18:11:21][350437734129588][4903 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:13:05][350239334792280][1 ms][INFO] === Request start === [2025-08-26 18:13:05][350239334792280][1 ms][DEBUG] START check_scloud [2025-08-26 18:13:05][350239334792280][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:13:05][350239334792280][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 10344 5025 24086768 98640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:13:05][350239334792280][328 ms][DEBUG] targetPkg: running [2025-08-26 18:13:05][350239334792280][328 ms][DEBUG] END check_scloud in 327 ms [2025-08-26 18:13:05][350239334792280][328 ms][DEBUG] START check_boot_completed [2025-08-26 18:13:05][350239334792280][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:13:05][350239334792280][375 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 18:13:05][350239334792280][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:13:05][350239334792280][422 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 18:13:05][350239334792280][422 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 18:13:05][350239334792280][422 ms][DEBUG] rawBody.length=1158 [2025-08-26 18:13:05][350239334792280][422 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350239334792280\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9YT60BV5RD\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3340\"}'\'' -e'"" [2025-08-26 18:13:05][350239334792280][422 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:13:05][350239334792280][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350239334792280\",\"model\":\"SM-X200\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9YT60BV5RD\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3340\"}'\'' -e'"" [2025-08-26 18:13:09][350239334792280][4530 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e3b95ca1-1e6d-4e6b-a216-19da571a33e1","id":"QR_e3b95ca1-1e6d-4e6b-a216-19da571a33e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:13:09][350239334792280][4686 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3343 [2025-08-26 18:13:09][350239334792280][4686 ms][DEBUG] END runCmdUntilRes#1 in 4265 ms [2025-08-26 18:13:09][350239334792280][4686 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:14:03][350536258755999][0 ms][INFO] === Request start === [2025-08-26 18:14:03][350536258755999][1 ms][DEBUG] START check_scloud [2025-08-26 18:14:03][350536258755999][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:14:03][350536258755999][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 10344 5025 24221204 110492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:14:03][350536258755999][322 ms][DEBUG] targetPkg: running [2025-08-26 18:14:03][350536258755999][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-26 18:14:03][350536258755999][322 ms][DEBUG] START check_boot_completed [2025-08-26 18:14:03][350536258755999][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:14:03][350536258755999][368 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 18:14:03][350536258755999][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:14:03][350536258755999][431 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 18:14:03][350536258755999][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 18:14:03][350536258755999][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 18:14:03][350536258755999][556 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31753 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 525\nsuccessfulTxPacketsPerSecond: 8.126838872183672\nretriedTxPackets: 62\nretriedTxPacketsPerSecond: 1.194054123530403\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 777\nsuccessfulRxPacketsPerSecond: 5.855588783766358\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 18:14:03][350536258755999][556 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 18:14:03][350536258755999][884 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.822/202.822/202.822/0.000 ms\n [2025-08-26 18:14:03][350536258755999][884 ms][DEBUG] check_internet: online [2025-08-26 18:14:03][350536258755999][884 ms][DEBUG] rawBody.length=1148 [2025-08-26 18:14:03][350536258755999][884 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536258755999\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9878\"}'\'' -e'"" [2025-08-26 18:14:03][350536258755999][884 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:14:03][350536258755999][884 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536258755999\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9878\"}'\'' -e'"" [2025-08-26 18:14:07][350536258755999][4664 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0eb1a5e2-1484-4768-bed2-35cece456998","id":"QR_0eb1a5e2-1484-4768-bed2-35cece456998","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:14:07][350536258755999][4820 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-26 18:14:07][350536258755999][4820 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-26 18:14:07][350536258755999][4820 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:16:03][351799520154867][1 ms][INFO] === Request start === [2025-08-26 18:16:03][351799520154867][1 ms][DEBUG] START check_scloud [2025-08-26 18:16:03][351799520154867][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:16:03][351799520154867][321 ms][DEBUG] SU: done in 319 ms; outu0_a118 10344 5025 24375928 118508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:16:03][351799520154867][321 ms][DEBUG] targetPkg: running [2025-08-26 18:16:03][351799520154867][321 ms][DEBUG] END check_scloud in 320 ms [2025-08-26 18:16:03][351799520154867][321 ms][DEBUG] START check_boot_completed [2025-08-26 18:16:03][351799520154867][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:16:03][351799520154867][367 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 18:16:03][351799520154867][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:16:03][351799520154867][415 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 18:16:03][351799520154867][415 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 18:16:03][351799520154867][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 18:16:04][351799520154867][524 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31753 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1304\nsuccessfulTxPacketsPerSecond: 2.846025975923862\nretriedTxPackets: 167\nretriedTxPacketsPerSecond: 0.38361068995122666\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1554\nsuccessfulRxPacketsPerSecond: 2.8387191056390773\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 18:16:04][351799520154867][524 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 18:16:04][351799520154867][821 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=192 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 192.261/192.261/192.261/0.000 ms\n [2025-08-26 18:16:04][351799520154867][821 ms][DEBUG] check_internet: online [2025-08-26 18:16:04][351799520154867][821 ms][DEBUG] rawBody.length=1149 [2025-08-26 18:16:04][351799520154867][821 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351799520154867\",\"model\":\"SM-T638U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"N14\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2104\"}'\'' -e'"" [2025-08-26 18:16:04][351799520154867][821 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:16:04][351799520154867][821 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351799520154867\",\"model\":\"SM-T638U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"N14\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2104\"}'\'' -e'"" [2025-08-26 18:16:08][351799520154867][4898 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-26 18:16:08][351799520154867][5054 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=115 [2025-08-26 18:16:08][351799520154867][5054 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-26 18:16:08][351799520154867][5054 ms][INFO] SUCCESS response from frida (len=115) [2025-08-26 18:16:08][][0 ms][INFO] === Request start === [2025-08-26 18:16:08][][1 ms][DEBUG] START check_scloud [2025-08-26 18:16:08][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:16:09][][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 10344 5025 24498048 130240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:16:09][][306 ms][DEBUG] targetPkg: running [2025-08-26 18:16:09][][306 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 18:16:09][][306 ms][DEBUG] START check_boot_completed [2025-08-26 18:16:09][][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:16:09][][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 18:16:09][][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:16:09][][415 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 18:16:09][][415 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 18:16:09][][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 18:16:09][][572 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31753 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1304\nsuccessfulTxPacketsPerSecond: 2.846025975923862\nretriedTxPackets: 167\nretriedTxPacketsPerSecond: 0.38361068995122666\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1554\nsuccessfulRxPacketsPerSecond: 2.8387191056390773\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 18:16:09][][572 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 18:16:09][][790 ms][DEBUG] SU: done in 218 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=114 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 114.626/114.626/114.626/0.000 ms\n [2025-08-26 18:16:09][][790 ms][DEBUG] check_internet: online [2025-08-26 18:16:09][][790 ms][DEBUG] rawBody.length=1130 [2025-08-26 18:16:09][][790 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-T638U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52W102QLSP\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"N14\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8880\"}'\'' -e'"" [2025-08-26 18:16:09][][790 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:16:09][][791 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-T638U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52W102QLSP\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"N14\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8880\"}'\'' -e'"" [2025-08-26 18:16:13][][4399 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 18:16:13][][4555 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=107 [2025-08-26 18:16:13][][4555 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-08-26 18:16:13][][4555 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 18:21:04][350039934283759][1 ms][INFO] === Request start === [2025-08-26 18:21:04][350039934283759][1 ms][DEBUG] START check_scloud [2025-08-26 18:21:04][350039934283759][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:21:05][350039934283759][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 10344 5025 24619968 141316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:21:05][350039934283759][308 ms][DEBUG] targetPkg: running [2025-08-26 18:21:05][350039934283759][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-26 18:21:05][350039934283759][308 ms][DEBUG] START check_boot_completed [2025-08-26 18:21:05][350039934283759][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:21:05][350039934283759][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 18:21:05][350039934283759][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:21:05][350039934283759][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 18:21:05][350039934283759][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 18:21:05][350039934283759][402 ms][DEBUG] rawBody.length=1149 [2025-08-26 18:21:05][350039934283759][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039934283759\",\"model\":\"SM-A127M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5708\"}'\'' -e'"" [2025-08-26 18:21:05][350039934283759][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:21:05][350039934283759][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039934283759\",\"model\":\"SM-A127M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5708\"}'\'' -e'"" [2025-08-26 18:21:10][350039934283759][5479 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c48313b-6c91-46cb-a5c8-433ea07e5bb4","id":"QR_9c48313b-6c91-46cb-a5c8-433ea07e5bb4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:21:10][350039934283759][5635 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3343 [2025-08-26 18:21:10][350039934283759][5635 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-08-26 18:21:10][350039934283759][5635 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:22:03][356414813862227][0 ms][INFO] === Request start === [2025-08-26 18:22:03][356414813862227][1 ms][DEBUG] START check_scloud [2025-08-26 18:22:03][356414813862227][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:22:03][356414813862227][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 10344 5025 24783908 153196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:22:03][356414813862227][298 ms][DEBUG] targetPkg: running [2025-08-26 18:22:03][356414813862227][298 ms][DEBUG] END check_scloud in 298 ms [2025-08-26 18:22:03][356414813862227][298 ms][DEBUG] START check_boot_completed [2025-08-26 18:22:03][356414813862227][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:22:03][356414813862227][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 18:22:03][356414813862227][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:22:03][356414813862227][393 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 18:22:03][356414813862227][393 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 18:22:03][356414813862227][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 18:22:03][356414813862227][501 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31753 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1440\nsuccessfulTxPacketsPerSecond: 0.45195487097685394\nretriedTxPackets: 215\nretriedTxPacketsPerSecond: 0.15951348387418374\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1666\nsuccessfulRxPacketsPerSecond: 0.37219812903976207\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 18:22:03][356414813862227][501 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 18:22:04][356414813862227][907 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.481/202.481/202.481/0.000 ms\n [2025-08-26 18:22:04][356414813862227][907 ms][DEBUG] check_internet: online [2025-08-26 18:22:04][356414813862227][908 ms][DEBUG] rawBody.length=1148 [2025-08-26 18:22:04][356414813862227][908 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414813862227\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6112\"}'\'' -e'"" [2025-08-26 18:22:04][356414813862227][908 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:22:04][356414813862227][908 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414813862227\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6112\"}'\'' -e'"" [2025-08-26 18:22:08][356414813862227][4719 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_47bf5119-266e-4ffe-86c6-0625136aa3d4","id":"QR_47bf5119-266e-4ffe-86c6-0625136aa3d4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:22:08][356414813862227][4875 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3343 [2025-08-26 18:22:08][356414813862227][4875 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-26 18:22:08][356414813862227][4875 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:23:04][352549933610172][1 ms][INFO] === Request start === [2025-08-26 18:23:04][352549933610172][1 ms][DEBUG] START check_scloud [2025-08-26 18:23:04][352549933610172][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:23:04][352549933610172][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 10344 5025 24910088 164096 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:23:04][352549933610172][300 ms][DEBUG] targetPkg: running [2025-08-26 18:23:04][352549933610172][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-26 18:23:04][352549933610172][300 ms][DEBUG] START check_boot_completed [2025-08-26 18:23:04][352549933610172][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:23:04][352549933610172][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 18:23:04][352549933610172][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:23:04][352549933610172][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 18:23:04][352549933610172][394 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 18:23:04][352549933610172][394 ms][DEBUG] rawBody.length=1148 [2025-08-26 18:23:04][352549933610172][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549933610172\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7284\"}'\'' -e'"" [2025-08-26 18:23:04][352549933610172][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:23:04][352549933610172][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549933610172\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7284\"}'\'' -e'"" [2025-08-26 18:23:08][352549933610172][4784 ms][DEBUG] proc_open done in 4389 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 18:23:08][352549933610172][4784 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-26 18:23:08][352549933610172][4784 ms][WARN] Detected error: Process with pid 10344 either refused to load frida-agent, or terminated during injectionProcess with pid 10344 either refused to load frida-agent, or terminated during injection\r\n [2025-08-26 18:23:08][352549933610172][4784 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-08-26 18:23:09][352549933610172][5035 ms][DEBUG] SU: done in 251 ms; outsystem 5445 5025 12694072 253144 ep_poll 0 S system_server\n [2025-08-26 18:23:09][352549933610172][5035 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 18:23:09][352549933610172][5190 ms][DEBUG] SU: done in 155 ms; out [2025-08-26 18:23:09][352549933610172][5190 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 18:23:09][352549933610172][5190 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 18:23:09][352549933610172][5330 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 18:23:09][352549933610172][5330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 18:23:09][352549933610172][5502 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 18:23:11][352549933610172][7517 ms][DEBUG] START check_boot_completed [2025-08-26 18:23:11][352549933610172][7517 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:23:11][352549933610172][7580 ms][DEBUG] ADB: done in 63 ms; out [2025-08-26 18:23:11][352549933610172][7580 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:23:11][352549933610172][7642 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 18:23:11][352549933610172][7642 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 18:23:14][352549933610172][10657 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 18:23:14][352549933610172][10657 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549933610172\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7284\"}'\'' -e'"" [2025-08-26 18:23:18][352549933610172][14453 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bc7ef8fc-db4a-420d-aa74-7b415307b1ea","id":"QR_bc7ef8fc-db4a-420d-aa74-7b415307b1ea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:23:18][352549933610172][14609 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-08-26 18:23:18][352549933610172][14609 ms][DEBUG] END runCmdUntilRes#2 in 3952 ms [2025-08-26 18:23:18][352549933610172][14609 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:24:03][353548756927746][0 ms][INFO] === Request start === [2025-08-26 18:24:03][353548756927746][1 ms][DEBUG] START check_scloud [2025-08-26 18:24:03][353548756927746][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:24:04][353548756927746][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 18598 5025 23552916 128328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:24:04][353548756927746][316 ms][DEBUG] targetPkg: running [2025-08-26 18:24:04][353548756927746][316 ms][DEBUG] END check_scloud in 316 ms [2025-08-26 18:24:04][353548756927746][316 ms][DEBUG] START check_boot_completed [2025-08-26 18:24:04][353548756927746][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:24:04][353548756927746][348 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 18:24:04][353548756927746][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:24:04][353548756927746][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 18:24:04][353548756927746][395 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 18:24:04][353548756927746][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 18:24:04][353548756927746][520 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31753 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1440\nsuccessfulTxPacketsPerSecond: 0.45195487097685394\nretriedTxPackets: 215\nretriedTxPacketsPerSecond: 0.15951348387418374\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1666\nsuccessfulRxPacketsPerSecond: 0.37219812903976207\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 18:24:04][353548756927746][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 18:24:04][353548756927746][832 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=160 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 160.913/160.913/160.913/0.000 ms\n [2025-08-26 18:24:04][353548756927746][832 ms][DEBUG] check_internet: online [2025-08-26 18:24:04][353548756927746][832 ms][DEBUG] rawBody.length=1148 [2025-08-26 18:24:04][353548756927746][832 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548756927746\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6948\"}'\'' -e'"" [2025-08-26 18:24:04][353548756927746][832 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:24:04][353548756927746][832 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353548756927746\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6948\"}'\'' -e'"" [2025-08-26 18:24:08][353548756927746][4659 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c2c73e94-1f1a-4fd7-a70b-8ac86f93029a","id":"QR_c2c73e94-1f1a-4fd7-a70b-8ac86f93029a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:24:08][353548756927746][4815 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3343 [2025-08-26 18:24:08][353548756927746][4815 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-26 18:24:08][353548756927746][4815 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:26:04][352766392043782][1 ms][INFO] === Request start === [2025-08-26 18:26:04][352766392043782][1 ms][DEBUG] START check_scloud [2025-08-26 18:26:04][352766392043782][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:26:05][352766392043782][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 18598 5025 23678408 138600 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:26:05][352766392043782][311 ms][DEBUG] targetPkg: running [2025-08-26 18:26:05][352766392043782][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 18:26:05][352766392043782][311 ms][DEBUG] START check_boot_completed [2025-08-26 18:26:05][352766392043782][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:26:05][352766392043782][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 18:26:05][352766392043782][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:26:05][352766392043782][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 18:26:05][352766392043782][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 18:26:05][352766392043782][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 18:26:05][352766392043782][514 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31753 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1673\nsuccessfulTxPacketsPerSecond: 0.7735261504956543\nretriedTxPackets: 262\nretriedTxPacketsPerSecond: 0.15603317198839378\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1866\nsuccessfulRxPacketsPerSecond: 0.6639709446314629\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 18:26:05][352766392043782][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 18:26:05][352766392043782][983 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.597/200.597/200.597/0.000 ms\n [2025-08-26 18:26:05][352766392043782][983 ms][DEBUG] check_internet: online [2025-08-26 18:26:05][352766392043782][983 ms][DEBUG] rawBody.length=1149 [2025-08-26 18:26:05][352766392043782][983 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352766392043782\",\"model\":\"SM-S911U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4196\"}'\'' -e'"" [2025-08-26 18:26:05][352766392043782][983 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:26:05][352766392043782][983 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352766392043782\",\"model\":\"SM-S911U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4196\"}'\'' -e'"" [2025-08-26 18:26:10][352766392043782][5638 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0b4d73f2-227e-4a58-b720-8900dedce99c","id":"QR_0b4d73f2-227e-4a58-b720-8900dedce99c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:26:10][352766392043782][5794 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-08-26 18:26:10][352766392043782][5794 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-08-26 18:26:10][352766392043782][5794 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:29:03][350938280361327][1 ms][INFO] === Request start === [2025-08-26 18:29:03][350938280361327][1 ms][DEBUG] START check_scloud [2025-08-26 18:29:03][350938280361327][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:29:03][350938280361327][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 18598 5025 23841452 150836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:29:03][350938280361327][263 ms][DEBUG] targetPkg: running [2025-08-26 18:29:03][350938280361327][263 ms][DEBUG] END check_scloud in 262 ms [2025-08-26 18:29:03][350938280361327][263 ms][DEBUG] START check_boot_completed [2025-08-26 18:29:03][350938280361327][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:29:03][350938280361327][341 ms][DEBUG] ADB: done in 78 ms; out [2025-08-26 18:29:03][350938280361327][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:29:03][350938280361327][403 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 18:29:03][350938280361327][404 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 18:29:03][350938280361327][404 ms][DEBUG] rawBody.length=1148 [2025-08-26 18:29:03][350938280361327][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938280361327\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7772\"}'\'' -e'"" [2025-08-26 18:29:03][350938280361327][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:29:03][350938280361327][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938280361327\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7772\"}'\'' -e'"" [2025-08-26 18:29:07][350938280361327][4340 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ffac4842-0230-4f72-af15-603a61cb9bfe","id":"QR_ffac4842-0230-4f72-af15-603a61cb9bfe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:29:07][350938280361327][4496 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=3343 [2025-08-26 18:29:07][350938280361327][4496 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-26 18:29:07][350938280361327][4496 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:30:04][352655890167716][0 ms][INFO] === Request start === [2025-08-26 18:30:04][352655890167716][1 ms][DEBUG] START check_scloud [2025-08-26 18:30:04][352655890167716][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:30:04][352655890167716][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 18598 5025 23977872 161192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:30:04][352655890167716][301 ms][DEBUG] targetPkg: running [2025-08-26 18:30:04][352655890167716][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 18:30:04][352655890167716][301 ms][DEBUG] START check_boot_completed [2025-08-26 18:30:04][352655890167716][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:30:04][352655890167716][332 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 18:30:04][352655890167716][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:30:04][352655890167716][379 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 18:30:04][352655890167716][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 18:30:04][352655890167716][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 18:30:04][352655890167716][488 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31753 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1712\nsuccessfulTxPacketsPerSecond: 0.297987438683354\nretriedTxPackets: 272\nretriedTxPacketsPerSecond: 0.07640703555983434\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1903\nsuccessfulRxPacketsPerSecond: 0.2827060315713871\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 18:30:04][352655890167716][489 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 18:30:05][352655890167716][801 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=211 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 211.255/211.255/211.255/0.000 ms\n [2025-08-26 18:30:05][352655890167716][801 ms][DEBUG] check_internet: online [2025-08-26 18:30:05][352655890167716][801 ms][DEBUG] rawBody.length=1149 [2025-08-26 18:30:05][352655890167716][801 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352655890167716\",\"model\":\"SM-A546U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5251\"}'\'' -e'"" [2025-08-26 18:30:05][352655890167716][802 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:30:05][352655890167716][802 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352655890167716\",\"model\":\"SM-A546U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5251\"}'\'' -e'"" [2025-08-26 18:30:10][352655890167716][5847 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2a87a2aa-bb92-4bb7-8c50-2433b2ca5907","id":"QR_2a87a2aa-bb92-4bb7-8c50-2433b2ca5907","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:30:10][352655890167716][6003 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-08-26 18:30:10][352655890167716][6003 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-08-26 18:30:10][352655890167716][6003 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:35:04][350341128384223][1 ms][INFO] === Request start === [2025-08-26 18:35:04][350341128384223][1 ms][DEBUG] START check_scloud [2025-08-26 18:35:04][350341128384223][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:35:04][350341128384223][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 18598 5025 24104052 171572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:35:04][350341128384223][250 ms][DEBUG] targetPkg: running [2025-08-26 18:35:04][350341128384223][250 ms][DEBUG] END check_scloud in 249 ms [2025-08-26 18:35:04][350341128384223][250 ms][DEBUG] START check_boot_completed [2025-08-26 18:35:04][350341128384223][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:35:04][350341128384223][282 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 18:35:04][350341128384223][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:35:04][350341128384223][329 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 18:35:04][350341128384223][329 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 18:35:04][350341128384223][329 ms][DEBUG] rawBody.length=1149 [2025-08-26 18:35:04][350341128384223][329 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341128384223\",\"model\":\"SM-M135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3617\"}'\'' -e'"" [2025-08-26 18:35:04][350341128384223][329 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:35:04][350341128384223][329 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341128384223\",\"model\":\"SM-M135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3617\"}'\'' -e'"" [2025-08-26 18:35:09][350341128384223][5296 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dfd95c28-9fb4-4562-9b13-fc6e2720a428","id":"QR_dfd95c28-9fb4-4562-9b13-fc6e2720a428","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:35:09][350341128384223][5452 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-08-26 18:35:09][350341128384223][5452 ms][DEBUG] END runCmdUntilRes#1 in 5124 ms [2025-08-26 18:35:09][350341128384223][5452 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:36:05][357161670815645][0 ms][INFO] === Request start === [2025-08-26 18:36:05][357161670815645][1 ms][DEBUG] START check_scloud [2025-08-26 18:36:05][357161670815645][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:36:05][357161670815645][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 18598 5025 24238424 183400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:36:05][357161670815645][308 ms][DEBUG] targetPkg: running [2025-08-26 18:36:05][357161670815645][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-26 18:36:05][357161670815645][308 ms][DEBUG] START check_boot_completed [2025-08-26 18:36:05][357161670815645][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:36:05][357161670815645][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 18:36:05][357161670815645][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:36:05][357161670815645][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 18:36:05][357161670815645][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 18:36:05][357161670815645][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 18:36:05][357161670815645][511 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31753 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1808\nsuccessfulTxPacketsPerSecond: 0.31903332901309034\nretriedTxPackets: 296\nretriedTxPacketsPerSecond: 0.07975833225327258\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1989\nsuccessfulRxPacketsPerSecond: 0.28580069057422675\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 18:36:05][357161670815645][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 18:36:06][357161670815645][965 ms][DEBUG] SU: done in 454 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.733/201.733/201.733/0.000 ms\n [2025-08-26 18:36:06][357161670815645][965 ms][DEBUG] check_internet: online [2025-08-26 18:36:06][357161670815645][965 ms][DEBUG] rawBody.length=1149 [2025-08-26 18:36:06][357161670815645][965 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357161670815645\",\"model\":\"SM-A136U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5157\"}'\'' -e'"" [2025-08-26 18:36:06][357161670815645][965 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:36:06][357161670815645][965 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357161670815645\",\"model\":\"SM-A136U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5157\"}'\'' -e'"" [2025-08-26 18:36:11][357161670815645][6040 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_92fa44ec-4771-42e8-ae92-9d4ed57ae9e8","id":"QR_92fa44ec-4771-42e8-ae92-9d4ed57ae9e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:36:11][357161670815645][6197 ms][DEBUG] proc_open done in 5231 ms; code=255; res.len=3343 [2025-08-26 18:36:11][357161670815645][6197 ms][DEBUG] END runCmdUntilRes#1 in 5231 ms [2025-08-26 18:36:11][357161670815645][6197 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:37:04][351326801117965][1 ms][INFO] === Request start === [2025-08-26 18:37:04][351326801117965][1 ms][DEBUG] START check_scloud [2025-08-26 18:37:04][351326801117965][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:37:05][351326801117965][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 18598 5025 24397244 194252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:37:05][351326801117965][306 ms][DEBUG] targetPkg: running [2025-08-26 18:37:05][351326801117965][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-26 18:37:05][351326801117965][306 ms][DEBUG] START check_boot_completed [2025-08-26 18:37:05][351326801117965][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:37:05][351326801117965][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 18:37:05][351326801117965][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:37:05][351326801117965][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 18:37:05][351326801117965][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 18:37:05][351326801117965][400 ms][DEBUG] rawBody.length=1149 [2025-08-26 18:37:05][351326801117965][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351326801117965\",\"model\":\"SM-A336M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5237\"}'\'' -e'"" [2025-08-26 18:37:05][351326801117965][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:37:05][351326801117965][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351326801117965\",\"model\":\"SM-A336M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5237\"}'\'' -e'"" [2025-08-26 18:37:09][351326801117965][5086 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5152bf7f-b1f6-4961-a51b-43e7fbacb3cf","id":"QR_5152bf7f-b1f6-4961-a51b-43e7fbacb3cf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:37:10][351326801117965][5242 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3343 [2025-08-26 18:37:10][351326801117965][5242 ms][DEBUG] END runCmdUntilRes#1 in 4843 ms [2025-08-26 18:37:10][351326801117965][5242 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:41:04][357651712500932][1 ms][INFO] === Request start === [2025-08-26 18:41:04][357651712500932][1 ms][DEBUG] START check_scloud [2025-08-26 18:41:04][357651712500932][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:41:04][357651712500932][286 ms][DEBUG] SU: done in 284 ms; outu0_a118 18598 5025 24502816 196360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:41:04][357651712500932][286 ms][DEBUG] targetPkg: running [2025-08-26 18:41:04][357651712500932][286 ms][DEBUG] END check_scloud in 285 ms [2025-08-26 18:41:04][357651712500932][286 ms][DEBUG] START check_boot_completed [2025-08-26 18:41:04][357651712500932][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:41:04][357651712500932][317 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 18:41:04][357651712500932][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:41:04][357651712500932][364 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 18:41:04][357651712500932][364 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 18:41:04][357651712500932][364 ms][DEBUG] rawBody.length=1149 [2025-08-26 18:41:04][357651712500932][364 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651712500932\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8698\"}'\'' -e'"" [2025-08-26 18:41:04][357651712500932][364 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:41:04][357651712500932][364 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651712500932\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8698\"}'\'' -e'"" [2025-08-26 18:41:10][357651712500932][5831 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7fe7fccf-0f3f-4fd5-acbb-2c0524b21ee7","id":"QR_7fe7fccf-0f3f-4fd5-acbb-2c0524b21ee7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:41:10][357651712500932][5987 ms][DEBUG] proc_open done in 5623 ms; code=255; res.len=3343 [2025-08-26 18:41:10][357651712500932][5987 ms][DEBUG] END runCmdUntilRes#1 in 5623 ms [2025-08-26 18:41:10][357651712500932][5987 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:41:15][356467783678841][0 ms][INFO] === Request start === [2025-08-26 18:41:15][356467783678841][0 ms][DEBUG] START check_scloud [2025-08-26 18:41:15][356467783678841][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:41:15][356467783678841][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 18598 5025 24693416 196316 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:41:15][356467783678841][302 ms][DEBUG] targetPkg: running [2025-08-26 18:41:15][356467783678841][302 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 18:41:15][356467783678841][302 ms][DEBUG] START check_boot_completed [2025-08-26 18:41:15][356467783678841][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:41:15][356467783678841][349 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 18:41:15][356467783678841][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:41:15][356467783678841][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 18:41:15][356467783678841][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 18:41:15][356467783678841][412 ms][DEBUG] rawBody.length=1149 [2025-08-26 18:41:15][356467783678841][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356467783678841\",\"model\":\"SM-X616B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9429\"}'\'' -e'"" [2025-08-26 18:41:15][356467783678841][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:41:15][356467783678841][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356467783678841\",\"model\":\"SM-X616B\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9429\"}'\'' -e'"" [2025-08-26 18:41:21][356467783678841][5863 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_377dfc7f-8471-4dd2-921f-6e2c27c2c2f1","id":"QR_377dfc7f-8471-4dd2-921f-6e2c27c2c2f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:41:21][356467783678841][6019 ms][DEBUG] proc_open done in 5607 ms; code=255; res.len=3343 [2025-08-26 18:41:21][356467783678841][6019 ms][DEBUG] END runCmdUntilRes#1 in 5607 ms [2025-08-26 18:41:21][356467783678841][6019 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:41:27][357980446956882][0 ms][INFO] === Request start === [2025-08-26 18:41:27][357980446956882][1 ms][DEBUG] START check_scloud [2025-08-26 18:41:27][357980446956882][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:41:27][357980446956882][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 18598 5025 24826564 207948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:41:27][357980446956882][304 ms][DEBUG] targetPkg: running [2025-08-26 18:41:27][357980446956882][304 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 18:41:27][357980446956882][304 ms][DEBUG] START check_boot_completed [2025-08-26 18:41:27][357980446956882][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:41:27][357980446956882][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 18:41:27][357980446956882][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:41:27][357980446956882][414 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 18:41:27][357980446956882][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 18:41:27][357980446956882][414 ms][DEBUG] rawBody.length=1149 [2025-08-26 18:41:27][357980446956882][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980446956882\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8461\"}'\'' -e'"" [2025-08-26 18:41:27][357980446956882][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:41:27][357980446956882][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980446956882\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8461\"}'\'' -e'"" [2025-08-26 18:41:32][357980446956882][5522 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb236f51-da1d-4b32-9106-af61b1c0817a","id":"QR_cb236f51-da1d-4b32-9106-af61b1c0817a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:41:32][357980446956882][5678 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-08-26 18:41:32][357980446956882][5678 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-08-26 18:41:32][357980446956882][5678 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:42:03][351123965076925][0 ms][INFO] === Request start === [2025-08-26 18:42:03][351123965076925][1 ms][DEBUG] START check_scloud [2025-08-26 18:42:03][351123965076925][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:42:03][351123965076925][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 18598 5025 24962952 203576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:42:03][351123965076925][261 ms][DEBUG] targetPkg: running [2025-08-26 18:42:03][351123965076925][261 ms][DEBUG] END check_scloud in 260 ms [2025-08-26 18:42:03][351123965076925][261 ms][DEBUG] START check_boot_completed [2025-08-26 18:42:03][351123965076925][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:42:03][351123965076925][308 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 18:42:03][351123965076925][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:42:03][351123965076925][355 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 18:42:03][351123965076925][355 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 18:42:03][351123965076925][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 18:42:03][351123965076925][479 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31753 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1948\nsuccessfulTxPacketsPerSecond: 0.1896051751059684\nretriedTxPackets: 330\nretriedTxPacketsPerSecond: 0.06691947356680723\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2119\nsuccessfulRxPacketsPerSecond: 0.16729868391703473\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 18:42:03][351123965076925][480 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 18:42:03][351123965076925][792 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=193 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 193.336/193.336/193.336/0.000 ms\n [2025-08-26 18:42:03][351123965076925][792 ms][DEBUG] check_internet: online [2025-08-26 18:42:03][351123965076925][792 ms][DEBUG] rawBody.length=1148 [2025-08-26 18:42:03][351123965076925][792 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123965076925\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9475\"}'\'' -e'"" [2025-08-26 18:42:03][351123965076925][792 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:42:03][351123965076925][792 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123965076925\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9475\"}'\'' -e'"" [2025-08-26 18:42:12][351123965076925][9087 ms][DEBUG] proc_open done in 8295 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 18:42:12][351123965076925][9087 ms][DEBUG] END runCmdUntilRes#1 in 8295 ms [2025-08-26 18:42:12][351123965076925][9087 ms][WARN] Detected error: Process with pid 18598 either refused to load frida-agent, or terminated during injectionProcess with pid 18598 either refused to load frida-agent, or terminated during injection\r\n [2025-08-26 18:42:12][351123965076925][9087 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-08-26 18:42:12][351123965076925][9477 ms][DEBUG] SU: done in 390 ms; out [2025-08-26 18:42:12][351123965076925][9477 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 18:42:12][351123965076925][9821 ms][DEBUG] SU: done in 343 ms; out [2025-08-26 18:42:12][351123965076925][9821 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 18:42:12][351123965076925][9821 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 18:42:13][351123965076925][10180 ms][DEBUG] SU: done in 359 ms; out [2025-08-26 18:42:13][351123965076925][10180 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 18:42:13][351123965076925][10446 ms][DEBUG] SU: done in 265 ms; out [2025-08-26 18:42:15][351123965076925][12461 ms][DEBUG] START check_boot_completed [2025-08-26 18:42:15][351123965076925][12461 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:42:15][351123965076925][12508 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 18:42:15][351123965076925][12508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:42:15][351123965076925][12570 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 18:42:15][351123965076925][12571 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 18:42:18][351123965076925][15585 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 18:42:18][351123965076925][15585 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123965076925\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9475\"}'\'' -e'"" [2025-08-26 18:42:20][351123965076925][17366 ms][DEBUG] proc_open done in 1781 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-26 18:42:20][351123965076925][17366 ms][DEBUG] END runCmdUntilRes#2 in 1781 ms [2025-08-26 18:42:20][351123965076925][17366 ms][WARN] Detected error 2; Reboot the device [2025-08-26 18:42:20][351123965076925][17366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-08-26 18:42:20][351123965076925][17632 ms][DEBUG] SU: done in 265 ms; outsystem 21035 20703 7497300 154272 binder_ioctl 0 S system_server\n [2025-08-26 18:42:20][351123965076925][17632 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-26 18:42:21][351123965076925][18366 ms][DEBUG] SU: done in 734 ms; out [2025-08-26 18:43:03][351123965076925][0 ms][INFO] === Request start === [2025-08-26 18:43:03][351123965076925][0 ms][DEBUG] START check_scloud [2025-08-26 18:43:03][351123965076925][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:43:03][351123965076925][28 ms][DEBUG] SU: done in 28 ms; out [2025-08-26 18:43:03][351123965076925][28 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-08-26 18:43:03][351123965076925][59 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-08-26 18:43:03][351123965076925][59 ms][WARN] check_devices: no device [2025-08-26 18:43:03][351123965076925][59 ms][WARN] check_devices: no device [2025-08-26 18:43:03][351123965076925][59 ms][DEBUG] END check_scloud in 59 ms [2025-08-26 18:43:07][352060480550407][1 ms][INFO] === Request start === [2025-08-26 18:43:07][352060480550407][1 ms][DEBUG] START check_scloud [2025-08-26 18:43:07][352060480550407][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:43:07][352060480550407][40 ms][DEBUG] SU: done in 39 ms; out [2025-08-26 18:43:07][352060480550407][40 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-08-26 18:43:07][352060480550407][71 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-08-26 18:43:07][352060480550407][71 ms][WARN] check_devices: no device [2025-08-26 18:43:07][352060480550407][71 ms][WARN] check_devices: no device [2025-08-26 18:43:07][352060480550407][71 ms][DEBUG] END check_scloud in 70 ms [2025-08-26 18:43:12][351823090607391][0 ms][INFO] === Request start === [2025-08-26 18:43:12][351823090607391][1 ms][DEBUG] START check_scloud [2025-08-26 18:43:12][351823090607391][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:43:12][351823090607391][45 ms][DEBUG] SU: done in 44 ms; out [2025-08-26 18:43:12][351823090607391][45 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-08-26 18:43:12][351823090607391][76 ms][DEBUG] ADB: done in 31 ms; outList of devices attached\n\n [2025-08-26 18:43:12][351823090607391][76 ms][WARN] check_devices: no device [2025-08-26 18:43:12][351823090607391][76 ms][WARN] check_devices: no device [2025-08-26 18:43:12][351823090607391][76 ms][DEBUG] END check_scloud in 76 ms [2025-08-26 18:43:15][350396206647982][0 ms][INFO] === Request start === [2025-08-26 18:43:15][350396206647982][1 ms][DEBUG] START check_scloud [2025-08-26 18:43:15][350396206647982][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:43:15][350396206647982][49 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 18:43:15][350396206647982][49 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-08-26 18:43:16][350396206647982][127 ms][DEBUG] ADB: done in 78 ms; outList of devices attached\n\n [2025-08-26 18:43:16][350396206647982][127 ms][WARN] check_devices: no device [2025-08-26 18:43:16][350396206647982][127 ms][WARN] check_devices: no device [2025-08-26 18:43:16][350396206647982][127 ms][DEBUG] END check_scloud in 126 ms [2025-08-26 18:43:21][350894710052012][0 ms][INFO] === Request start === [2025-08-26 18:43:21][350894710052012][1 ms][DEBUG] START check_scloud [2025-08-26 18:43:21][350894710052012][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:43:21][350894710052012][461 ms][DEBUG] SU: done in 461 ms; out [2025-08-26 18:43:21][350894710052012][462 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-08-26 18:43:21][350894710052012][508 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-08-26 18:43:21][350894710052012][508 ms][DEBUG] check_devices: device found [2025-08-26 18:43:21][350894710052012][508 ms][WARN] targetPkg: not running, restarting [2025-08-26 18:43:21][350894710052012][508 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 18:43:21][350894710052012][649 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 18:43:21][350894710052012][649 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 18:43:22][350894710052012][946 ms][DEBUG] SU: done in 297 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 18:43:24][350894710052012][2961 ms][DEBUG] END check_scloud in 2960 ms [2025-08-26 18:43:24][350894710052012][2961 ms][DEBUG] START check_boot_completed [2025-08-26 18:43:24][350894710052012][2961 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:43:24][350894710052012][3008 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 18:43:24][350894710052012][3008 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:43:24][350894710052012][3054 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 18:43:24][350894710052012][3054 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 18:43:24][350894710052012][3054 ms][DEBUG] rawBody.length=1158 [2025-08-26 18:43:24][350894710052012][3054 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350894710052012\",\"model\":\"SM-T830\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52M419TK4K\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"BTU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6709\"}'\'' -e'"" [2025-08-26 18:43:24][350894710052012][3055 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:43:24][350894710052012][3055 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350894710052012\",\"model\":\"SM-T830\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52M419TK4K\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"BTU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6709\"}'\'' -e'"" [2025-08-26 18:43:36][350894710052012][15059 ms][DEBUG] proc_open done in 12004 ms (timeout); code=0; out.len=0 err.len=11 [2025-08-26 18:43:36][350894710052012][15059 ms][DEBUG] END runCmdUntilRes#1 in 12005 ms [2025-08-26 18:43:36][350894710052012][15059 ms][ERROR] NO RESULT; code=124 out errtimeout 12s [2025-08-26 18:44:03][351123965076925][0 ms][INFO] === Request start === [2025-08-26 18:44:03][351123965076925][1 ms][DEBUG] START check_scloud [2025-08-26 18:44:03][351123965076925][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:44:03][351123965076925][416 ms][DEBUG] SU: done in 415 ms; out [2025-08-26 18:44:03][351123965076925][416 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-08-26 18:44:04][351123965076925][463 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-08-26 18:44:04][351123965076925][463 ms][DEBUG] check_devices: device found [2025-08-26 18:44:04][351123965076925][463 ms][WARN] targetPkg: not running, restarting [2025-08-26 18:44:04][351123965076925][463 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 18:44:04][351123965076925][604 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 18:44:04][351123965076925][604 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 18:44:04][351123965076925][901 ms][DEBUG] SU: done in 297 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 18:44:06][351123965076925][2916 ms][DEBUG] END check_scloud in 2915 ms [2025-08-26 18:44:06][351123965076925][2916 ms][DEBUG] START check_boot_completed [2025-08-26 18:44:06][351123965076925][2916 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:44:06][351123965076925][2963 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 18:44:06][351123965076925][2963 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:44:06][351123965076925][3056 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 18:44:06][351123965076925][3056 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-26 18:44:06][351123965076925][3056 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 18:44:06][351123965076925][3259 ms][DEBUG] SU: done in 203 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30494 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 93\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 13\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 75\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 18:44:06][351123965076925][3259 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 18:44:07][351123965076925][3759 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=108 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 108.086/108.086/108.086/0.000 ms\n [2025-08-26 18:44:07][351123965076925][3759 ms][DEBUG] check_internet: online [2025-08-26 18:44:07][351123965076925][3759 ms][DEBUG] rawBody.length=1148 [2025-08-26 18:44:07][351123965076925][3760 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123965076925\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1334\"}'\'' -e'"" [2025-08-26 18:44:07][351123965076925][3760 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:44:07][351123965076925][3760 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123965076925\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1334\"}'\'' -e'"" [2025-08-26 18:44:14][351123965076925][10664 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1493ada6-6921-4801-8868-966763745ffe","id":"QR_1493ada6-6921-4801-8868-966763745ffe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:44:14][351123965076925][10820 ms][DEBUG] proc_open done in 7060 ms; code=255; res.len=3343 [2025-08-26 18:44:14][351123965076925][10820 ms][DEBUG] END runCmdUntilRes#1 in 7060 ms [2025-08-26 18:44:14][351123965076925][10820 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:44:16][352060480550407][0 ms][INFO] === Request start === [2025-08-26 18:44:16][352060480550407][1 ms][DEBUG] START check_scloud [2025-08-26 18:44:16][352060480550407][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:44:17][352060480550407][331 ms][DEBUG] SU: done in 330 ms; outu0_a118 11697 4974 23890008 108232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:44:17][352060480550407][331 ms][DEBUG] targetPkg: running [2025-08-26 18:44:17][352060480550407][331 ms][DEBUG] END check_scloud in 331 ms [2025-08-26 18:44:17][352060480550407][331 ms][DEBUG] START check_boot_completed [2025-08-26 18:44:17][352060480550407][331 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:44:17][352060480550407][378 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 18:44:17][352060480550407][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:44:17][352060480550407][472 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 18:44:17][352060480550407][472 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 18:44:17][352060480550407][472 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 18:44:17][352060480550407][612 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30494 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 533\nsuccessfulTxPacketsPerSecond: 16.47838597841002\nretriedTxPackets: 85\nretriedTxPacketsPerSecond: 2.6964631601034577\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 752\nsuccessfulRxPacketsPerSecond: 25.354243880417236\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 18:44:17][352060480550407][612 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 18:44:17][352060480550407][1097 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.491/199.491/199.491/0.000 ms\n [2025-08-26 18:44:17][352060480550407][1097 ms][DEBUG] check_internet: online [2025-08-26 18:44:17][352060480550407][1097 ms][DEBUG] rawBody.length=1148 [2025-08-26 18:44:17][352060480550407][1097 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060480550407\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6231\"}'\'' -e'"" [2025-08-26 18:44:17][352060480550407][1097 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:44:17][352060480550407][1097 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060480550407\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6231\"}'\'' -e'"" [2025-08-26 18:44:22][352060480550407][5611 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b1454607-8311-4139-bd3e-78936027576d","id":"QR_b1454607-8311-4139-bd3e-78936027576d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:44:22][352060480550407][5767 ms][DEBUG] proc_open done in 4670 ms; code=255; res.len=3343 [2025-08-26 18:44:22][352060480550407][5767 ms][DEBUG] END runCmdUntilRes#1 in 4670 ms [2025-08-26 18:44:22][352060480550407][5767 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:44:26][351823090607391][0 ms][INFO] === Request start === [2025-08-26 18:44:26][351823090607391][1 ms][DEBUG] START check_scloud [2025-08-26 18:44:26][351823090607391][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:44:26][351823090607391][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 11697 4974 24072364 110388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:44:26][351823090607391][317 ms][DEBUG] targetPkg: running [2025-08-26 18:44:26][351823090607391][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-26 18:44:26][351823090607391][317 ms][DEBUG] START check_boot_completed [2025-08-26 18:44:26][351823090607391][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:44:26][351823090607391][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 18:44:26][351823090607391][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:44:26][351823090607391][457 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 18:44:26][351823090607391][457 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 18:44:26][351823090607391][457 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 18:44:27][351823090607391][613 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30494 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 761\nsuccessfulTxPacketsPerSecond: 22.489830655295076\nretriedTxPackets: 150\nretriedTxPacketsPerSecond: 6.341124987256721\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1065\nsuccessfulRxPacketsPerSecond: 30.970388956871897\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 18:44:27][351823090607391][614 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 18:44:27][351823090607391][1020 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=233 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 233.045/233.045/233.045/0.000 ms\n [2025-08-26 18:44:27][351823090607391][1020 ms][DEBUG] check_internet: online [2025-08-26 18:44:27][351823090607391][1020 ms][DEBUG] rawBody.length=1149 [2025-08-26 18:44:27][351823090607391][1020 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351823090607391\",\"model\":\"SM-N950U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9543\"}'\'' -e'"" [2025-08-26 18:44:27][351823090607391][1020 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:44:27][351823090607391][1020 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351823090607391\",\"model\":\"SM-N950U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9543\"}'\'' -e'"" [2025-08-26 18:44:32][351823090607391][5956 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b3586eac-18b6-48ee-b168-dbb3dd86a663","id":"QR_b3586eac-18b6-48ee-b168-dbb3dd86a663","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:44:32][351823090607391][6112 ms][DEBUG] proc_open done in 5092 ms; code=255; res.len=3343 [2025-08-26 18:44:32][351823090607391][6112 ms][DEBUG] END runCmdUntilRes#1 in 5092 ms [2025-08-26 18:44:32][351823090607391][6112 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:45:03][350396206647982][0 ms][INFO] === Request start === [2025-08-26 18:45:03][350396206647982][1 ms][DEBUG] START check_scloud [2025-08-26 18:45:03][350396206647982][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:45:04][350396206647982][350 ms][DEBUG] SU: done in 349 ms; outu0_a118 11697 4974 24087448 78432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:45:04][350396206647982][350 ms][DEBUG] targetPkg: running [2025-08-26 18:45:04][350396206647982][350 ms][DEBUG] END check_scloud in 349 ms [2025-08-26 18:45:04][350396206647982][350 ms][DEBUG] START check_boot_completed [2025-08-26 18:45:04][350396206647982][350 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:45:04][350396206647982][397 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 18:45:04][350396206647982][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:45:04][350396206647982][444 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 18:45:04][350396206647982][444 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 18:45:04][350396206647982][444 ms][DEBUG] rawBody.length=1148 [2025-08-26 18:45:04][350396206647982][444 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350396206647982\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8605\"}'\'' -e'"" [2025-08-26 18:45:04][350396206647982][444 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:45:04][350396206647982][444 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350396206647982\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8605\"}'\'' -e'"" [2025-08-26 18:45:08][350396206647982][4911 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bc903923-347c-4c32-a09c-910c6c30032d","id":"QR_bc903923-347c-4c32-a09c-910c6c30032d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:45:08][350396206647982][5067 ms][DEBUG] proc_open done in 4623 ms; code=255; res.len=3343 [2025-08-26 18:45:08][350396206647982][5067 ms][DEBUG] END runCmdUntilRes#1 in 4623 ms [2025-08-26 18:45:08][350396206647982][5067 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:45:12][357452520908627][1 ms][INFO] === Request start === [2025-08-26 18:45:12][357452520908627][1 ms][DEBUG] START check_scloud [2025-08-26 18:45:12][357452520908627][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:45:12][357452520908627][331 ms][DEBUG] SU: done in 330 ms; outu0_a118 11697 4974 24213600 94928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:45:12][357452520908627][331 ms][DEBUG] targetPkg: running [2025-08-26 18:45:12][357452520908627][332 ms][DEBUG] END check_scloud in 330 ms [2025-08-26 18:45:12][357452520908627][332 ms][DEBUG] START check_boot_completed [2025-08-26 18:45:12][357452520908627][332 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:45:12][357452520908627][378 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 18:45:12][357452520908627][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:45:12][357452520908627][441 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 18:45:12][357452520908627][441 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 18:45:12][357452520908627][441 ms][DEBUG] rawBody.length=1158 [2025-08-26 18:45:12][357452520908627][441 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357452520908627\",\"model\":\"SM-T830\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52M419TK4K\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"BTU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9894\"}'\'' -e'"" [2025-08-26 18:45:12][357452520908627][441 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:45:12][357452520908627][441 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357452520908627\",\"model\":\"SM-T830\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52M419TK4K\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"BTU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9894\"}'\'' -e'"" [2025-08-26 18:45:16][357452520908627][4408 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d673fd20-d708-4df9-bb3c-f29dd7efe80e","id":"QR_d673fd20-d708-4df9-bb3c-f29dd7efe80e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:45:17][357452520908627][4565 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3343 [2025-08-26 18:45:17][357452520908627][4565 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-26 18:45:17][357452520908627][4565 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:48:03][355915850483389][1 ms][INFO] === Request start === [2025-08-26 18:48:03][355915850483389][1 ms][DEBUG] START check_scloud [2025-08-26 18:48:03][355915850483389][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:48:04][355915850483389][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 11697 4974 24344660 103124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:48:04][355915850483389][320 ms][DEBUG] targetPkg: running [2025-08-26 18:48:04][355915850483389][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-26 18:48:04][355915850483389][320 ms][DEBUG] START check_boot_completed [2025-08-26 18:48:04][355915850483389][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:48:04][355915850483389][366 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 18:48:04][355915850483389][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:48:04][355915850483389][429 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 18:48:04][355915850483389][429 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 18:48:04][355915850483389][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 18:48:04][355915850483389][571 ms][DEBUG] SU: done in 142 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30494 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 814\nsuccessfulTxPacketsPerSecond: 5.835469466422331\nretriedTxPackets: 171\nretriedTxPacketsPerSecond: 2.2237878428440894\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1111\nsuccessfulRxPacketsPerSecond: 5.458539839489503\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 18:48:04][355915850483389][571 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 18:48:04][355915850483389][898 ms][DEBUG] SU: done in 326 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.385/223.385/223.385/0.000 ms\n [2025-08-26 18:48:04][355915850483389][898 ms][DEBUG] check_internet: online [2025-08-26 18:48:04][355915850483389][898 ms][DEBUG] rawBody.length=1148 [2025-08-26 18:48:04][355915850483389][898 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355915850483389\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5007\"}'\'' -e'"" [2025-08-26 18:48:04][355915850483389][898 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:48:04][355915850483389][898 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355915850483389\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5007\"}'\'' -e'"" [2025-08-26 18:48:08][355915850483389][4959 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7a2f5bdb-5905-4698-8dac-f9986e57a147","id":"QR_7a2f5bdb-5905-4698-8dac-f9986e57a147","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:48:09][355915850483389][5115 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3343 [2025-08-26 18:48:09][355915850483389][5115 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-26 18:48:09][355915850483389][5115 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:49:03][351451341901361][0 ms][INFO] === Request start === [2025-08-26 18:49:03][351451341901361][0 ms][DEBUG] START check_scloud [2025-08-26 18:49:03][351451341901361][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:49:03][351451341901361][328 ms][DEBUG] SU: done in 328 ms; outu0_a118 11697 4974 24478904 114876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:49:03][351451341901361][328 ms][DEBUG] targetPkg: running [2025-08-26 18:49:03][351451341901361][328 ms][DEBUG] END check_scloud in 328 ms [2025-08-26 18:49:03][351451341901361][328 ms][DEBUG] START check_boot_completed [2025-08-26 18:49:03][351451341901361][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:49:03][351451341901361][375 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 18:49:03][351451341901361][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:49:03][351451341901361][453 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 18:49:03][351451341901361][453 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 18:49:03][351451341901361][453 ms][DEBUG] rawBody.length=1148 [2025-08-26 18:49:03][351451341901361][453 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351451341901361\",\"model\":\"SM-F956B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2919\"}'\'' -e'"" [2025-08-26 18:49:03][351451341901361][453 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:49:03][351451341901361][453 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351451341901361\",\"model\":\"SM-F956B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2919\"}'\'' -e'"" [2025-08-26 18:49:07][351451341901361][4140 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_57f990ec-8da6-401b-ace5-7488a27b87e3","id":"QR_57f990ec-8da6-401b-ace5-7488a27b87e3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:49:07][351451341901361][4296 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3343 [2025-08-26 18:49:07][351451341901361][4296 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-08-26 18:49:07][351451341901361][4296 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:51:04][351165706882095][1 ms][INFO] === Request start === [2025-08-26 18:51:04][351165706882095][1 ms][DEBUG] START check_scloud [2025-08-26 18:51:04][351165706882095][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:51:04][351165706882095][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 11697 4974 24639900 126304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:51:04][351165706882095][314 ms][DEBUG] targetPkg: running [2025-08-26 18:51:04][351165706882095][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-26 18:51:04][351165706882095][314 ms][DEBUG] START check_boot_completed [2025-08-26 18:51:04][351165706882095][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:51:05][351165706882095][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 18:51:05][351165706882095][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:51:05][351165706882095][439 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 18:51:05][351165706882095][439 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 18:51:05][351165706882095][439 ms][DEBUG] rawBody.length=1148 [2025-08-26 18:51:05][351165706882095][439 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351165706882095\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8731\"}'\'' -e'"" [2025-08-26 18:51:05][351165706882095][439 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:51:05][351165706882095][439 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351165706882095\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8731\"}'\'' -e'"" [2025-08-26 18:51:08][351165706882095][3844 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 18:51:08][351165706882095][4000 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=107 [2025-08-26 18:51:08][351165706882095][4001 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-08-26 18:51:08][351165706882095][4001 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 18:51:08][][0 ms][INFO] === Request start === [2025-08-26 18:51:08][][1 ms][DEBUG] START check_scloud [2025-08-26 18:51:08][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:51:09][][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 11697 4974 24790628 138100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:51:09][][311 ms][DEBUG] targetPkg: running [2025-08-26 18:51:09][][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 18:51:09][][311 ms][DEBUG] START check_boot_completed [2025-08-26 18:51:09][][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:51:09][][342 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 18:51:09][][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:51:09][][390 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 18:51:09][][390 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 18:51:09][][390 ms][DEBUG] rawBody.length=1129 [2025-08-26 18:51:09][][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCXA16J5MP\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6916\"}'\'' -e'"" [2025-08-26 18:51:09][][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:51:09][][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCXA16J5MP\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6916\"}'\'' -e'"" [2025-08-26 18:51:12][][3560 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 18:51:12][][3716 ms][DEBUG] proc_open done in 3326 ms; code=255; res.len=107 [2025-08-26 18:51:12][][3716 ms][DEBUG] END runCmdUntilRes#1 in 3326 ms [2025-08-26 18:51:12][][3716 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 18:51:14][351165706882095][0 ms][INFO] === Request start === [2025-08-26 18:51:14][351165706882095][1 ms][DEBUG] START check_scloud [2025-08-26 18:51:14][351165706882095][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:51:15][351165706882095][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 11697 4974 24947564 148792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:51:15][351165706882095][310 ms][DEBUG] targetPkg: running [2025-08-26 18:51:15][351165706882095][310 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 18:51:15][351165706882095][310 ms][DEBUG] START check_boot_completed [2025-08-26 18:51:15][351165706882095][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:51:15][351165706882095][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 18:51:15][351165706882095][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:51:15][351165706882095][389 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 18:51:15][351165706882095][389 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 18:51:15][351165706882095][390 ms][DEBUG] rawBody.length=1149 [2025-08-26 18:51:15][351165706882095][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351165706882095\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7610\"}'\'' -e'"" [2025-08-26 18:51:15][351165706882095][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:51:15][351165706882095][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351165706882095\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7610\"}'\'' -e'"" [2025-08-26 18:51:20][351165706882095][5356 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_afdd3516-0949-4d2d-bc19-86a57baf334b","id":"QR_afdd3516-0949-4d2d-bc19-86a57baf334b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:51:20][351165706882095][5512 ms][DEBUG] proc_open done in 5122 ms; code=255; res.len=3343 [2025-08-26 18:51:20][351165706882095][5512 ms][DEBUG] END runCmdUntilRes#1 in 5122 ms [2025-08-26 18:51:20][351165706882095][5512 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:53:03][352923542599433][1 ms][INFO] === Request start === [2025-08-26 18:53:03][352923542599433][1 ms][DEBUG] START check_scloud [2025-08-26 18:53:03][352923542599433][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:53:03][352923542599433][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 11697 4974 25020300 160812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:53:03][352923542599433][306 ms][DEBUG] targetPkg: running [2025-08-26 18:53:03][352923542599433][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-26 18:53:03][352923542599433][306 ms][DEBUG] START check_boot_completed [2025-08-26 18:53:03][352923542599433][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:53:03][352923542599433][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 18:53:03][352923542599433][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:53:03][352923542599433][416 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 18:53:03][352923542599433][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 18:53:03][352923542599433][416 ms][DEBUG] rawBody.length=1148 [2025-08-26 18:53:03][352923542599433][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923542599433\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4285\"}'\'' -e'"" [2025-08-26 18:53:03][352923542599433][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:53:03][352923542599433][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923542599433\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4285\"}'\'' -e'"" [2025-08-26 18:53:07][352923542599433][4336 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c5769168-d417-4640-948f-0623bac1b912","id":"QR_c5769168-d417-4640-948f-0623bac1b912","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:53:07][352923542599433][4492 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-26 18:53:07][352923542599433][4492 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-26 18:53:07][352923542599433][4493 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:54:03][352610711366229][0 ms][INFO] === Request start === [2025-08-26 18:54:03][352610711366229][1 ms][DEBUG] START check_scloud [2025-08-26 18:54:03][352610711366229][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:54:04][352610711366229][305 ms][DEBUG] SU: done in 305 ms; outu0_a118 11697 4974 25132144 171992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:54:04][352610711366229][306 ms][DEBUG] targetPkg: running [2025-08-26 18:54:04][352610711366229][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-26 18:54:04][352610711366229][306 ms][DEBUG] START check_boot_completed [2025-08-26 18:54:04][352610711366229][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:54:04][352610711366229][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 18:54:04][352610711366229][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:54:04][352610711366229][415 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 18:54:04][352610711366229][415 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 18:54:04][352610711366229][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 18:54:04][352610711366229][540 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30494 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1286\nsuccessfulTxPacketsPerSecond: 0.49171885642141633\nretriedTxPackets: 295\nretriedTxPacketsPerSecond: 0.1561539611608552\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1506\nsuccessfulRxPacketsPerSecond: 0.3953685399604632\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 18:54:04][352610711366229][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 18:54:04][352610711366229][1008 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.373/201.373/201.373/0.000 ms\n [2025-08-26 18:54:04][352610711366229][1009 ms][DEBUG] check_internet: online [2025-08-26 18:54:04][352610711366229][1009 ms][DEBUG] rawBody.length=1149 [2025-08-26 18:54:04][352610711366229][1009 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352610711366229\",\"model\":\"SM-A356U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5425\"}'\'' -e'"" [2025-08-26 18:54:04][352610711366229][1009 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:54:04][352610711366229][1009 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352610711366229\",\"model\":\"SM-A356U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5425\"}'\'' -e'"" [2025-08-26 18:54:09][352610711366229][5617 ms][DEBUG] proc_open done in 4608 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 18:54:09][352610711366229][5617 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-08-26 18:54:09][352610711366229][5617 ms][WARN] Detected error: Process with pid 11697 either refused to load frida-agent, or terminated during injectionProcess with pid 11697 either refused to load frida-agent, or terminated during injection\r\n [2025-08-26 18:54:09][352610711366229][5617 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-08-26 18:54:09][352610711366229][5913 ms][DEBUG] SU: done in 296 ms; outsystem 5391 4974 12923184 252048 ep_poll 0 S system_server\n [2025-08-26 18:54:09][352610711366229][5913 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 18:54:09][352610711366229][6038 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 18:54:09][352610711366229][6039 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 18:54:09][352610711366229][6039 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 18:54:09][352610711366229][6163 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 18:54:09][352610711366229][6163 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 18:54:10][352610711366229][6335 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 18:54:12][352610711366229][8350 ms][DEBUG] START check_boot_completed [2025-08-26 18:54:12][352610711366229][8350 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:54:12][352610711366229][8381 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 18:54:12][352610711366229][8382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:54:12][352610711366229][8428 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 18:54:12][352610711366229][8428 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 18:54:15][352610711366229][11443 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 18:54:15][352610711366229][11443 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352610711366229\",\"model\":\"SM-A356U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5425\"}'\'' -e'"" [2025-08-26 18:54:20][352610711366229][16395 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_57912822-594e-4705-87f8-744d86f0c5a4","id":"QR_57912822-594e-4705-87f8-744d86f0c5a4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:54:20][352610711366229][16552 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-08-26 18:54:20][352610711366229][16552 ms][DEBUG] END runCmdUntilRes#2 in 5108 ms [2025-08-26 18:54:20][352610711366229][16552 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:55:04][358076931240053][1 ms][INFO] === Request start === [2025-08-26 18:55:04][358076931240053][1 ms][DEBUG] START check_scloud [2025-08-26 18:55:04][358076931240053][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:55:04][358076931240053][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 18782 4974 23744916 128340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:55:04][358076931240053][307 ms][DEBUG] targetPkg: running [2025-08-26 18:55:04][358076931240053][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 18:55:04][358076931240053][307 ms][DEBUG] START check_boot_completed [2025-08-26 18:55:04][358076931240053][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:55:04][358076931240053][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 18:55:04][358076931240053][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:55:04][358076931240053][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 18:55:04][358076931240053][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 18:55:04][358076931240053][385 ms][DEBUG] rawBody.length=1149 [2025-08-26 18:55:04][358076931240053][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358076931240053\",\"model\":\"SM-A336M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7317\"}'\'' -e'"" [2025-08-26 18:55:04][358076931240053][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:55:04][358076931240053][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358076931240053\",\"model\":\"SM-A336M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7317\"}'\'' -e'"" [2025-08-26 18:55:09][358076931240053][5259 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_63d2a081-7b22-4564-b6f4-480445a53cec","id":"QR_63d2a081-7b22-4564-b6f4-480445a53cec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:55:09][358076931240053][5415 ms][DEBUG] proc_open done in 5030 ms; code=255; res.len=3343 [2025-08-26 18:55:09][358076931240053][5415 ms][DEBUG] END runCmdUntilRes#1 in 5030 ms [2025-08-26 18:55:09][358076931240053][5416 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:55:13][352689821595984][0 ms][INFO] === Request start === [2025-08-26 18:55:13][352689821595984][0 ms][DEBUG] START check_scloud [2025-08-26 18:55:13][352689821595984][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:55:14][352689821595984][299 ms][DEBUG] SU: done in 299 ms; outu0_a118 18782 4974 23903836 137940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:55:14][352689821595984][299 ms][DEBUG] targetPkg: running [2025-08-26 18:55:14][352689821595984][299 ms][DEBUG] END check_scloud in 299 ms [2025-08-26 18:55:14][352689821595984][299 ms][DEBUG] START check_boot_completed [2025-08-26 18:55:14][352689821595984][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:55:14][352689821595984][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 18:55:14][352689821595984][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:55:14][352689821595984][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 18:55:14][352689821595984][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 18:55:14][352689821595984][377 ms][DEBUG] rawBody.length=1148 [2025-08-26 18:55:14][352689821595984][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352689821595984\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6524\"}'\'' -e'"" [2025-08-26 18:55:14][352689821595984][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:55:14][352689821595984][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352689821595984\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6524\"}'\'' -e'"" [2025-08-26 18:55:17][352689821595984][3783 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 18:55:17][352689821595984][3939 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=107 [2025-08-26 18:55:17][352689821595984][3939 ms][DEBUG] END runCmdUntilRes#1 in 3562 ms [2025-08-26 18:55:17][352689821595984][3939 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 18:55:18][][0 ms][INFO] === Request start === [2025-08-26 18:55:18][][1 ms][DEBUG] START check_scloud [2025-08-26 18:55:18][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:55:18][][309 ms][DEBUG] SU: done in 309 ms; outu0_a118 18782 4974 24043292 149520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:55:18][][309 ms][DEBUG] targetPkg: running [2025-08-26 18:55:18][][309 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 18:55:18][][309 ms][DEBUG] START check_boot_completed [2025-08-26 18:55:18][][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:55:18][][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 18:55:18][][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:55:18][][450 ms][DEBUG] SU: done in 93 ms; out [2025-08-26 18:55:18][][450 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 18:55:18][][450 ms][DEBUG] rawBody.length=1129 [2025-08-26 18:55:18][][450 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW91NV0LH\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7138\"}'\'' -e'"" [2025-08-26 18:55:18][][450 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:55:18][][450 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW91NV0LH\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7138\"}'\'' -e'"" [2025-08-26 18:55:21][][3714 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 18:55:22][][3871 ms][DEBUG] proc_open done in 3421 ms; code=255; res.len=107 [2025-08-26 18:55:22][][3871 ms][DEBUG] END runCmdUntilRes#1 in 3421 ms [2025-08-26 18:55:22][][3871 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 18:55:23][351554744188161][0 ms][INFO] === Request start === [2025-08-26 18:55:23][351554744188161][0 ms][DEBUG] START check_scloud [2025-08-26 18:55:23][351554744188161][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:55:24][351554744188161][275 ms][DEBUG] SU: done in 275 ms; outu0_a118 18782 4974 24181668 160432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:55:24][351554744188161][275 ms][DEBUG] targetPkg: running [2025-08-26 18:55:24][351554744188161][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-26 18:55:24][351554744188161][276 ms][DEBUG] START check_boot_completed [2025-08-26 18:55:24][351554744188161][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:55:24][351554744188161][306 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 18:55:24][351554744188161][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:55:24][351554744188161][369 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 18:55:24][351554744188161][369 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 18:55:24][351554744188161][369 ms][DEBUG] rawBody.length=1148 [2025-08-26 18:55:24][351554744188161][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351554744188161\",\"model\":\"SM-A326B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4399\"}'\'' -e'"" [2025-08-26 18:55:24][351554744188161][369 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:55:24][351554744188161][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351554744188161\",\"model\":\"SM-A326B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4399\"}'\'' -e'"" [2025-08-26 18:55:27][351554744188161][3915 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b892c62a-53ff-47c1-8953-4c1bc4bfaa60","id":"QR_b892c62a-53ff-47c1-8953-4c1bc4bfaa60","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:55:27][351554744188161][4071 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=3343 [2025-08-26 18:55:27][351554744188161][4071 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-26 18:55:27][351554744188161][4071 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:56:03][351162211391183][0 ms][INFO] === Request start === [2025-08-26 18:56:03][351162211391183][1 ms][DEBUG] START check_scloud [2025-08-26 18:56:03][351162211391183][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:56:04][351162211391183][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 18782 4974 24289244 172548 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:56:04][351162211391183][299 ms][DEBUG] targetPkg: running [2025-08-26 18:56:04][351162211391183][299 ms][DEBUG] END check_scloud in 299 ms [2025-08-26 18:56:04][351162211391183][299 ms][DEBUG] START check_boot_completed [2025-08-26 18:56:04][351162211391183][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:56:04][351162211391183][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 18:56:04][351162211391183][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:56:04][351162211391183][394 ms][DEBUG] SU: done in 49 ms; out [2025-08-26 18:56:04][351162211391183][395 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 18:56:04][351162211391183][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 18:56:04][351162211391183][502 ms][DEBUG] SU: done in 107 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30494 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1286\nsuccessfulTxPacketsPerSecond: 0.49171885642141633\nretriedTxPackets: 295\nretriedTxPacketsPerSecond: 0.1561539611608552\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1506\nsuccessfulRxPacketsPerSecond: 0.3953685399604632\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 18:56:04][351162211391183][502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 18:56:04][351162211391183][955 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.957/201.957/201.957/0.000 ms\n [2025-08-26 18:56:04][351162211391183][955 ms][DEBUG] check_internet: online [2025-08-26 18:56:04][351162211391183][955 ms][DEBUG] rawBody.length=1150 [2025-08-26 18:56:04][351162211391183][955 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351162211391183\",\"model\":\"SM-S326DL\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9810\"}'\'' -e'"" [2025-08-26 18:56:04][351162211391183][955 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:56:04][351162211391183][955 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351162211391183\",\"model\":\"SM-S326DL\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9810\"}'\'' -e'"" [2025-08-26 18:56:09][351162211391183][5391 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f552873f-1ef3-4330-ba4e-f2db63514b65","id":"QR_f552873f-1ef3-4330-ba4e-f2db63514b65","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:56:09][351162211391183][5548 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-08-26 18:56:09][351162211391183][5548 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-08-26 18:56:09][351162211391183][5548 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:58:03][354068193520425][1 ms][INFO] === Request start === [2025-08-26 18:58:03][354068193520425][1 ms][DEBUG] START check_scloud [2025-08-26 18:58:03][354068193520425][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:58:03][354068193520425][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 18782 4974 24425488 183784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:58:03][354068193520425][310 ms][DEBUG] targetPkg: running [2025-08-26 18:58:03][354068193520425][310 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 18:58:03][354068193520425][310 ms][DEBUG] START check_boot_completed [2025-08-26 18:58:03][354068193520425][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:58:03][354068193520425][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 18:58:03][354068193520425][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:58:03][354068193520425][388 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 18:58:03][354068193520425][388 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 18:58:03][354068193520425][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 18:58:03][354068193520425][513 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30494 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1286\nsuccessfulTxPacketsPerSecond: 0.49171885642141633\nretriedTxPackets: 295\nretriedTxPacketsPerSecond: 0.1561539611608552\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1506\nsuccessfulRxPacketsPerSecond: 0.3953685399604632\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 18:58:03][354068193520425][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 18:58:03][354068193520425][810 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=156 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 156.517/156.517/156.517/0.000 ms\n [2025-08-26 18:58:03][354068193520425][810 ms][DEBUG] check_internet: online [2025-08-26 18:58:03][354068193520425][810 ms][DEBUG] rawBody.length=1148 [2025-08-26 18:58:03][354068193520425][810 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068193520425\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8587\"}'\'' -e'"" [2025-08-26 18:58:03][354068193520425][810 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:58:03][354068193520425][810 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068193520425\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8587\"}'\'' -e'"" [2025-08-26 18:58:08][354068193520425][5449 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4c673596-f589-45e5-ae57-a40f9c1a3801","id":"QR_4c673596-f589-45e5-ae57-a40f9c1a3801","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:58:08][354068193520425][5605 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-08-26 18:58:08][354068193520425][5605 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-08-26 18:58:08][354068193520425][5605 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:58:10][354747955341985][0 ms][INFO] === Request start === [2025-08-26 18:58:10][354747955341985][1 ms][DEBUG] START check_scloud [2025-08-26 18:58:10][354747955341985][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:58:10][354747955341985][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 18782 4974 24561944 195612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:58:10][354747955341985][303 ms][DEBUG] targetPkg: running [2025-08-26 18:58:10][354747955341985][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 18:58:10][354747955341985][303 ms][DEBUG] START check_boot_completed [2025-08-26 18:58:10][354747955341985][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:58:10][354747955341985][348 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 18:58:10][354747955341985][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:58:10][354747955341985][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 18:58:10][354747955341985][395 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-26 18:58:10][354747955341985][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 18:58:10][354747955341985][505 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30494 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1286\nsuccessfulTxPacketsPerSecond: 0.49171885642141633\nretriedTxPackets: 295\nretriedTxPacketsPerSecond: 0.1561539611608552\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1506\nsuccessfulRxPacketsPerSecond: 0.3953685399604632\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 18:58:10][354747955341985][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 18:58:10][354747955341985][848 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=217 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 217.810/217.810/217.810/0.000 ms\n [2025-08-26 18:58:10][354747955341985][848 ms][DEBUG] check_internet: online [2025-08-26 18:58:10][354747955341985][848 ms][DEBUG] rawBody.length=1148 [2025-08-26 18:58:10][354747955341985][848 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747955341985\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7669\"}'\'' -e'"" [2025-08-26 18:58:10][354747955341985][848 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:58:10][354747955341985][848 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747955341985\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7669\"}'\'' -e'"" [2025-08-26 18:58:14][354747955341985][4285 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_845f1c0d-d63f-4f2f-83eb-cc19df2fd438","id":"QR_845f1c0d-d63f-4f2f-83eb-cc19df2fd438","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:58:14][354747955341985][4441 ms][DEBUG] proc_open done in 3593 ms; code=255; res.len=3343 [2025-08-26 18:58:14][354747955341985][4441 ms][DEBUG] END runCmdUntilRes#1 in 3593 ms [2025-08-26 18:58:14][354747955341985][4441 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 18:59:03][359156944661674][0 ms][INFO] === Request start === [2025-08-26 18:59:03][359156944661674][1 ms][DEBUG] START check_scloud [2025-08-26 18:59:03][359156944661674][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 18:59:04][359156944661674][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 18782 4974 24698328 206724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 18:59:04][359156944661674][313 ms][DEBUG] targetPkg: running [2025-08-26 18:59:04][359156944661674][313 ms][DEBUG] END check_scloud in 313 ms [2025-08-26 18:59:04][359156944661674][313 ms][DEBUG] START check_boot_completed [2025-08-26 18:59:04][359156944661674][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 18:59:04][359156944661674][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 18:59:04][359156944661674][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 18:59:04][359156944661674][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 18:59:04][359156944661674][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 18:59:04][359156944661674][407 ms][DEBUG] rawBody.length=1148 [2025-08-26 18:59:04][359156944661674][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156944661674\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6461\"}'\'' -e'"" [2025-08-26 18:59:04][359156944661674][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 18:59:04][359156944661674][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156944661674\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6461\"}'\'' -e'"" [2025-08-26 18:59:07][359156944661674][4250 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77ffaa3f-2df4-4468-9359-3b28753b5602","id":"QR_77ffaa3f-2df4-4468-9359-3b28753b5602","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 18:59:08][359156944661674][4406 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=3343 [2025-08-26 18:59:08][359156944661674][4406 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-26 18:59:08][359156944661674][4406 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:00:32][350179384797807][0 ms][INFO] === Request start === [2025-08-26 19:00:32][350179384797807][0 ms][DEBUG] START check_scloud [2025-08-26 19:00:32][350179384797807][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:00:32][350179384797807][283 ms][DEBUG] SU: done in 283 ms; outu0_a118 18782 4974 24824380 218848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:00:32][350179384797807][283 ms][DEBUG] targetPkg: running [2025-08-26 19:00:32][350179384797807][283 ms][DEBUG] END check_scloud in 283 ms [2025-08-26 19:00:32][350179384797807][283 ms][DEBUG] START check_boot_completed [2025-08-26 19:00:32][350179384797807][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:00:32][350179384797807][314 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 19:00:32][350179384797807][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:00:32][350179384797807][361 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:00:32][350179384797807][361 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 19:00:32][350179384797807][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:00:32][350179384797807][471 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30494 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1467\nsuccessfulTxPacketsPerSecond: 0.6011671277828889\nretriedTxPackets: 349\nretriedTxPacketsPerSecond: 0.17935372873080666\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1655\nsuccessfulRxPacketsPerSecond: 0.4948834366831517\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:00:32][350179384797807][471 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:00:33][350179384797807][986 ms][DEBUG] SU: done in 516 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.673/201.673/201.673/0.000 ms\n [2025-08-26 19:00:33][350179384797807][986 ms][DEBUG] check_internet: online [2025-08-26 19:00:33][350179384797807][987 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:00:33][350179384797807][987 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350179384797807\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3901\"}'\'' -e'"" [2025-08-26 19:00:33][350179384797807][987 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:00:33][350179384797807][987 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350179384797807\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3901\"}'\'' -e'"" [2025-08-26 19:00:38][350179384797807][5938 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_02dc6f08-4aa4-42c1-ba8c-aac57d3687c7","id":"QR_02dc6f08-4aa4-42c1-ba8c-aac57d3687c7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:00:38][350179384797807][6094 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-08-26 19:00:38][350179384797807][6094 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-08-26 19:00:38][350179384797807][6095 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:04:04][351652530784647][1 ms][INFO] === Request start === [2025-08-26 19:04:04][351652530784647][1 ms][DEBUG] START check_scloud [2025-08-26 19:04:04][351652530784647][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:04:05][351652530784647][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 18782 4974 24944288 169492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:04:05][351652530784647][272 ms][DEBUG] targetPkg: running [2025-08-26 19:04:05][351652530784647][272 ms][DEBUG] END check_scloud in 271 ms [2025-08-26 19:04:05][351652530784647][272 ms][DEBUG] START check_boot_completed [2025-08-26 19:04:05][351652530784647][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:04:05][351652530784647][303 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 19:04:05][351652530784647][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:04:05][351652530784647][351 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:04:05][351652530784647][351 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 19:04:05][351652530784647][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:04:05][351652530784647][476 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=30494 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1522\nsuccessfulTxPacketsPerSecond: 0.42335373128584075\nretriedTxPackets: 365\nretriedTxPacketsPerSecond: 0.12315744910133548\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1702\nsuccessfulRxPacketsPerSecond: 0.361775006735173\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:04:05][351652530784647][476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:04:05][351652530784647][757 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=171 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 171.742/171.742/171.742/0.000 ms\n [2025-08-26 19:04:05][351652530784647][757 ms][DEBUG] check_internet: online [2025-08-26 19:04:05][351652530784647][757 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:04:05][351652530784647][757 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351652530784647\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7067\"}'\'' -e'"" [2025-08-26 19:04:05][351652530784647][757 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:04:05][351652530784647][757 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351652530784647\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7067\"}'\'' -e'"" [2025-08-26 19:04:10][351652530784647][5802 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bdf352a0-78a0-40e3-8ae4-05f83a16f780","id":"QR_bdf352a0-78a0-40e3-8ae4-05f83a16f780","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:04:10][351652530784647][5958 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-08-26 19:04:10][351652530784647][5958 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-08-26 19:04:10][351652530784647][5958 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:07:04][354173246536418][1 ms][INFO] === Request start === [2025-08-26 19:07:04][354173246536418][1 ms][DEBUG] START check_scloud [2025-08-26 19:07:04][354173246536418][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:07:05][354173246536418][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 18782 4974 25082756 156944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:07:05][354173246536418][305 ms][DEBUG] targetPkg: running [2025-08-26 19:07:05][354173246536418][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 19:07:05][354173246536418][305 ms][DEBUG] START check_boot_completed [2025-08-26 19:07:05][354173246536418][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:07:05][354173246536418][335 ms][DEBUG] ADB: done in 30 ms; out [2025-08-26 19:07:05][354173246536418][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:07:05][354173246536418][382 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:07:05][354173246536418][382 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-26 19:07:05][354173246536418][382 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:07:05][354173246536418][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354173246536418\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9969\"}'\'' -e'"" [2025-08-26 19:07:05][354173246536418][382 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:07:05][354173246536418][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354173246536418\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9969\"}'\'' -e'"" [2025-08-26 19:07:09][354173246536418][4443 ms][DEBUG] proc_open done in 4061 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 19:07:09][354173246536418][4443 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-26 19:07:09][354173246536418][4443 ms][WARN] Detected error: Process with pid 18782 either refused to load frida-agent, or terminated during injectionProcess with pid 18782 either refused to load frida-agent, or terminated during injection\r\n [2025-08-26 19:07:09][354173246536418][4443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-08-26 19:07:09][354173246536418][4756 ms][DEBUG] SU: done in 312 ms; outsystem 5391 4974 13061160 218880 ep_poll 0 S system_server\nsystem 21073 1 12728952 113064 ptrace_stop 0 t system_server\n [2025-08-26 19:07:09][354173246536418][4756 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 19:07:09][354173246536418][4896 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 19:07:09][354173246536418][4897 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 19:07:09][354173246536418][4897 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 19:07:09][354173246536418][5021 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 19:07:09][354173246536418][5022 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 19:07:09][354173246536418][5193 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 19:07:11][354173246536418][7208 ms][DEBUG] START check_boot_completed [2025-08-26 19:07:11][354173246536418][7208 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:07:11][354173246536418][7255 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 19:07:11][354173246536418][7255 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:07:12][354173246536418][7318 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 19:07:12][354173246536418][7318 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 19:07:15][354173246536418][10332 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 19:07:15][354173246536418][10333 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354173246536418\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9969\"}'\'' -e'"" [2025-08-26 19:07:15][354173246536418][10801 ms][DEBUG] proc_open done in 469 ms (timeout); code=4; out.len=0 err.len=50 [2025-08-26 19:07:15][354173246536418][10802 ms][DEBUG] END runCmdUntilRes#2 in 469 ms [2025-08-26 19:07:15][354173246536418][10802 ms][ERROR] NO RESULT; code=124 outUnable to find process with name 'system_server' errUnable to find process with name 'system_server'\r\n [2025-08-26 19:07:15][354173246536418][10802 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-08-26 19:07:15][354173246536418][11068 ms][DEBUG] SU: done in 266 ms; out [2025-08-26 19:08:05][354173246536418][0 ms][INFO] === Request start === [2025-08-26 19:08:05][354173246536418][1 ms][DEBUG] START check_scloud [2025-08-26 19:08:05][354173246536418][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:08:05][354173246536418][369 ms][DEBUG] SU: done in 368 ms; out [2025-08-26 19:08:05][354173246536418][369 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-08-26 19:08:05][354173246536418][414 ms][DEBUG] ADB: done in 45 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-08-26 19:08:05][354173246536418][414 ms][DEBUG] check_devices: device found [2025-08-26 19:08:05][354173246536418][414 ms][WARN] targetPkg: not running, restarting [2025-08-26 19:08:05][354173246536418][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 19:08:05][354173246536418][540 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 19:08:05][354173246536418][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 19:08:06][354173246536418][727 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 19:08:08][354173246536418][2742 ms][DEBUG] END check_scloud in 2741 ms [2025-08-26 19:08:08][354173246536418][2742 ms][DEBUG] START check_boot_completed [2025-08-26 19:08:08][354173246536418][2742 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:08:08][354173246536418][2789 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 19:08:08][354173246536418][2789 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:08:08][354173246536418][2851 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 19:08:08][354173246536418][2851 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 19:08:08][354173246536418][2851 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:08:08][354173246536418][3023 ms][DEBUG] SU: done in 172 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 438\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 41\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 597\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:08:08][354173246536418][3024 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:08:09][354173246536418][3695 ms][DEBUG] SU: done in 671 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.577/200.577/200.577/0.000 ms\n [2025-08-26 19:08:09][354173246536418][3695 ms][DEBUG] check_internet: online [2025-08-26 19:08:09][354173246536418][3695 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:08:09][354173246536418][3695 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354173246536418\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8917\"}'\'' -e'"" [2025-08-26 19:08:09][354173246536418][3695 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:08:09][354173246536418][3695 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354173246536418\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8917\"}'\'' -e'"" [2025-08-26 19:08:14][354173246536418][9459 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7bdcf76e-9662-483f-a1c5-25c68fa423a9","id":"QR_7bdcf76e-9662-483f-a1c5-25c68fa423a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:08:14][354173246536418][9615 ms][DEBUG] proc_open done in 5920 ms; code=255; res.len=3343 [2025-08-26 19:08:14][354173246536418][9615 ms][DEBUG] END runCmdUntilRes#1 in 5920 ms [2025-08-26 19:08:14][354173246536418][9615 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:08:21][354372621022180][0 ms][INFO] === Request start === [2025-08-26 19:08:21][354372621022180][1 ms][DEBUG] START check_scloud [2025-08-26 19:08:21][354372621022180][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:08:21][354372621022180][362 ms][DEBUG] SU: done in 361 ms; outu0_a118 26380 21369 23823868 106400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:08:21][354372621022180][362 ms][DEBUG] targetPkg: running [2025-08-26 19:08:21][354372621022180][362 ms][DEBUG] END check_scloud in 362 ms [2025-08-26 19:08:21][354372621022180][362 ms][DEBUG] START check_boot_completed [2025-08-26 19:08:21][354372621022180][362 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:08:21][354372621022180][409 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 19:08:21][354372621022180][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:08:21][354372621022180][471 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 19:08:21][354372621022180][471 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 19:08:21][354372621022180][471 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:08:21][354372621022180][644 ms][DEBUG] SU: done in 172 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 438\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 41\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 597\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:08:21][354372621022180][644 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:08:21][354372621022180][893 ms][DEBUG] SU: done in 249 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=107 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 107.396/107.396/107.396/0.000 ms\n [2025-08-26 19:08:21][354372621022180][893 ms][DEBUG] check_internet: online [2025-08-26 19:08:21][354372621022180][893 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:08:21][354372621022180][893 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354372621022180\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1247\"}'\'' -e'"" [2025-08-26 19:08:21][354372621022180][893 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:08:21][354372621022180][893 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354372621022180\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1247\"}'\'' -e'"" [2025-08-26 19:08:27][354372621022180][6454 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_067e8d1c-7ec6-4ecc-8361-41e2a5c51eeb","id":"QR_067e8d1c-7ec6-4ecc-8361-41e2a5c51eeb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:08:27][354372621022180][6610 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3343 [2025-08-26 19:08:27][354372621022180][6610 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-08-26 19:08:27][354372621022180][6610 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:08:32][355490894820939][0 ms][INFO] === Request start === [2025-08-26 19:08:32][355490894820939][1 ms][DEBUG] START check_scloud [2025-08-26 19:08:32][355490894820939][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:08:32][355490894820939][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 26380 21369 23987820 92004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:08:32][355490894820939][322 ms][DEBUG] targetPkg: running [2025-08-26 19:08:32][355490894820939][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-26 19:08:32][355490894820939][322 ms][DEBUG] START check_boot_completed [2025-08-26 19:08:32][355490894820939][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:08:32][355490894820939][368 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 19:08:32][355490894820939][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:08:32][355490894820939][478 ms][DEBUG] SU: done in 109 ms; out [2025-08-26 19:08:32][355490894820939][478 ms][DEBUG] END check_boot_completed in 156 ms [2025-08-26 19:08:32][355490894820939][478 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:08:33][355490894820939][603 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 705\nsuccessfulTxPacketsPerSecond: 11.13005556110677\nretriedTxPackets: 141\nretriedTxPacketsPerSecond: 4.168560135245982\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 906\nsuccessfulRxPacketsPerSecond: 12.880850817910085\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:08:33][355490894820939][603 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:08:33][355490894820939][1071 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=323 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 323.502/323.502/323.502/0.000 ms\n [2025-08-26 19:08:33][355490894820939][1071 ms][DEBUG] check_internet: online [2025-08-26 19:08:33][355490894820939][1071 ms][DEBUG] rawBody.length=1148 [2025-08-26 19:08:33][355490894820939][1071 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490894820939\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3630\"}'\'' -e'"" [2025-08-26 19:08:33][355490894820939][1071 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:08:33][355490894820939][1072 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490894820939\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3630\"}'\'' -e'"" [2025-08-26 19:08:37][355490894820939][5492 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_02eb67bf-638f-46ac-a9a2-b3c5b2608144","id":"QR_02eb67bf-638f-46ac-a9a2-b3c5b2608144","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:08:38][355490894820939][5648 ms][DEBUG] proc_open done in 4577 ms; code=255; res.len=3343 [2025-08-26 19:08:38][355490894820939][5648 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-08-26 19:08:38][355490894820939][5648 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:14:04][350792527333171][1 ms][INFO] === Request start === [2025-08-26 19:14:04][350792527333171][1 ms][DEBUG] START check_scloud [2025-08-26 19:14:04][350792527333171][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:14:05][350792527333171][353 ms][DEBUG] SU: done in 352 ms; outu0_a118 26380 21369 24018224 75952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:14:05][350792527333171][353 ms][DEBUG] targetPkg: running [2025-08-26 19:14:05][350792527333171][353 ms][DEBUG] END check_scloud in 352 ms [2025-08-26 19:14:05][350792527333171][353 ms][DEBUG] START check_boot_completed [2025-08-26 19:14:05][350792527333171][353 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:14:05][350792527333171][400 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 19:14:05][350792527333171][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:14:05][350792527333171][447 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:14:05][350792527333171][447 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 19:14:05][350792527333171][447 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:14:05][350792527333171][572 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1094\nsuccessfulTxPacketsPerSecond: 0.8510602792645838\nretriedTxPackets: 240\nretriedTxPacketsPerSecond: 0.27117116741273506\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1277\nsuccessfulRxPacketsPerSecond: 0.7175606276152373\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:14:05][350792527333171][572 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:14:05][350792527333171][870 ms][DEBUG] SU: done in 299 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=107 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 107.739/107.739/107.739/0.000 ms\n [2025-08-26 19:14:05][350792527333171][870 ms][DEBUG] check_internet: online [2025-08-26 19:14:05][350792527333171][871 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:14:05][350792527333171][871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792527333171\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5191\"}'\'' -e'"" [2025-08-26 19:14:05][350792527333171][871 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:14:05][350792527333171][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792527333171\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5191\"}'\'' -e'"" [2025-08-26 19:14:10][350792527333171][6023 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_10b4b919-ef96-46be-8de8-d6bef0f6715d","id":"QR_10b4b919-ef96-46be-8de8-d6bef0f6715d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:14:10][350792527333171][6179 ms][DEBUG] proc_open done in 5309 ms; code=255; res.len=3343 [2025-08-26 19:14:10][350792527333171][6180 ms][DEBUG] END runCmdUntilRes#1 in 5309 ms [2025-08-26 19:14:10][350792527333171][6180 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:16:08][357967976124544][0 ms][INFO] === Request start === [2025-08-26 19:16:08][357967976124544][1 ms][DEBUG] START check_scloud [2025-08-26 19:16:08][357967976124544][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:16:08][357967976124544][327 ms][DEBUG] SU: done in 326 ms; outu0_a118 26380 21369 24156692 89360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:16:08][357967976124544][327 ms][DEBUG] targetPkg: running [2025-08-26 19:16:08][357967976124544][327 ms][DEBUG] END check_scloud in 326 ms [2025-08-26 19:16:08][357967976124544][327 ms][DEBUG] START check_boot_completed [2025-08-26 19:16:08][357967976124544][327 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:16:08][357967976124544][373 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 19:16:08][357967976124544][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:16:08][357967976124544][420 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:16:08][357967976124544][420 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 19:16:08][357967976124544][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:16:08][357967976124544][531 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1094\nsuccessfulTxPacketsPerSecond: 0.8510602792645838\nretriedTxPackets: 240\nretriedTxPacketsPerSecond: 0.27117116741273506\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1277\nsuccessfulRxPacketsPerSecond: 0.7175606276152373\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:16:08][357967976124544][531 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:16:09][357967976124544][998 ms][DEBUG] SU: done in 467 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.248/202.248/202.248/0.000 ms\n [2025-08-26 19:16:09][357967976124544][998 ms][DEBUG] check_internet: online [2025-08-26 19:16:09][357967976124544][998 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:16:09][357967976124544][998 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967976124544\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3885\"}'\'' -e'"" [2025-08-26 19:16:09][357967976124544][998 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:16:09][357967976124544][998 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967976124544\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3885\"}'\'' -e'"" [2025-08-26 19:16:13][357967976124544][5653 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_602d2615-5bf7-47b3-ac0b-ea687dff098a","id":"QR_602d2615-5bf7-47b3-ac0b-ea687dff098a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:16:13][357967976124544][5809 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3343 [2025-08-26 19:16:13][357967976124544][5809 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-08-26 19:16:13][357967976124544][5810 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:16:20][350962371832996][0 ms][INFO] === Request start === [2025-08-26 19:16:20][350962371832996][1 ms][DEBUG] START check_scloud [2025-08-26 19:16:20][350962371832996][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:16:20][350962371832996][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 26380 21369 24313308 100328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:16:20][350962371832996][321 ms][DEBUG] targetPkg: running [2025-08-26 19:16:20][350962371832996][321 ms][DEBUG] END check_scloud in 321 ms [2025-08-26 19:16:20][350962371832996][321 ms][DEBUG] START check_boot_completed [2025-08-26 19:16:20][350962371832996][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:16:20][350962371832996][368 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 19:16:20][350962371832996][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:16:20][350962371832996][415 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:16:20][350962371832996][415 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 19:16:20][350962371832996][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:16:20][350962371832996][571 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1094\nsuccessfulTxPacketsPerSecond: 0.8510602792645838\nretriedTxPackets: 240\nretriedTxPacketsPerSecond: 0.27117116741273506\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1277\nsuccessfulRxPacketsPerSecond: 0.7175606276152373\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:16:20][350962371832996][571 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:16:20][350962371832996][899 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=179 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 179.151/179.151/179.151/0.000 ms\n [2025-08-26 19:16:20][350962371832996][899 ms][DEBUG] check_internet: online [2025-08-26 19:16:20][350962371832996][899 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:16:20][350962371832996][899 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962371832996\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7103\"}'\'' -e'"" [2025-08-26 19:16:20][350962371832996][899 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:16:20][350962371832996][899 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962371832996\",\"model\":\"SM-S908U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7103\"}'\'' -e'"" [2025-08-26 19:16:25][350962371832996][5741 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c702b078-b76e-4122-bfad-ae64e0bc8b3d","id":"QR_c702b078-b76e-4122-bfad-ae64e0bc8b3d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:16:25][350962371832996][5898 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3343 [2025-08-26 19:16:25][350962371832996][5898 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-08-26 19:16:25][350962371832996][5898 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:19:04][350551930377633][1 ms][INFO] === Request start === [2025-08-26 19:19:04][350551930377633][1 ms][DEBUG] START check_scloud [2025-08-26 19:19:04][350551930377633][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:19:04][350551930377633][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 26380 21369 24446620 112260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:19:04][350551930377633][328 ms][DEBUG] targetPkg: running [2025-08-26 19:19:04][350551930377633][328 ms][DEBUG] END check_scloud in 327 ms [2025-08-26 19:19:04][350551930377633][328 ms][DEBUG] START check_boot_completed [2025-08-26 19:19:04][350551930377633][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:19:04][350551930377633][360 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 19:19:04][350551930377633][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:19:04][350551930377633][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:19:04][350551930377633][407 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 19:19:04][350551930377633][407 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:19:04][350551930377633][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350551930377633\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1119\"}'\'' -e'"" [2025-08-26 19:19:04][350551930377633][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:19:04][350551930377633][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350551930377633\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1119\"}'\'' -e'"" [2025-08-26 19:19:10][350551930377633][5718 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0e644b73-4ef2-4a85-9baf-724d7e1a131b","id":"QR_0e644b73-4ef2-4a85-9baf-724d7e1a131b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:19:10][350551930377633][5874 ms][DEBUG] proc_open done in 5467 ms; code=255; res.len=3343 [2025-08-26 19:19:10][350551930377633][5874 ms][DEBUG] END runCmdUntilRes#1 in 5467 ms [2025-08-26 19:19:10][350551930377633][5874 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:19:16][350175610366409][1 ms][INFO] === Request start === [2025-08-26 19:19:16][350175610366409][1 ms][DEBUG] START check_scloud [2025-08-26 19:19:16][350175610366409][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:19:16][350175610366409][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 26380 21369 24597284 121764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:19:16][350175610366409][266 ms][DEBUG] targetPkg: running [2025-08-26 19:19:16][350175610366409][267 ms][DEBUG] END check_scloud in 266 ms [2025-08-26 19:19:16][350175610366409][267 ms][DEBUG] START check_boot_completed [2025-08-26 19:19:16][350175610366409][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:19:16][350175610366409][313 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 19:19:16][350175610366409][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:19:16][350175610366409][376 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 19:19:16][350175610366409][376 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 19:19:16][350175610366409][376 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:19:16][350175610366409][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350175610366409\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9180\"}'\'' -e'"" [2025-08-26 19:19:16][350175610366409][376 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:19:16][350175610366409][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350175610366409\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9180\"}'\'' -e'"" [2025-08-26 19:19:20][350175610366409][4047 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-26 19:19:20][350175610366409][4203 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=115 [2025-08-26 19:19:20][350175610366409][4203 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-26 19:19:20][350175610366409][4203 ms][INFO] SUCCESS response from frida (len=115) [2025-08-26 19:19:21][][0 ms][INFO] === Request start === [2025-08-26 19:19:21][][1 ms][DEBUG] START check_scloud [2025-08-26 19:19:21][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:19:21][][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 26380 21369 24747948 132828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:19:21][][296 ms][DEBUG] targetPkg: running [2025-08-26 19:19:21][][296 ms][DEBUG] END check_scloud in 296 ms [2025-08-26 19:19:21][][296 ms][DEBUG] START check_boot_completed [2025-08-26 19:19:21][][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:19:21][][343 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 19:19:21][][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:19:21][][405 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 19:19:21][][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 19:19:21][][405 ms][DEBUG] rawBody.length=1130 [2025-08-26 19:19:21][][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCWA02BWYX\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6826\"}'\'' -e'"" [2025-08-26 19:19:21][][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:19:21][][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCWA02BWYX\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6826\"}'\'' -e'"" [2025-08-26 19:19:25][][4123 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 19:19:25][][4279 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=107 [2025-08-26 19:19:25][][4279 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-26 19:19:25][][4279 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 19:19:26][350175610366409][0 ms][INFO] === Request start === [2025-08-26 19:19:26][350175610366409][1 ms][DEBUG] START check_scloud [2025-08-26 19:19:26][350175610366409][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:19:26][350175610366409][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 26380 21369 24902288 142100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:19:26][350175610366409][315 ms][DEBUG] targetPkg: running [2025-08-26 19:19:26][350175610366409][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-26 19:19:26][350175610366409][315 ms][DEBUG] START check_boot_completed [2025-08-26 19:19:26][350175610366409][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:19:26][350175610366409][346 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 19:19:26][350175610366409][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:19:26][350175610366409][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:19:26][350175610366409][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 19:19:26][350175610366409][393 ms][DEBUG] rawBody.length=1148 [2025-08-26 19:19:26][350175610366409][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350175610366409\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2646\"}'\'' -e'"" [2025-08-26 19:19:26][350175610366409][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:19:26][350175610366409][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350175610366409\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2646\"}'\'' -e'"" [2025-08-26 19:19:30][350175610366409][4361 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_89ef7964-0a13-4625-b535-db604120e4a0","id":"QR_89ef7964-0a13-4625-b535-db604120e4a0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:19:30][350175610366409][4517 ms][DEBUG] proc_open done in 4124 ms; code=255; res.len=3343 [2025-08-26 19:19:30][350175610366409][4517 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-26 19:19:30][350175610366409][4517 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:24:03][355490891018545][1 ms][INFO] === Request start === [2025-08-26 19:24:03][355490891018545][1 ms][DEBUG] START check_scloud [2025-08-26 19:24:03][355490891018545][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:24:03][355490891018545][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 26380 21369 25022124 154408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:24:03][355490891018545][247 ms][DEBUG] targetPkg: running [2025-08-26 19:24:03][355490891018545][247 ms][DEBUG] END check_scloud in 246 ms [2025-08-26 19:24:03][355490891018545][247 ms][DEBUG] START check_boot_completed [2025-08-26 19:24:03][355490891018545][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:24:04][355490891018545][278 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 19:24:04][355490891018545][278 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:24:04][355490891018545][325 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:24:04][355490891018545][325 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 19:24:04][355490891018545][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:24:04][355490891018545][434 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1313\nsuccessfulTxPacketsPerSecond: 0.3552787111683689\nretriedTxPackets: 308\nretriedTxPacketsPerSecond: 0.0996108535986081\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1462\nsuccessfulRxPacketsPerSecond: 0.29551219900920406\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:24:04][355490891018545][434 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:24:04][355490891018545][762 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.877/202.877/202.877/0.000 ms\n [2025-08-26 19:24:04][355490891018545][762 ms][DEBUG] check_internet: online [2025-08-26 19:24:04][355490891018545][762 ms][DEBUG] rawBody.length=1148 [2025-08-26 19:24:04][355490891018545][762 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490891018545\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1796\"}'\'' -e'"" [2025-08-26 19:24:04][355490891018545][762 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:24:04][355490891018545][762 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355490891018545\",\"model\":\"SM-A536B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1796\"}'\'' -e'"" [2025-08-26 19:24:08][355490891018545][4776 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_666aeecd-de25-4581-b89a-bd17fb5b6248","id":"QR_666aeecd-de25-4581-b89a-bd17fb5b6248","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:24:08][355490891018545][4933 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3343 [2025-08-26 19:24:08][355490891018545][4933 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-08-26 19:24:08][355490891018545][4933 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:25:05][357467543315519][0 ms][INFO] === Request start === [2025-08-26 19:25:05][357467543315519][1 ms][DEBUG] START check_scloud [2025-08-26 19:25:05][357467543315519][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:25:05][357467543315519][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 26380 21369 25133840 165476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:25:05][357467543315519][267 ms][DEBUG] targetPkg: running [2025-08-26 19:25:05][357467543315519][267 ms][DEBUG] END check_scloud in 266 ms [2025-08-26 19:25:05][357467543315519][267 ms][DEBUG] START check_boot_completed [2025-08-26 19:25:05][357467543315519][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:25:05][357467543315519][314 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 19:25:05][357467543315519][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:25:05][357467543315519][360 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:25:05][357467543315519][361 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 19:25:05][357467543315519][361 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:25:05][357467543315519][361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357467543315519\",\"model\":\"SM-A325M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3926\"}'\'' -e'"" [2025-08-26 19:25:05][357467543315519][361 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:25:05][357467543315519][361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357467543315519\",\"model\":\"SM-A325M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3926\"}'\'' -e'"" [2025-08-26 19:25:10][357467543315519][4797 ms][DEBUG] proc_open done in 4437 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 19:25:10][357467543315519][4797 ms][DEBUG] END runCmdUntilRes#1 in 4437 ms [2025-08-26 19:25:10][357467543315519][4798 ms][WARN] Detected error: Process with pid 26380 either refused to load frida-agent, or terminated during injectionProcess with pid 26380 either refused to load frida-agent, or terminated during injection\r\n [2025-08-26 19:25:10][357467543315519][4798 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-08-26 19:25:10][357467543315519][5078 ms][DEBUG] SU: done in 281 ms; outsystem 21633 21369 12760860 270984 ep_poll 0 S system_server\n [2025-08-26 19:25:10][357467543315519][5078 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 19:25:10][357467543315519][5219 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 19:25:10][357467543315519][5219 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 19:25:10][357467543315519][5219 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 19:25:10][357467543315519][5361 ms][DEBUG] SU: done in 142 ms; out [2025-08-26 19:25:10][357467543315519][5362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 19:25:10][357467543315519][5563 ms][DEBUG] SU: done in 201 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 19:25:12][357467543315519][7577 ms][DEBUG] START check_boot_completed [2025-08-26 19:25:12][357467543315519][7578 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:25:12][357467543315519][7625 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 19:25:12][357467543315519][7625 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:25:12][357467543315519][7687 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 19:25:12][357467543315519][7687 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 19:25:15][357467543315519][10702 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 19:25:15][357467543315519][10702 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357467543315519\",\"model\":\"SM-A325M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3926\"}'\'' -e'"" [2025-08-26 19:25:22][357467543315519][17419 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bd51a069-3878-42ca-b299-3967b1ec343b","id":"QR_bd51a069-3878-42ca-b299-3967b1ec343b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:25:22][357467543315519][17575 ms][DEBUG] proc_open done in 6873 ms; code=255; res.len=3343 [2025-08-26 19:25:22][357467543315519][17575 ms][DEBUG] END runCmdUntilRes#2 in 6873 ms [2025-08-26 19:25:22][357467543315519][17575 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:26:03][355088852671771][1 ms][INFO] === Request start === [2025-08-26 19:26:03][355088852671771][1 ms][DEBUG] START check_scloud [2025-08-26 19:26:03][355088852671771][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:26:03][355088852671771][323 ms][DEBUG] SU: done in 321 ms; outu0_a118 2752 21369 23802260 128764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:26:03][355088852671771][323 ms][DEBUG] targetPkg: running [2025-08-26 19:26:03][355088852671771][323 ms][DEBUG] END check_scloud in 322 ms [2025-08-26 19:26:03][355088852671771][323 ms][DEBUG] START check_boot_completed [2025-08-26 19:26:03][355088852671771][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:26:03][355088852671771][370 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 19:26:03][355088852671771][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:26:03][355088852671771][416 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:26:03][355088852671771][416 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 19:26:03][355088852671771][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:26:03][355088852671771][510 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1346\nsuccessfulTxPacketsPerSecond: 0.25302091639575536\nretriedTxPackets: 323\nretriedTxPacketsPerSecond: 0.11500950745261608\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1485\nsuccessfulRxPacketsPerSecond: 0.17634791142734466\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:26:03][355088852671771][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:26:03][355088852671771][854 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=225 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 225.582/225.582/225.582/0.000 ms\n [2025-08-26 19:26:03][355088852671771][854 ms][DEBUG] check_internet: online [2025-08-26 19:26:03][355088852671771][854 ms][DEBUG] rawBody.length=1148 [2025-08-26 19:26:03][355088852671771][854 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355088852671771\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1242\"}'\'' -e'"" [2025-08-26 19:26:03][355088852671771][854 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:26:03][355088852671771][854 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355088852671771\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1242\"}'\'' -e'"" [2025-08-26 19:26:07][355088852671771][4634 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1f06ce16-a496-439b-be9d-454a17f669e1","id":"QR_1f06ce16-a496-439b-be9d-454a17f669e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:26:07][355088852671771][4790 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-26 19:26:07][355088852671771][4790 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-26 19:26:07][355088852671771][4790 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:27:03][350832413800618][0 ms][INFO] === Request start === [2025-08-26 19:27:03][350832413800618][1 ms][DEBUG] START check_scloud [2025-08-26 19:27:03][350832413800618][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:27:03][350832413800618][288 ms][DEBUG] SU: done in 288 ms; outu0_a118 2752 21369 23937428 139132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:27:03][350832413800618][288 ms][DEBUG] targetPkg: running [2025-08-26 19:27:03][350832413800618][288 ms][DEBUG] END check_scloud in 288 ms [2025-08-26 19:27:03][350832413800618][288 ms][DEBUG] START check_boot_completed [2025-08-26 19:27:03][350832413800618][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:27:03][350832413800618][320 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 19:27:03][350832413800618][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:27:03][350832413800618][367 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:27:03][350832413800618][367 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 19:27:03][350832413800618][367 ms][DEBUG] rawBody.length=1148 [2025-08-26 19:27:03][350832413800618][367 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832413800618\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9509\"}'\'' -e'"" [2025-08-26 19:27:03][350832413800618][367 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:27:03][350832413800618][367 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350832413800618\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9509\"}'\'' -e'"" [2025-08-26 19:27:07][350832413800618][4069 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_df3f17ea-c643-4c3b-899d-6b2de42b9eb7","id":"QR_df3f17ea-c643-4c3b-899d-6b2de42b9eb7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:27:07][350832413800618][4225 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-26 19:27:07][350832413800618][4225 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-26 19:27:07][350832413800618][4225 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:29:03][359350291405211][1 ms][INFO] === Request start === [2025-08-26 19:29:03][359350291405211][1 ms][DEBUG] START check_scloud [2025-08-26 19:29:03][359350291405211][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:29:03][359350291405211][279 ms][DEBUG] SU: done in 277 ms; outu0_a118 2752 21369 24064492 150952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:29:03][359350291405211][279 ms][DEBUG] targetPkg: running [2025-08-26 19:29:03][359350291405211][279 ms][DEBUG] END check_scloud in 278 ms [2025-08-26 19:29:03][359350291405211][279 ms][DEBUG] START check_boot_completed [2025-08-26 19:29:03][359350291405211][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:29:03][359350291405211][325 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 19:29:03][359350291405211][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:29:03][359350291405211][388 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 19:29:03][359350291405211][388 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 19:29:03][359350291405211][388 ms][DEBUG] rawBody.length=1147 [2025-08-26 19:29:03][359350291405211][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359350291405211\",\"model\":\"SM-T975\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1941\"}'\'' -e'"" [2025-08-26 19:29:03][359350291405211][388 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:29:03][359350291405211][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359350291405211\",\"model\":\"SM-T975\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1941\"}'\'' -e'"" [2025-08-26 19:29:07][359350291405211][4293 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ad3a0748-beab-487a-908f-a75ef2d21321","id":"QR_ad3a0748-beab-487a-908f-a75ef2d21321","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:29:08][359350291405211][4449 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3343 [2025-08-26 19:29:08][359350291405211][4449 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-26 19:29:08][359350291405211][4450 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:31:04][350938288751792][1 ms][INFO] === Request start === [2025-08-26 19:31:04][350938288751792][1 ms][DEBUG] START check_scloud [2025-08-26 19:31:04][350938288751792][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:31:04][350938288751792][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 2752 21369 24200912 162104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:31:04][350938288751792][305 ms][DEBUG] targetPkg: running [2025-08-26 19:31:04][350938288751792][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 19:31:04][350938288751792][305 ms][DEBUG] START check_boot_completed [2025-08-26 19:31:04][350938288751792][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:31:04][350938288751792][335 ms][DEBUG] ADB: done in 30 ms; out [2025-08-26 19:31:04][350938288751792][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:31:04][350938288751792][382 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:31:04][350938288751792][382 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-26 19:31:04][350938288751792][382 ms][DEBUG] rawBody.length=1148 [2025-08-26 19:31:04][350938288751792][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938288751792\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8923\"}'\'' -e'"" [2025-08-26 19:31:04][350938288751792][382 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:31:04][350938288751792][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938288751792\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8923\"}'\'' -e'"" [2025-08-26 19:31:08][350938288751792][4225 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5d55af3a-326e-427b-93d5-f90a33d614c3","id":"QR_5d55af3a-326e-427b-93d5-f90a33d614c3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:31:08][350938288751792][4381 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=3343 [2025-08-26 19:31:08][350938288751792][4381 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-26 19:31:08][350938288751792][4381 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:33:03][350013880366835][1 ms][INFO] === Request start === [2025-08-26 19:33:03][350013880366835][1 ms][DEBUG] START check_scloud [2025-08-26 19:33:03][350013880366835][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:33:04][350013880366835][251 ms][DEBUG] SU: done in 249 ms; outu0_a118 2752 21369 24355700 173324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:33:04][350013880366835][251 ms][DEBUG] targetPkg: running [2025-08-26 19:33:04][350013880366835][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-26 19:33:04][350013880366835][251 ms][DEBUG] START check_boot_completed [2025-08-26 19:33:04][350013880366835][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:33:04][350013880366835][297 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 19:33:04][350013880366835][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:33:04][350013880366835][344 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:33:04][350013880366835][344 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 19:33:04][350013880366835][344 ms][DEBUG] rawBody.length=1148 [2025-08-26 19:33:04][350013880366835][344 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013880366835\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3876\"}'\'' -e'"" [2025-08-26 19:33:04][350013880366835][344 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:33:04][350013880366835][344 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013880366835\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XXV\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3876\"}'\'' -e'"" [2025-08-26 19:33:08][350013880366835][4640 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_063f178b-3af2-45b4-af1e-ae5781e6bdb5","id":"QR_063f178b-3af2-45b4-af1e-ae5781e6bdb5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:33:08][350013880366835][4796 ms][DEBUG] proc_open done in 4452 ms; code=255; res.len=3343 [2025-08-26 19:33:08][350013880366835][4796 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-08-26 19:33:08][350013880366835][4796 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:35:03][351328116511817][0 ms][INFO] === Request start === [2025-08-26 19:35:03][351328116511817][1 ms][DEBUG] START check_scloud [2025-08-26 19:35:03][351328116511817][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:35:04][351328116511817][313 ms][DEBUG] SU: done in 313 ms; outu0_a118 2752 21369 24481752 183672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:35:04][351328116511817][314 ms][DEBUG] targetPkg: running [2025-08-26 19:35:04][351328116511817][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-26 19:35:04][351328116511817][314 ms][DEBUG] START check_boot_completed [2025-08-26 19:35:04][351328116511817][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:35:04][351328116511817][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 19:35:04][351328116511817][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:35:04][351328116511817][423 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 19:35:04][351328116511817][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 19:35:04][351328116511817][423 ms][DEBUG] rawBody.length=1148 [2025-08-26 19:35:04][351328116511817][423 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351328116511817\",\"model\":\"SM-G781B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4328\"}'\'' -e'"" [2025-08-26 19:35:04][351328116511817][423 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:35:04][351328116511817][423 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351328116511817\",\"model\":\"SM-G781B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4328\"}'\'' -e'"" [2025-08-26 19:35:08][351328116511817][4406 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_17af1d9b-4a9d-4f3f-b0a0-a4a16245407b","id":"QR_17af1d9b-4a9d-4f3f-b0a0-a4a16245407b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:35:08][351328116511817][4562 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3343 [2025-08-26 19:35:08][351328116511817][4562 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-08-26 19:35:08][351328116511817][4562 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:35:12][357213310630940][1 ms][INFO] === Request start === [2025-08-26 19:35:12][357213310630940][1 ms][DEBUG] START check_scloud [2025-08-26 19:35:12][357213310630940][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:35:12][357213310630940][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 2752 21369 24626400 194612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:35:12][357213310630940][308 ms][DEBUG] targetPkg: running [2025-08-26 19:35:12][357213310630940][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-26 19:35:12][357213310630940][308 ms][DEBUG] START check_boot_completed [2025-08-26 19:35:12][357213310630940][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:35:12][357213310630940][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 19:35:12][357213310630940][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:35:12][357213310630940][403 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 19:35:12][357213310630940][403 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 19:35:12][357213310630940][403 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:35:12][357213310630940][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357213310630940\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3657\"}'\'' -e'"" [2025-08-26 19:35:12][357213310630940][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:35:12][357213310630940][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357213310630940\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3657\"}'\'' -e'"" [2025-08-26 19:35:17][357213310630940][5448 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f65ece18-cc5b-4b74-9d14-a42081e4b4bf","id":"QR_f65ece18-cc5b-4b74-9d14-a42081e4b4bf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:35:17][357213310630940][5604 ms][DEBUG] proc_open done in 5200 ms; code=255; res.len=3343 [2025-08-26 19:35:17][357213310630940][5604 ms][DEBUG] END runCmdUntilRes#1 in 5200 ms [2025-08-26 19:35:17][357213310630940][5604 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:36:04][356664830536754][1 ms][INFO] === Request start === [2025-08-26 19:36:04][356664830536754][1 ms][DEBUG] START check_scloud [2025-08-26 19:36:04][356664830536754][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:36:04][356664830536754][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 2752 21369 24768928 206500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:36:04][356664830536754][303 ms][DEBUG] targetPkg: running [2025-08-26 19:36:04][356664830536754][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 19:36:04][356664830536754][303 ms][DEBUG] START check_boot_completed [2025-08-26 19:36:04][356664830536754][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:36:04][356664830536754][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 19:36:04][356664830536754][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:36:04][356664830536754][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:36:04][356664830536754][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 19:36:04][356664830536754][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:36:04][356664830536754][507 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1646\nsuccessfulTxPacketsPerSecond: 0.21555798012223795\nretriedTxPackets: 391\nretriedTxPacketsPerSecond: 0.07959063881436479\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1748\nsuccessfulRxPacketsPerSecond: 0.17244638409779037\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:36:04][356664830536754][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:36:04][356664830536754][803 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=184 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 184.477/184.477/184.477/0.000 ms\n [2025-08-26 19:36:04][356664830536754][803 ms][DEBUG] check_internet: online [2025-08-26 19:36:04][356664830536754][803 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:36:04][356664830536754][804 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356664830536754\",\"model\":\"SM-F926U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9939\"}'\'' -e'"" [2025-08-26 19:36:04][356664830536754][804 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:36:04][356664830536754][804 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356664830536754\",\"model\":\"SM-F926U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9939\"}'\'' -e'"" [2025-08-26 19:36:08][356664830536754][4552 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-26 19:36:08][356664830536754][4708 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=115 [2025-08-26 19:36:08][356664830536754][4708 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-26 19:36:08][356664830536754][4708 ms][INFO] SUCCESS response from frida (len=115) [2025-08-26 19:36:09][][0 ms][INFO] === Request start === [2025-08-26 19:36:09][][0 ms][DEBUG] START check_scloud [2025-08-26 19:36:09][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:36:09][][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 2752 21369 24911400 217112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:36:09][][262 ms][DEBUG] targetPkg: running [2025-08-26 19:36:09][][262 ms][DEBUG] END check_scloud in 262 ms [2025-08-26 19:36:09][][262 ms][DEBUG] START check_boot_completed [2025-08-26 19:36:09][][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:36:09][][308 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 19:36:09][][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:36:09][][355 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:36:09][][355 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 19:36:09][][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:36:09][][465 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1646\nsuccessfulTxPacketsPerSecond: 0.21555798012223795\nretriedTxPackets: 391\nretriedTxPacketsPerSecond: 0.07959063881436479\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1748\nsuccessfulRxPacketsPerSecond: 0.17244638409779037\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:36:09][][465 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:36:09][][699 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=117 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 117.852/117.852/117.852/0.000 ms\n [2025-08-26 19:36:09][][699 ms][DEBUG] check_internet: online [2025-08-26 19:36:09][][699 ms][DEBUG] rawBody.length=1130 [2025-08-26 19:36:09][][699 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F926U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R3CR706WV3X\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2195\"}'\'' -e'"" [2025-08-26 19:36:09][][699 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:36:09][][699 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-F926U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R3CR706WV3X\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2195\"}'\'' -e'"" [2025-08-26 19:36:13][][4339 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-26 19:36:13][][4495 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=115 [2025-08-26 19:36:13][][4495 ms][DEBUG] END runCmdUntilRes#1 in 3795 ms [2025-08-26 19:36:13][][4495 ms][INFO] SUCCESS response from frida (len=115) [2025-08-26 19:36:14][356664830536754][0 ms][INFO] === Request start === [2025-08-26 19:36:14][356664830536754][1 ms][DEBUG] START check_scloud [2025-08-26 19:36:14][356664830536754][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:36:14][356664830536754][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 2752 21369 25062196 228948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:36:14][356664830536754][306 ms][DEBUG] targetPkg: running [2025-08-26 19:36:14][356664830536754][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-26 19:36:14][356664830536754][306 ms][DEBUG] START check_boot_completed [2025-08-26 19:36:14][356664830536754][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:36:14][356664830536754][337 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 19:36:14][356664830536754][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:36:14][356664830536754][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:36:14][356664830536754][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 19:36:14][356664830536754][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:36:15][356664830536754][478 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1646\nsuccessfulTxPacketsPerSecond: 0.21555798012223795\nretriedTxPackets: 391\nretriedTxPacketsPerSecond: 0.07959063881436479\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1748\nsuccessfulRxPacketsPerSecond: 0.17244638409779037\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:36:15][356664830536754][478 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:36:15][356664830536754][681 ms][DEBUG] SU: done in 203 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=120 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 120.016/120.016/120.016/0.000 ms\n [2025-08-26 19:36:15][356664830536754][681 ms][DEBUG] check_internet: online [2025-08-26 19:36:15][356664830536754][681 ms][DEBUG] rawBody.length=1148 [2025-08-26 19:36:15][356664830536754][681 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356664830536754\",\"model\":\"SM-F926U\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2048\"}'\'' -e'"" [2025-08-26 19:36:15][356664830536754][681 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:36:15][356664830536754][681 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356664830536754\",\"model\":\"SM-F926U\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2048\"}'\'' -e'"" [2025-08-26 19:36:18][356664830536754][4446 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fae46f3f-934e-48e9-b92c-97a9192d9d8e","id":"QR_fae46f3f-934e-48e9-b92c-97a9192d9d8e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:36:19][356664830536754][4602 ms][DEBUG] proc_open done in 3921 ms; code=255; res.len=3343 [2025-08-26 19:36:19][356664830536754][4602 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-08-26 19:36:19][356664830536754][4602 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:36:22][356697214018411][0 ms][INFO] === Request start === [2025-08-26 19:36:22][356697214018411][1 ms][DEBUG] START check_scloud [2025-08-26 19:36:22][356697214018411][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:36:23][356697214018411][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 2752 21369 25212924 240800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:36:23][356697214018411][254 ms][DEBUG] targetPkg: running [2025-08-26 19:36:23][356697214018411][254 ms][DEBUG] END check_scloud in 254 ms [2025-08-26 19:36:23][356697214018411][254 ms][DEBUG] START check_boot_completed [2025-08-26 19:36:23][356697214018411][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:36:23][356697214018411][332 ms][DEBUG] ADB: done in 78 ms; out [2025-08-26 19:36:23][356697214018411][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:36:23][356697214018411][395 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 19:36:23][356697214018411][395 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 19:36:23][356697214018411][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:36:23][356697214018411][535 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1646\nsuccessfulTxPacketsPerSecond: 0.21555798012223795\nretriedTxPackets: 391\nretriedTxPacketsPerSecond: 0.07959063881436479\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1748\nsuccessfulRxPacketsPerSecond: 0.17244638409779037\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:36:23][356697214018411][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:36:23][356697214018411][879 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=205 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 205.016/205.016/205.016/0.000 ms\n [2025-08-26 19:36:23][356697214018411][879 ms][DEBUG] check_internet: online [2025-08-26 19:36:23][356697214018411][879 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:36:23][356697214018411][879 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356697214018411\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4924\"}'\'' -e'"" [2025-08-26 19:36:23][356697214018411][879 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:36:23][356697214018411][880 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356697214018411\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4924\"}'\'' -e'"" [2025-08-26 19:36:27][356697214018411][4862 ms][DEBUG] proc_open done in 3983 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-26 19:36:27][356697214018411][4862 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-26 19:36:27][356697214018411][4862 ms][WARN] Detected error: Process with pid 2752 either refused to load frida-agent, or terminated during injectionProcess with pid 2752 either refused to load frida-agent, or terminated during injection\r\n [2025-08-26 19:36:27][356697214018411][4862 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-08-26 19:36:28][356697214018411][5128 ms][DEBUG] SU: done in 266 ms; outsystem 21633 21369 12760608 257016 ep_poll 0 S system_server\n [2025-08-26 19:36:28][356697214018411][5128 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 19:36:28][356697214018411][5269 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 19:36:28][356697214018411][5269 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 19:36:28][356697214018411][5269 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 19:36:28][356697214018411][5425 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 19:36:28][356697214018411][5425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 19:36:28][356697214018411][5597 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 19:36:30][356697214018411][7612 ms][DEBUG] START check_boot_completed [2025-08-26 19:36:30][356697214018411][7612 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:36:30][356697214018411][7659 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 19:36:30][356697214018411][7659 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:36:30][356697214018411][7707 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 19:36:30][356697214018411][7707 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 19:36:33][356697214018411][10720 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 19:36:33][356697214018411][10720 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356697214018411\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4924\"}'\'' -e'"" [2025-08-26 19:36:38][356697214018411][15485 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2b781e36-b937-4e7f-86da-78c0a5c178f0","id":"QR_2b781e36-b937-4e7f-86da-78c0a5c178f0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:36:38][356697214018411][15641 ms][DEBUG] proc_open done in 4920 ms; code=255; res.len=3343 [2025-08-26 19:36:38][356697214018411][15641 ms][DEBUG] END runCmdUntilRes#2 in 4921 ms [2025-08-26 19:36:38][356697214018411][15641 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:38:03][352665182262679][1 ms][INFO] === Request start === [2025-08-26 19:38:03][352665182262679][1 ms][DEBUG] START check_scloud [2025-08-26 19:38:03][352665182262679][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:38:04][352665182262679][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 4268 21369 23742324 127404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:38:04][352665182262679][314 ms][DEBUG] targetPkg: running [2025-08-26 19:38:04][352665182262679][314 ms][DEBUG] END check_scloud in 312 ms [2025-08-26 19:38:04][352665182262679][314 ms][DEBUG] START check_boot_completed [2025-08-26 19:38:04][352665182262679][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:38:04][352665182262679][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 19:38:04][352665182262679][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:38:04][352665182262679][423 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 19:38:04][352665182262679][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 19:38:04][352665182262679][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:38:04][352665182262679][532 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1646\nsuccessfulTxPacketsPerSecond: 0.21555798012223795\nretriedTxPackets: 391\nretriedTxPacketsPerSecond: 0.07959063881436479\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1748\nsuccessfulRxPacketsPerSecond: 0.17244638409779037\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:38:04][352665182262679][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:38:04][352665182262679][907 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.613/202.613/202.613/0.000 ms\n [2025-08-26 19:38:04][352665182262679][907 ms][DEBUG] check_internet: online [2025-08-26 19:38:04][352665182262679][907 ms][DEBUG] rawBody.length=1148 [2025-08-26 19:38:04][352665182262679][907 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665182262679\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9839\"}'\'' -e'"" [2025-08-26 19:38:04][352665182262679][907 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:38:04][352665182262679][907 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665182262679\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9839\"}'\'' -e'"" [2025-08-26 19:38:08][352665182262679][4937 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cbf1371a-cd43-410e-9feb-f6bffa0817e0","id":"QR_cbf1371a-cd43-410e-9feb-f6bffa0817e0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:38:08][352665182262679][5093 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-26 19:38:08][352665182262679][5093 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-26 19:38:08][352665182262679][5093 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:39:05][357980442430759][0 ms][INFO] === Request start === [2025-08-26 19:39:05][357980442430759][1 ms][DEBUG] START check_scloud [2025-08-26 19:39:05][357980442430759][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:39:05][357980442430759][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 4268 21369 23896936 138180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:39:05][357980442430759][304 ms][DEBUG] targetPkg: running [2025-08-26 19:39:05][357980442430759][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-26 19:39:05][357980442430759][304 ms][DEBUG] START check_boot_completed [2025-08-26 19:39:05][357980442430759][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:39:05][357980442430759][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 19:39:05][357980442430759][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:39:05][357980442430759][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:39:05][357980442430759][397 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 19:39:05][357980442430759][397 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:39:05][357980442430759][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980442430759\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4660\"}'\'' -e'"" [2025-08-26 19:39:05][357980442430759][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:39:05][357980442430759][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980442430759\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4660\"}'\'' -e'"" [2025-08-26 19:39:10][357980442430759][5224 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b80bab10-d1bd-403e-93be-75223657ccc3","id":"QR_b80bab10-d1bd-403e-93be-75223657ccc3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:39:10][357980442430759][5380 ms][DEBUG] proc_open done in 4983 ms; code=255; res.len=3343 [2025-08-26 19:39:10][357980442430759][5380 ms][DEBUG] END runCmdUntilRes#1 in 4983 ms [2025-08-26 19:39:10][357980442430759][5380 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:42:05][357822610412351][1 ms][INFO] === Request start === [2025-08-26 19:42:05][357822610412351][1 ms][DEBUG] START check_scloud [2025-08-26 19:42:05][357822610412351][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:42:05][357822610412351][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 4268 21369 24040396 150036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:42:05][357822610412351][309 ms][DEBUG] targetPkg: running [2025-08-26 19:42:05][357822610412351][309 ms][DEBUG] END check_scloud in 307 ms [2025-08-26 19:42:05][357822610412351][309 ms][DEBUG] START check_boot_completed [2025-08-26 19:42:05][357822610412351][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:42:05][357822610412351][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 19:42:05][357822610412351][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:42:05][357822610412351][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:42:05][357822610412351][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 19:42:05][357822610412351][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:42:06][357822610412351][496 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1830\nsuccessfulTxPacketsPerSecond: 0.6119727139992084\nretriedTxPackets: 446\nretriedTxPacketsPerSecond: 0.18292662646715468\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1902\nsuccessfulRxPacketsPerSecond: 0.5121945541080332\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:42:06][357822610412351][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:42:06][357822610412351][793 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=182 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 182.400/182.400/182.400/0.000 ms\n [2025-08-26 19:42:06][357822610412351][793 ms][DEBUG] check_internet: online [2025-08-26 19:42:06][357822610412351][793 ms][DEBUG] rawBody.length=1159 [2025-08-26 19:42:06][357822610412351][793 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357822610412351\",\"model\":\"SM-X210\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9TX404QNXW\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4459\"}'\'' -e'"" [2025-08-26 19:42:06][357822610412351][793 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:42:06][357822610412351][793 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357822610412351\",\"model\":\"SM-X210\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9TX404QNXW\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4459\"}'\'' -e'"" [2025-08-26 19:42:11][357822610412351][5745 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8742683d-8e58-42fe-a51c-94384c8bc30d","id":"QR_8742683d-8e58-42fe-a51c-94384c8bc30d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:42:11][357822610412351][5901 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-08-26 19:42:11][357822610412351][5901 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-08-26 19:42:11][357822610412351][5901 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:42:17][350039933976155][0 ms][INFO] === Request start === [2025-08-26 19:42:17][350039933976155][1 ms][DEBUG] START check_scloud [2025-08-26 19:42:17][350039933976155][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:42:17][350039933976155][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 4268 21369 24212812 161124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:42:17][350039933976155][305 ms][DEBUG] targetPkg: running [2025-08-26 19:42:17][350039933976155][305 ms][DEBUG] END check_scloud in 305 ms [2025-08-26 19:42:17][350039933976155][305 ms][DEBUG] START check_boot_completed [2025-08-26 19:42:17][350039933976155][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:42:17][350039933976155][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 19:42:17][350039933976155][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:42:18][350039933976155][414 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 19:42:18][350039933976155][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 19:42:18][350039933976155][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:42:18][350039933976155][524 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1830\nsuccessfulTxPacketsPerSecond: 0.6119727139992084\nretriedTxPackets: 446\nretriedTxPacketsPerSecond: 0.18292662646715468\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1902\nsuccessfulRxPacketsPerSecond: 0.5121945541080332\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:42:18][350039933976155][524 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:42:18][350039933976155][822 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=160 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 160.328/160.328/160.328/0.000 ms\n [2025-08-26 19:42:18][350039933976155][822 ms][DEBUG] check_internet: online [2025-08-26 19:42:18][350039933976155][822 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:42:18][350039933976155][822 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039933976155\",\"model\":\"SM-A127M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5774\"}'\'' -e'"" [2025-08-26 19:42:18][350039933976155][822 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:42:18][350039933976155][822 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039933976155\",\"model\":\"SM-A127M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5774\"}'\'' -e'"" [2025-08-26 19:42:23][350039933976155][5585 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f5c2e533-461a-47e8-a29f-6e797ff9a7ac","id":"QR_f5c2e533-461a-47e8-a29f-6e797ff9a7ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:42:23][350039933976155][5741 ms][DEBUG] proc_open done in 4919 ms; code=255; res.len=3343 [2025-08-26 19:42:23][350039933976155][5741 ms][DEBUG] END runCmdUntilRes#1 in 4919 ms [2025-08-26 19:42:23][350039933976155][5741 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:43:29][355859111547493][0 ms][INFO] === Request start === [2025-08-26 19:43:29][355859111547493][1 ms][DEBUG] START check_scloud [2025-08-26 19:43:29][355859111547493][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:43:29][355859111547493][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 4268 21369 24312336 171696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:43:29][355859111547493][256 ms][DEBUG] targetPkg: running [2025-08-26 19:43:29][355859111547493][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-26 19:43:29][355859111547493][257 ms][DEBUG] START check_boot_completed [2025-08-26 19:43:29][355859111547493][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:43:29][355859111547493][303 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 19:43:29][355859111547493][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:43:30][355859111547493][381 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 19:43:30][355859111547493][381 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 19:43:30][355859111547493][381 ms][DEBUG] rawBody.length=1148 [2025-08-26 19:43:30][355859111547493][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859111547493\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4723\"}'\'' -e'"" [2025-08-26 19:43:30][355859111547493][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:43:30][355859111547493][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859111547493\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4723\"}'\'' -e'"" [2025-08-26 19:43:34][355859111547493][4693 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 19:43:34][355859111547493][4849 ms][DEBUG] proc_open done in 4468 ms; code=255; res.len=107 [2025-08-26 19:43:34][355859111547493][4849 ms][DEBUG] END runCmdUntilRes#1 in 4468 ms [2025-08-26 19:43:34][355859111547493][4849 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 19:43:34][][0 ms][INFO] === Request start === [2025-08-26 19:43:34][][1 ms][DEBUG] START check_scloud [2025-08-26 19:43:34][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:43:35][][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 4268 21369 24471128 181380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:43:35][][300 ms][DEBUG] targetPkg: running [2025-08-26 19:43:35][][300 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 19:43:35][][300 ms][DEBUG] START check_boot_completed [2025-08-26 19:43:35][][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:43:35][][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 19:43:35][][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:43:35][][409 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 19:43:35][][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 19:43:35][][410 ms][DEBUG] rawBody.length=1129 [2025-08-26 19:43:35][][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CN9098HBB\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3831\"}'\'' -e'"" [2025-08-26 19:43:35][][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:43:35][][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CN9098HBB\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"KOD\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3831\"}'\'' -e'"" [2025-08-26 19:43:38][][3674 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 19:43:38][][3830 ms][DEBUG] proc_open done in 3421 ms; code=255; res.len=107 [2025-08-26 19:43:38][][3830 ms][DEBUG] END runCmdUntilRes#1 in 3421 ms [2025-08-26 19:43:38][][3831 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 19:43:40][355859111547493][0 ms][INFO] === Request start === [2025-08-26 19:43:40][355859111547493][1 ms][DEBUG] START check_scloud [2025-08-26 19:43:40][355859111547493][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:43:41][355859111547493][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 4268 21369 24619744 193080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:43:41][355859111547493][292 ms][DEBUG] targetPkg: running [2025-08-26 19:43:41][355859111547493][292 ms][DEBUG] END check_scloud in 292 ms [2025-08-26 19:43:41][355859111547493][292 ms][DEBUG] START check_boot_completed [2025-08-26 19:43:41][355859111547493][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:43:41][355859111547493][339 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 19:43:41][355859111547493][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:43:41][355859111547493][401 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 19:43:41][355859111547493][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 19:43:41][355859111547493][401 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:43:41][355859111547493][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859111547493\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5670\"}'\'' -e'"" [2025-08-26 19:43:41][355859111547493][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:43:41][355859111547493][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355859111547493\",\"model\":\"SM-N986N\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"KOD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5670\"}'\'' -e'"" [2025-08-26 19:43:46][355859111547493][5556 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6db08424-d3b9-4950-81f5-1dac205a3af1","id":"QR_6db08424-d3b9-4950-81f5-1dac205a3af1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:43:46][355859111547493][5713 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-08-26 19:43:46][355859111547493][5713 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-08-26 19:43:46][355859111547493][5713 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:44:03][351681595215015][0 ms][INFO] === Request start === [2025-08-26 19:44:03][351681595215015][1 ms][DEBUG] START check_scloud [2025-08-26 19:44:03][351681595215015][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:44:04][351681595215015][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 4268 21369 24761048 204228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:44:04][351681595215015][310 ms][DEBUG] targetPkg: running [2025-08-26 19:44:04][351681595215015][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 19:44:04][351681595215015][310 ms][DEBUG] START check_boot_completed [2025-08-26 19:44:04][351681595215015][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:44:04][351681595215015][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 19:44:04][351681595215015][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:44:04][351681595215015][419 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 19:44:04][351681595215015][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 19:44:04][351681595215015][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:44:04][351681595215015][622 ms][DEBUG] SU: done in 203 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1920\nsuccessfulTxPacketsPerSecond: 2.5854423128052293\nretriedTxPackets: 466\nretriedTxPacketsPerSecond: 0.40398697024838165\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1982\nsuccessfulRxPacketsPerSecond: 2.383448827681038\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:44:04][351681595215015][622 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:44:04][351681595215015][1044 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=110 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 110.036/110.036/110.036/0.000 ms\n [2025-08-26 19:44:04][351681595215015][1044 ms][DEBUG] check_internet: online [2025-08-26 19:44:04][351681595215015][1044 ms][DEBUG] rawBody.length=1148 [2025-08-26 19:44:04][351681595215015][1044 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681595215015\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2747\"}'\'' -e'"" [2025-08-26 19:44:04][351681595215015][1044 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:44:04][351681595215015][1044 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681595215015\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2747\"}'\'' -e'"" [2025-08-26 19:44:10][351681595215015][6230 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67a2d6c0-d06b-4420-8970-7cb32a5111b1","id":"QR_67a2d6c0-d06b-4420-8970-7cb32a5111b1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:44:10][351681595215015][6386 ms][DEBUG] proc_open done in 5342 ms; code=255; res.len=3343 [2025-08-26 19:44:10][351681595215015][6386 ms][DEBUG] END runCmdUntilRes#1 in 5342 ms [2025-08-26 19:44:10][351681595215015][6386 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:44:13][351646935272273][1 ms][INFO] === Request start === [2025-08-26 19:44:13][351646935272273][1 ms][DEBUG] START check_scloud [2025-08-26 19:44:13][351646935272273][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:44:14][351646935272273][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 4268 21369 24915424 154124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:44:14][351646935272273][285 ms][DEBUG] targetPkg: running [2025-08-26 19:44:14][351646935272273][285 ms][DEBUG] END check_scloud in 284 ms [2025-08-26 19:44:14][351646935272273][285 ms][DEBUG] START check_boot_completed [2025-08-26 19:44:14][351646935272273][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:44:14][351646935272273][317 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 19:44:14][351646935272273][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:44:14][351646935272273][365 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 19:44:14][351646935272273][365 ms][DEBUG] END check_boot_completed in 80 ms [2025-08-26 19:44:14][351646935272273][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:44:14][351646935272273][489 ms][DEBUG] SU: done in 123 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1920\nsuccessfulTxPacketsPerSecond: 2.5854423128052293\nretriedTxPackets: 466\nretriedTxPacketsPerSecond: 0.40398697024838165\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1982\nsuccessfulRxPacketsPerSecond: 2.383448827681038\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:44:14][351646935272273][489 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:44:14][351646935272273][707 ms][DEBUG] SU: done in 219 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=109 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 109.850/109.850/109.850/0.000 ms\n [2025-08-26 19:44:14][351646935272273][708 ms][DEBUG] check_internet: online [2025-08-26 19:44:14][351646935272273][708 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:44:14][351646935272273][708 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351646935272273\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1271\"}'\'' -e'"" [2025-08-26 19:44:14][351646935272273][708 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:44:14][351646935272273][708 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351646935272273\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1271\"}'\'' -e'"" [2025-08-26 19:44:19][351646935272273][5737 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_197c4591-f753-4ec2-8e61-0ee4aa169b63","id":"QR_197c4591-f753-4ec2-8e61-0ee4aa169b63","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:44:19][351646935272273][5893 ms][DEBUG] proc_open done in 5185 ms; code=255; res.len=3343 [2025-08-26 19:44:19][351646935272273][5893 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-08-26 19:44:19][351646935272273][5893 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:44:24][351477979162612][0 ms][INFO] === Request start === [2025-08-26 19:44:24][351477979162612][1 ms][DEBUG] START check_scloud [2025-08-26 19:44:24][351477979162612][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:44:24][351477979162612][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 4268 21369 25039464 149524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:44:24][351477979162612][310 ms][DEBUG] targetPkg: running [2025-08-26 19:44:24][351477979162612][310 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 19:44:24][351477979162612][310 ms][DEBUG] START check_boot_completed [2025-08-26 19:44:24][351477979162612][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:44:24][351477979162612][357 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 19:44:24][351477979162612][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:44:24][351477979162612][420 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 19:44:24][351477979162612][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 19:44:24][351477979162612][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:44:25][351477979162612][545 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1920\nsuccessfulTxPacketsPerSecond: 2.5854423128052293\nretriedTxPackets: 466\nretriedTxPacketsPerSecond: 0.40398697024838165\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1982\nsuccessfulRxPacketsPerSecond: 2.383448827681038\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:44:25][351477979162612][545 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:44:25][351477979162612][857 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.064/163.064/163.064/0.000 ms\n [2025-08-26 19:44:25][351477979162612][857 ms][DEBUG] check_internet: online [2025-08-26 19:44:25][351477979162612][857 ms][DEBUG] rawBody.length=1148 [2025-08-26 19:44:25][351477979162612][857 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477979162612\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2783\"}'\'' -e'"" [2025-08-26 19:44:25][351477979162612][857 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:44:25][351477979162612][857 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477979162612\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2783\"}'\'' -e'"" [2025-08-26 19:44:29][351477979162612][4465 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ac603f01-03dc-47f7-aa54-cf6bb0a4d731","id":"QR_ac603f01-03dc-47f7-aa54-cf6bb0a4d731","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:44:29][351477979162612][4622 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-08-26 19:44:29][351477979162612][4622 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-08-26 19:44:29][351477979162612][4622 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:46:04][356927264854609][0 ms][INFO] === Request start === [2025-08-26 19:46:04][356927264854609][1 ms][DEBUG] START check_scloud [2025-08-26 19:46:04][356927264854609][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:46:04][356927264854609][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 4268 21369 25147140 163244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:46:04][356927264854609][260 ms][DEBUG] targetPkg: running [2025-08-26 19:46:04][356927264854609][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-26 19:46:04][356927264854609][260 ms][DEBUG] START check_boot_completed [2025-08-26 19:46:04][356927264854609][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:46:04][356927264854609][305 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 19:46:04][356927264854609][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:46:04][356927264854609][352 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:46:04][356927264854609][352 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-26 19:46:04][356927264854609][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:46:05][356927264854609][462 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2698\nsuccessfulTxPacketsPerSecond: 5.450660314568957\nretriedTxPackets: 572\nretriedTxPacketsPerSecond: 0.7426349528847165\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2686\nsuccessfulRxPacketsPerSecond: 4.932217045573966\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:46:05][356927264854609][462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:46:05][356927264854609][774 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=218 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 218.300/218.300/218.300/0.000 ms\n [2025-08-26 19:46:05][356927264854609][774 ms][DEBUG] check_internet: online [2025-08-26 19:46:05][356927264854609][774 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:46:05][356927264854609][774 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927264854609\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4471\"}'\'' -e'"" [2025-08-26 19:46:05][356927264854609][774 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:46:05][356927264854609][774 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927264854609\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4471\"}'\'' -e'"" [2025-08-26 19:46:09][356927264854609][5179 ms][DEBUG] proc_open done in 4405 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-26 19:46:09][356927264854609][5179 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-26 19:46:09][356927264854609][5179 ms][WARN] Detected error: Process with pid 4268 either refused to load frida-agent, or terminated during injectionProcess with pid 4268 either refused to load frida-agent, or terminated during injection\r\n [2025-08-26 19:46:09][356927264854609][5179 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-08-26 19:46:10][356927264854609][5460 ms][DEBUG] SU: done in 281 ms; outsystem 21633 21369 12773264 189356 ep_poll 0 S system_server\n [2025-08-26 19:46:10][356927264854609][5461 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 19:46:10][356927264854609][5617 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 19:46:10][356927264854609][5617 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 19:46:10][356927264854609][5617 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 19:46:10][356927264854609][5773 ms][DEBUG] SU: done in 156 ms; out [2025-08-26 19:46:10][356927264854609][5773 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 19:46:10][356927264854609][6007 ms][DEBUG] SU: done in 235 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 19:46:12][356927264854609][8022 ms][DEBUG] START check_boot_completed [2025-08-26 19:46:12][356927264854609][8022 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:46:12][356927264854609][8069 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 19:46:12][356927264854609][8069 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:46:12][356927264854609][8132 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 19:46:12][356927264854609][8132 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 19:46:15][356927264854609][11146 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 19:46:15][356927264854609][11147 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927264854609\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4471\"}'\'' -e'"" [2025-08-26 19:46:20][356927264854609][15755 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_344176bd-f057-406d-b035-46be07eafe47","id":"QR_344176bd-f057-406d-b035-46be07eafe47","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:46:20][356927264854609][15911 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=3343 [2025-08-26 19:46:20][356927264854609][15911 ms][DEBUG] END runCmdUntilRes#2 in 4765 ms [2025-08-26 19:46:20][356927264854609][15911 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:46:26][353182205787988][1 ms][INFO] === Request start === [2025-08-26 19:46:26][353182205787988][1 ms][DEBUG] START check_scloud [2025-08-26 19:46:26][353182205787988][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:46:26][353182205787988][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 8240 21369 23881820 124032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:46:26][353182205787988][255 ms][DEBUG] targetPkg: running [2025-08-26 19:46:26][353182205787988][255 ms][DEBUG] END check_scloud in 254 ms [2025-08-26 19:46:26][353182205787988][255 ms][DEBUG] START check_boot_completed [2025-08-26 19:46:26][353182205787988][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:46:26][353182205787988][302 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 19:46:26][353182205787988][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:46:26][353182205787988][349 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:46:26][353182205787988][349 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 19:46:26][353182205787988][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:46:26][353182205787988][458 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2698\nsuccessfulTxPacketsPerSecond: 5.450660314568957\nretriedTxPackets: 572\nretriedTxPacketsPerSecond: 0.7426349528847165\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2686\nsuccessfulRxPacketsPerSecond: 4.932217045573966\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:46:26][353182205787988][458 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:46:26][353182205787988][724 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=157 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 157.421/157.421/157.421/0.000 ms\n [2025-08-26 19:46:26][353182205787988][724 ms][DEBUG] check_internet: online [2025-08-26 19:46:26][353182205787988][724 ms][DEBUG] rawBody.length=1148 [2025-08-26 19:46:26][353182205787988][724 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182205787988\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4953\"}'\'' -e'"" [2025-08-26 19:46:26][353182205787988][724 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:46:26][353182205787988][724 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353182205787988\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4953\"}'\'' -e'"" [2025-08-26 19:46:30][353182205787988][4457 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f51cec8f-9a0f-4b2e-9dc3-3f534db2a98f","id":"QR_f51cec8f-9a0f-4b2e-9dc3-3f534db2a98f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:46:30][353182205787988][4613 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-08-26 19:46:30][353182205787988][4613 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-26 19:46:30][353182205787988][4613 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:46:34][354420571892019][0 ms][INFO] === Request start === [2025-08-26 19:46:34][354420571892019][1 ms][DEBUG] START check_scloud [2025-08-26 19:46:34][354420571892019][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:46:34][354420571892019][257 ms][DEBUG] SU: done in 257 ms; outu0_a118 8240 21369 24035056 137064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:46:34][354420571892019][257 ms][DEBUG] targetPkg: running [2025-08-26 19:46:34][354420571892019][257 ms][DEBUG] END check_scloud in 257 ms [2025-08-26 19:46:34][354420571892019][258 ms][DEBUG] START check_boot_completed [2025-08-26 19:46:34][354420571892019][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:46:34][354420571892019][304 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 19:46:34][354420571892019][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:46:35][354420571892019][367 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 19:46:35][354420571892019][367 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 19:46:35][354420571892019][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:46:35][354420571892019][523 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2698\nsuccessfulTxPacketsPerSecond: 5.450660314568957\nretriedTxPackets: 572\nretriedTxPacketsPerSecond: 0.7426349528847165\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2686\nsuccessfulRxPacketsPerSecond: 4.932217045573966\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:46:35][354420571892019][523 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:46:35][354420571892019][913 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=236 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 236.615/236.615/236.615/0.000 ms\n [2025-08-26 19:46:35][354420571892019][914 ms][DEBUG] check_internet: online [2025-08-26 19:46:35][354420571892019][914 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:46:35][354420571892019][914 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354420571892019\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3988\"}'\'' -e'"" [2025-08-26 19:46:35][354420571892019][914 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:46:35][354420571892019][914 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354420571892019\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3988\"}'\'' -e'"" [2025-08-26 19:46:39][354420571892019][4553 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-26 19:46:39][354420571892019][4709 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=101 [2025-08-26 19:46:39][354420571892019][4709 ms][DEBUG] END runCmdUntilRes#1 in 3795 ms [2025-08-26 19:46:39][354420571892019][4709 ms][INFO] SUCCESS response from frida (len=101) [2025-08-26 19:46:39][][0 ms][INFO] === Request start === [2025-08-26 19:46:39][][1 ms][DEBUG] START check_scloud [2025-08-26 19:46:39][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:46:40][][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 8240 21369 24165332 148908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:46:40][][317 ms][DEBUG] targetPkg: running [2025-08-26 19:46:40][][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-26 19:46:40][][317 ms][DEBUG] START check_boot_completed [2025-08-26 19:46:40][][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:46:40][][348 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 19:46:40][][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:46:40][][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:46:40][][395 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 19:46:40][][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:46:40][][551 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2698\nsuccessfulTxPacketsPerSecond: 5.450660314568957\nretriedTxPackets: 572\nretriedTxPacketsPerSecond: 0.7426349528847165\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2686\nsuccessfulRxPacketsPerSecond: 4.932217045573966\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:46:40][][551 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:46:40][][801 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=117 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 117.081/117.081/117.081/0.000 ms\n [2025-08-26 19:46:40][][801 ms][DEBUG] check_internet: online [2025-08-26 19:46:40][][801 ms][DEBUG] rawBody.length=1130 [2025-08-26 19:46:40][][801 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58X50L52YW\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3362\"}'\'' -e'"" [2025-08-26 19:46:40][][801 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:46:40][][801 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58X50L52YW\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3362\"}'\'' -e'"" [2025-08-26 19:46:44][][4534 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-26 19:46:44][][4691 ms][DEBUG] proc_open done in 3890 ms; code=255; res.len=101 [2025-08-26 19:46:44][][4691 ms][DEBUG] END runCmdUntilRes#1 in 3890 ms [2025-08-26 19:46:44][][4691 ms][INFO] SUCCESS response from frida (len=101) [2025-08-26 19:46:45][354420571892019][0 ms][INFO] === Request start === [2025-08-26 19:46:45][354420571892019][1 ms][DEBUG] START check_scloud [2025-08-26 19:46:45][354420571892019][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:46:45][354420571892019][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 8240 21369 24235884 160224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:46:45][354420571892019][320 ms][DEBUG] targetPkg: running [2025-08-26 19:46:45][354420571892019][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-26 19:46:45][354420571892019][320 ms][DEBUG] START check_boot_completed [2025-08-26 19:46:45][354420571892019][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:46:45][354420571892019][351 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 19:46:45][354420571892019][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:46:45][354420571892019][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:46:45][354420571892019][398 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 19:46:45][354420571892019][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:46:45][354420571892019][507 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2698\nsuccessfulTxPacketsPerSecond: 5.450660314568957\nretriedTxPackets: 572\nretriedTxPacketsPerSecond: 0.7426349528847165\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2686\nsuccessfulRxPacketsPerSecond: 4.932217045573966\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:46:45][354420571892019][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:46:45][354420571892019][726 ms][DEBUG] SU: done in 219 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=114 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 114.270/114.270/114.270/0.000 ms\n [2025-08-26 19:46:45][354420571892019][726 ms][DEBUG] check_internet: online [2025-08-26 19:46:45][354420571892019][726 ms][DEBUG] rawBody.length=1148 [2025-08-26 19:46:45][354420571892019][726 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354420571892019\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4387\"}'\'' -e'"" [2025-08-26 19:46:45][354420571892019][726 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:46:45][354420571892019][726 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354420571892019\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4387\"}'\'' -e'"" [2025-08-26 19:46:49][354420571892019][4475 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aa7d1a7f-652b-45c6-9b39-3116aa89b4a8","id":"QR_aa7d1a7f-652b-45c6-9b39-3116aa89b4a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:46:49][354420571892019][4631 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3343 [2025-08-26 19:46:49][354420571892019][4631 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-26 19:46:49][354420571892019][4631 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:48:04][350551930960388][0 ms][INFO] === Request start === [2025-08-26 19:48:04][350551930960388][1 ms][DEBUG] START check_scloud [2025-08-26 19:48:04][350551930960388][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:48:05][350551930960388][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 8240 21369 24300388 171896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:48:05][350551930960388][312 ms][DEBUG] targetPkg: running [2025-08-26 19:48:05][350551930960388][312 ms][DEBUG] END check_scloud in 312 ms [2025-08-26 19:48:05][350551930960388][313 ms][DEBUG] START check_boot_completed [2025-08-26 19:48:05][350551930960388][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:48:05][350551930960388][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 19:48:05][350551930960388][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:48:05][350551930960388][406 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:48:05][350551930960388][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 19:48:05][350551930960388][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:48:05][350551930960388][515 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2698\nsuccessfulTxPacketsPerSecond: 5.450660314568957\nretriedTxPackets: 572\nretriedTxPacketsPerSecond: 0.7426349528847165\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2686\nsuccessfulRxPacketsPerSecond: 4.932217045573966\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:48:05][350551930960388][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:48:05][350551930960388][953 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.818/201.818/201.818/0.000 ms\n [2025-08-26 19:48:05][350551930960388][953 ms][DEBUG] check_internet: online [2025-08-26 19:48:05][350551930960388][953 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:48:05][350551930960388][953 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350551930960388\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9442\"}'\'' -e'"" [2025-08-26 19:48:05][350551930960388][953 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:48:05][350551930960388][953 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350551930960388\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9442\"}'\'' -e'"" [2025-08-26 19:48:10][350551930960388][5983 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9581335a-7196-4097-924e-a6440a826ec2","id":"QR_9581335a-7196-4097-924e-a6440a826ec2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:48:11][350551930960388][6139 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-08-26 19:48:11][350551930960388][6139 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-08-26 19:48:11][350551930960388][6139 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:49:04][353204665624442][1 ms][INFO] === Request start === [2025-08-26 19:49:04][353204665624442][1 ms][DEBUG] START check_scloud [2025-08-26 19:49:04][353204665624442][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:49:04][353204665624442][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 8240 21369 24388476 183444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:49:04][353204665624442][304 ms][DEBUG] targetPkg: running [2025-08-26 19:49:04][353204665624442][305 ms][DEBUG] END check_scloud in 303 ms [2025-08-26 19:49:04][353204665624442][305 ms][DEBUG] START check_boot_completed [2025-08-26 19:49:04][353204665624442][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:49:04][353204665624442][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 19:49:04][353204665624442][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:49:04][353204665624442][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:49:04][353204665624442][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 19:49:04][353204665624442][398 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:49:04][353204665624442][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204665624442\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1377\"}'\'' -e'"" [2025-08-26 19:49:04][353204665624442][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:49:04][353204665624442][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353204665624442\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1377\"}'\'' -e'"" [2025-08-26 19:49:09][353204665624442][5069 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_17525b0f-f25a-4173-a58b-d8e4b4fe4a50","id":"QR_17525b0f-f25a-4173-a58b-d8e4b4fe4a50","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:49:09][353204665624442][5225 ms][DEBUG] proc_open done in 4827 ms; code=255; res.len=3343 [2025-08-26 19:49:09][353204665624442][5225 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-08-26 19:49:09][353204665624442][5225 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:50:04][350287313116237][0 ms][INFO] === Request start === [2025-08-26 19:50:04][350287313116237][1 ms][DEBUG] START check_scloud [2025-08-26 19:50:04][350287313116237][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:50:04][350287313116237][310 ms][DEBUG] SU: done in 310 ms; outu0_a118 8240 21369 24551520 195348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:50:04][350287313116237][311 ms][DEBUG] targetPkg: running [2025-08-26 19:50:04][350287313116237][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 19:50:04][350287313116237][311 ms][DEBUG] START check_boot_completed [2025-08-26 19:50:04][350287313116237][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:50:04][350287313116237][357 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 19:50:04][350287313116237][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:50:04][350287313116237][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 19:50:04][350287313116237][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 19:50:04][350287313116237][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:50:04][350287313116237][530 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2698\nsuccessfulTxPacketsPerSecond: 5.450660314568957\nretriedTxPackets: 572\nretriedTxPacketsPerSecond: 0.7426349528847165\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2686\nsuccessfulRxPacketsPerSecond: 4.932217045573966\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:50:04][350287313116237][530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:50:04][350287313116237][842 ms][DEBUG] SU: done in 311 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=173 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 173.623/173.623/173.623/0.000 ms\n [2025-08-26 19:50:04][350287313116237][842 ms][DEBUG] check_internet: online [2025-08-26 19:50:04][350287313116237][842 ms][DEBUG] rawBody.length=1148 [2025-08-26 19:50:04][350287313116237][842 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287313116237\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2167\"}'\'' -e'"" [2025-08-26 19:50:04][350287313116237][842 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:50:04][350287313116237][842 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287313116237\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2167\"}'\'' -e'"" [2025-08-26 19:50:08][350287313116237][4700 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6a63e614-5e8e-4f6e-814b-641fc4502fec","id":"QR_6a63e614-5e8e-4f6e-814b-641fc4502fec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:50:08][350287313116237][4856 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-26 19:50:08][350287313116237][4856 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-26 19:50:08][350287313116237][4856 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:51:04][357618782526931][0 ms][INFO] === Request start === [2025-08-26 19:51:04][357618782526931][1 ms][DEBUG] START check_scloud [2025-08-26 19:51:04][357618782526931][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:51:04][357618782526931][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 8240 21369 24679748 206296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:51:04][357618782526931][320 ms][DEBUG] targetPkg: running [2025-08-26 19:51:04][357618782526931][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-26 19:51:04][357618782526931][320 ms][DEBUG] START check_boot_completed [2025-08-26 19:51:04][357618782526931][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:51:04][357618782526931][367 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 19:51:04][357618782526931][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:51:04][357618782526931][413 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:51:04][357618782526931][413 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 19:51:04][357618782526931][413 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:51:04][357618782526931][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357618782526931\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"L15\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2496\"}'\'' -e'"" [2025-08-26 19:51:04][357618782526931][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:51:04][357618782526931][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357618782526931\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"L15\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2496\"}'\'' -e'"" [2025-08-26 19:51:09][357618782526931][4959 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0d53ec7e-018e-4a68-aa57-79f9fc2f3567","id":"QR_0d53ec7e-018e-4a68-aa57-79f9fc2f3567","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:51:09][357618782526931][5115 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-08-26 19:51:09][357618782526931][5116 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-08-26 19:51:09][357618782526931][5116 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:52:03][354321594728570][1 ms][INFO] === Request start === [2025-08-26 19:52:03][354321594728570][1 ms][DEBUG] START check_scloud [2025-08-26 19:52:03][354321594728570][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:52:03][354321594728570][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 8240 21369 24845928 218552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:52:03][354321594728570][310 ms][DEBUG] targetPkg: running [2025-08-26 19:52:03][354321594728570][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 19:52:03][354321594728570][311 ms][DEBUG] START check_boot_completed [2025-08-26 19:52:03][354321594728570][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:52:03][354321594728570][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 19:52:03][354321594728570][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:52:03][354321594728570][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:52:03][354321594728570][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 19:52:03][354321594728570][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:52:03][354321594728570][513 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3101\nsuccessfulTxPacketsPerSecond: 1.3383679880974917\nretriedTxPackets: 661\nretriedTxPacketsPerSecond: 0.29557010158976865\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3037\nsuccessfulRxPacketsPerSecond: 1.165675344472009\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:52:03][354321594728570][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:52:04][354321594728570][841 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=225 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 225.160/225.160/225.160/0.000 ms\n [2025-08-26 19:52:04][354321594728570][841 ms][DEBUG] check_internet: online [2025-08-26 19:52:04][354321594728570][842 ms][DEBUG] rawBody.length=1148 [2025-08-26 19:52:04][354321594728570][842 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354321594728570\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3840\"}'\'' -e'"" [2025-08-26 19:52:04][354321594728570][842 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:52:04][354321594728570][842 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354321594728570\",\"model\":\"SM-S908B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3840\"}'\'' -e'"" [2025-08-26 19:52:08][354321594728570][4684 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_34a78887-fdf9-4792-872d-d40df3b289e3","id":"QR_34a78887-fdf9-4792-872d-d40df3b289e3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:52:08][354321594728570][4840 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3343 [2025-08-26 19:52:08][354321594728570][4840 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-26 19:52:08][354321594728570][4840 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:53:04][352908918145507][0 ms][INFO] === Request start === [2025-08-26 19:53:04][352908918145507][1 ms][DEBUG] START check_scloud [2025-08-26 19:53:04][352908918145507][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:53:04][352908918145507][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 8240 21369 24971980 229368 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:53:04][352908918145507][315 ms][DEBUG] targetPkg: running [2025-08-26 19:53:04][352908918145507][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-26 19:53:04][352908918145507][315 ms][DEBUG] START check_boot_completed [2025-08-26 19:53:04][352908918145507][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:53:04][352908918145507][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 19:53:04][352908918145507][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:53:04][352908918145507][425 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 19:53:04][352908918145507][426 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 19:53:04][352908918145507][426 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:53:04][352908918145507][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352908918145507\",\"model\":\"SM-F936B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4469\"}'\'' -e'"" [2025-08-26 19:53:04][352908918145507][426 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:53:04][352908918145507][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352908918145507\",\"model\":\"SM-F936B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4469\"}'\'' -e'"" [2025-08-26 19:53:09][352908918145507][5032 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aed7149a-afff-4dcd-9a46-242a4058c3a7","id":"QR_aed7149a-afff-4dcd-9a46-242a4058c3a7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:53:09][352908918145507][5189 ms][DEBUG] proc_open done in 4763 ms; code=255; res.len=3343 [2025-08-26 19:53:09][352908918145507][5189 ms][DEBUG] END runCmdUntilRes#1 in 4763 ms [2025-08-26 19:53:09][352908918145507][5189 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:54:05][353600817557580][1 ms][INFO] === Request start === [2025-08-26 19:54:05][353600817557580][1 ms][DEBUG] START check_scloud [2025-08-26 19:54:05][353600817557580][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:54:05][353600817557580][314 ms][DEBUG] SU: done in 312 ms; outu0_a118 8240 21369 25126704 241216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:54:05][353600817557580][314 ms][DEBUG] targetPkg: running [2025-08-26 19:54:05][353600817557580][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-26 19:54:05][353600817557580][314 ms][DEBUG] START check_boot_completed [2025-08-26 19:54:05][353600817557580][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:54:05][353600817557580][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 19:54:05][353600817557580][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:54:05][353600817557580][409 ms][DEBUG] SU: done in 49 ms; out [2025-08-26 19:54:05][353600817557580][409 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 19:54:05][353600817557580][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:54:06][353600817557580][563 ms][DEBUG] SU: done in 154 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3101\nsuccessfulTxPacketsPerSecond: 1.3383679880974917\nretriedTxPackets: 661\nretriedTxPacketsPerSecond: 0.29557010158976865\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3037\nsuccessfulRxPacketsPerSecond: 1.165675344472009\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:54:06][353600817557580][564 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:54:06][353600817557580][1016 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.086/201.086/201.086/0.000 ms\n [2025-08-26 19:54:06][353600817557580][1016 ms][DEBUG] check_internet: online [2025-08-26 19:54:06][353600817557580][1017 ms][DEBUG] rawBody.length=1149 [2025-08-26 19:54:06][353600817557580][1017 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600817557580\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6757\"}'\'' -e'"" [2025-08-26 19:54:06][353600817557580][1017 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:54:06][353600817557580][1017 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600817557580\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6757\"}'\'' -e'"" [2025-08-26 19:54:10][353600817557580][4718 ms][DEBUG] proc_open done in 3702 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-26 19:54:10][353600817557580][4719 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-26 19:54:10][353600817557580][4719 ms][WARN] Detected error: Process with pid 8240 either refused to load frida-agent, or terminated during injectionProcess with pid 8240 either refused to load frida-agent, or terminated during injection\r\n [2025-08-26 19:54:10][353600817557580][4719 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-08-26 19:54:10][353600817557580][5015 ms][DEBUG] SU: done in 297 ms; outsystem 21633 21369 12792980 200076 ep_poll 0 S system_server\n [2025-08-26 19:54:10][353600817557580][5015 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 19:54:10][353600817557580][5140 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 19:54:10][353600817557580][5140 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 19:54:10][353600817557580][5141 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 19:54:10][353600817557580][5281 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 19:54:10][353600817557580][5281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 19:54:11][353600817557580][5484 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 19:54:13][353600817557580][7499 ms][DEBUG] START check_boot_completed [2025-08-26 19:54:13][353600817557580][7499 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:54:13][353600817557580][7546 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 19:54:13][353600817557580][7546 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:54:13][353600817557580][7593 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 19:54:13][353600817557580][7593 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 19:54:16][353600817557580][10608 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 19:54:16][353600817557580][10608 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600817557580\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6757\"}'\'' -e'"" [2025-08-26 19:54:20][353600817557580][15153 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7dd93239-211b-4ba9-94a0-88ff6025596a","id":"QR_7dd93239-211b-4ba9-94a0-88ff6025596a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:54:20][353600817557580][15310 ms][DEBUG] proc_open done in 4702 ms; code=255; res.len=3343 [2025-08-26 19:54:20][353600817557580][15310 ms][DEBUG] END runCmdUntilRes#2 in 4702 ms [2025-08-26 19:54:20][353600817557580][15310 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:54:25][357435848309271][1 ms][INFO] === Request start === [2025-08-26 19:54:25][357435848309271][1 ms][DEBUG] START check_scloud [2025-08-26 19:54:25][357435848309271][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:54:25][357435848309271][232 ms][DEBUG] SU: done in 231 ms; outu0_a118 9788 21369 23867036 124496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:54:25][357435848309271][232 ms][DEBUG] targetPkg: running [2025-08-26 19:54:25][357435848309271][232 ms][DEBUG] END check_scloud in 231 ms [2025-08-26 19:54:25][357435848309271][232 ms][DEBUG] START check_boot_completed [2025-08-26 19:54:25][357435848309271][232 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:54:25][357435848309271][279 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 19:54:25][357435848309271][279 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:54:25][357435848309271][341 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 19:54:25][357435848309271][341 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 19:54:25][357435848309271][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 19:54:26][357435848309271][482 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3101\nsuccessfulTxPacketsPerSecond: 1.3383679880974917\nretriedTxPackets: 661\nretriedTxPacketsPerSecond: 0.29557010158976865\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3037\nsuccessfulRxPacketsPerSecond: 1.165675344472009\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 19:54:26][357435848309271][482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 19:54:26][357435848309271][794 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=214 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 214.661/214.661/214.661/0.000 ms\n [2025-08-26 19:54:26][357435848309271][794 ms][DEBUG] check_internet: online [2025-08-26 19:54:26][357435848309271][794 ms][DEBUG] rawBody.length=1148 [2025-08-26 19:54:26][357435848309271][794 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435848309271\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2505\"}'\'' -e'"" [2025-08-26 19:54:26][357435848309271][794 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:54:26][357435848309271][794 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357435848309271\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2505\"}'\'' -e'"" [2025-08-26 19:54:30][357435848309271][4809 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f877e0e6-cdc3-4b1b-84e5-2437c78c2369","id":"QR_f877e0e6-cdc3-4b1b-84e5-2437c78c2369","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:54:30][357435848309271][4965 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3343 [2025-08-26 19:54:30][357435848309271][4965 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-08-26 19:54:30][357435848309271][4965 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 19:55:03][350824190490523][1 ms][INFO] === Request start === [2025-08-26 19:55:03][350824190490523][1 ms][DEBUG] START check_scloud [2025-08-26 19:55:03][350824190490523][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 19:55:03][350824190490523][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 9788 21369 23958968 138516 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 19:55:03][350824190490523][293 ms][DEBUG] targetPkg: running [2025-08-26 19:55:03][350824190490523][293 ms][DEBUG] END check_scloud in 292 ms [2025-08-26 19:55:03][350824190490523][293 ms][DEBUG] START check_boot_completed [2025-08-26 19:55:03][350824190490523][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 19:55:03][350824190490523][340 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 19:55:03][350824190490523][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 19:55:03][350824190490523][402 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 19:55:03][350824190490523][402 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 19:55:03][350824190490523][402 ms][DEBUG] rawBody.length=1148 [2025-08-26 19:55:03][350824190490523][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824190490523\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9293\"}'\'' -e'"" [2025-08-26 19:55:03][350824190490523][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 19:55:03][350824190490523][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824190490523\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9293\"}'\'' -e'"" [2025-08-26 19:55:07][350824190490523][3917 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ceab29c-77f5-4ef4-a6d9-61998bb94d0b","id":"QR_5ceab29c-77f5-4ef4-a6d9-61998bb94d0b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 19:55:07][350824190490523][4073 ms][DEBUG] proc_open done in 3670 ms; code=255; res.len=3343 [2025-08-26 19:55:07][350824190490523][4073 ms][DEBUG] END runCmdUntilRes#1 in 3670 ms [2025-08-26 19:55:07][350824190490523][4073 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:00:05][356214463482007][1 ms][INFO] === Request start === [2025-08-26 20:00:05][356214463482007][1 ms][DEBUG] START check_scloud [2025-08-26 20:00:05][356214463482007][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:00:05][356214463482007][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 9788 21369 24119852 149956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:00:05][356214463482007][313 ms][DEBUG] targetPkg: running [2025-08-26 20:00:05][356214463482007][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-26 20:00:05][356214463482007][313 ms][DEBUG] START check_boot_completed [2025-08-26 20:00:05][356214463482007][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:00:05][356214463482007][344 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 20:00:05][356214463482007][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:00:05][356214463482007][392 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 20:00:05][356214463482007][392 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 20:00:05][356214463482007][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 20:00:05][356214463482007][516 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3247\nsuccessfulTxPacketsPerSecond: 0.48492739374775806\nretriedTxPackets: 707\nretriedTxPacketsPerSecond: 0.152785343235595\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3159\nsuccessfulRxPacketsPerSecond: 0.40521330162483893\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 20:00:05][356214463482007][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 20:00:06][356214463482007][923 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.162/202.162/202.162/0.000 ms\n [2025-08-26 20:00:06][356214463482007][923 ms][DEBUG] check_internet: online [2025-08-26 20:00:06][356214463482007][923 ms][DEBUG] rawBody.length=1148 [2025-08-26 20:00:06][356214463482007][923 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356214463482007\",\"model\":\"SM-N980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5575\"}'\'' -e'"" [2025-08-26 20:00:06][356214463482007][923 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:00:06][356214463482007][923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356214463482007\",\"model\":\"SM-N980F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5575\"}'\'' -e'"" [2025-08-26 20:00:10][356214463482007][4968 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dff340fd-2157-4fdd-9785-887929892216","id":"QR_dff340fd-2157-4fdd-9785-887929892216","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:00:10][356214463482007][5125 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3343 [2025-08-26 20:00:10][356214463482007][5125 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-26 20:00:10][356214463482007][5125 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:01:04][352731456969579][0 ms][INFO] === Request start === [2025-08-26 20:01:04][352731456969579][1 ms][DEBUG] START check_scloud [2025-08-26 20:01:04][352731456969579][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:01:04][352731456969579][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 9788 21369 24250128 160996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:01:04][352731456969579][290 ms][DEBUG] targetPkg: running [2025-08-26 20:01:04][352731456969579][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-26 20:01:04][352731456969579][290 ms][DEBUG] START check_boot_completed [2025-08-26 20:01:04][352731456969579][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:01:04][352731456969579][337 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 20:01:04][352731456969579][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:01:05][352731456969579][399 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 20:01:05][352731456969579][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 20:01:05][352731456969579][399 ms][DEBUG] rawBody.length=1148 [2025-08-26 20:01:05][352731456969579][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352731456969579\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4332\"}'\'' -e'"" [2025-08-26 20:01:05][352731456969579][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:01:05][352731456969579][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352731456969579\",\"model\":\"SM-G998B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4332\"}'\'' -e'"" [2025-08-26 20:01:08][352731456969579][4320 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b657feaa-7522-46ea-8457-264fca99ff82","id":"QR_b657feaa-7522-46ea-8457-264fca99ff82","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:01:09][352731456969579][4476 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-26 20:01:09][352731456969579][4476 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-26 20:01:09][352731456969579][4476 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:06:04][351184060284921][1 ms][INFO] === Request start === [2025-08-26 20:06:04][351184060284921][1 ms][DEBUG] START check_scloud [2025-08-26 20:06:04][351184060284921][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:06:04][351184060284921][245 ms][DEBUG] SU: done in 244 ms; outu0_a118 9788 21369 24394612 172360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:06:04][351184060284921][245 ms][DEBUG] targetPkg: running [2025-08-26 20:06:04][351184060284921][245 ms][DEBUG] END check_scloud in 244 ms [2025-08-26 20:06:04][351184060284921][245 ms][DEBUG] START check_boot_completed [2025-08-26 20:06:04][351184060284921][245 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:06:04][351184060284921][290 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 20:06:04][351184060284921][290 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:06:04][351184060284921][352 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 20:06:04][351184060284921][352 ms][DEBUG] END check_boot_completed in 107 ms [2025-08-26 20:06:04][351184060284921][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 20:06:05][351184060284921][509 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3312\nsuccessfulTxPacketsPerSecond: 0.21430484864720065\nretriedTxPackets: 734\nretriedTxPacketsPerSecond: 0.06888370135088592\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3214\nsuccessfulRxPacketsPerSecond: 0.1989973594581149\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 20:06:05][351184060284921][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 20:06:05][351184060284921][1040 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.882/200.882/200.882/0.000 ms\n [2025-08-26 20:06:05][351184060284921][1040 ms][DEBUG] check_internet: online [2025-08-26 20:06:05][351184060284921][1040 ms][DEBUG] rawBody.length=1149 [2025-08-26 20:06:05][351184060284921][1040 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351184060284921\",\"model\":\"SM-S928U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7552\"}'\'' -e'"" [2025-08-26 20:06:05][351184060284921][1040 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:06:05][351184060284921][1040 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351184060284921\",\"model\":\"SM-S928U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7552\"}'\'' -e'"" [2025-08-26 20:06:11][351184060284921][6913 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b3a01c97-de36-4d17-bc9f-c045ebbacebe","id":"QR_b3a01c97-de36-4d17-bc9f-c045ebbacebe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:06:11][351184060284921][7069 ms][DEBUG] proc_open done in 6029 ms; code=255; res.len=3343 [2025-08-26 20:06:11][351184060284921][7069 ms][DEBUG] END runCmdUntilRes#1 in 6029 ms [2025-08-26 20:06:11][351184060284921][7069 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:07:03][353170568533933][0 ms][INFO] === Request start === [2025-08-26 20:07:03][353170568533933][1 ms][DEBUG] START check_scloud [2025-08-26 20:07:03][353170568533933][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:07:03][353170568533933][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 9788 21369 24533080 184672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:07:03][353170568533933][252 ms][DEBUG] targetPkg: running [2025-08-26 20:07:03][353170568533933][252 ms][DEBUG] END check_scloud in 252 ms [2025-08-26 20:07:03][353170568533933][252 ms][DEBUG] START check_boot_completed [2025-08-26 20:07:03][353170568533933][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:07:03][353170568533933][299 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 20:07:03][353170568533933][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:07:03][353170568533933][361 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 20:07:03][353170568533933][362 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 20:07:03][353170568533933][362 ms][DEBUG] rawBody.length=1148 [2025-08-26 20:07:03][353170568533933][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353170568533933\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7987\"}'\'' -e'"" [2025-08-26 20:07:03][353170568533933][362 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:07:03][353170568533933][362 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353170568533933\",\"model\":\"SM-M135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7987\"}'\'' -e'"" [2025-08-26 20:07:07][353170568533933][4314 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_26ff4be1-1dc2-4396-9bdc-4d82555608ab","id":"QR_26ff4be1-1dc2-4396-9bdc-4d82555608ab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:07:07][353170568533933][4470 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3343 [2025-08-26 20:07:07][353170568533933][4470 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-26 20:07:07][353170568533933][4470 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:10:04][359104250958383][1 ms][INFO] === Request start === [2025-08-26 20:10:04][359104250958383][1 ms][DEBUG] START check_scloud [2025-08-26 20:10:04][359104250958383][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:10:04][359104250958383][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 9788 21369 24640828 195848 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:10:04][359104250958383][310 ms][DEBUG] targetPkg: running [2025-08-26 20:10:04][359104250958383][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 20:10:04][359104250958383][310 ms][DEBUG] START check_boot_completed [2025-08-26 20:10:04][359104250958383][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:10:04][359104250958383][342 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 20:10:04][359104250958383][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:10:04][359104250958383][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 20:10:04][359104250958383][389 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 20:10:04][359104250958383][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 20:10:04][359104250958383][514 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3384\nsuccessfulTxPacketsPerSecond: 0.2393068079463155\nretriedTxPackets: 756\nretriedTxPacketsPerSecond: 0.07312152465026307\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3277\nsuccessfulRxPacketsPerSecond: 0.20939345695302608\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 20:10:04][359104250958383][514 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 20:10:05][359104250958383][935 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.542/202.542/202.542/0.000 ms\n [2025-08-26 20:10:05][359104250958383][935 ms][DEBUG] check_internet: online [2025-08-26 20:10:05][359104250958383][936 ms][DEBUG] rawBody.length=1149 [2025-08-26 20:10:05][359104250958383][936 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359104250958383\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8081\"}'\'' -e'"" [2025-08-26 20:10:05][359104250958383][936 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:10:05][359104250958383][936 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359104250958383\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8081\"}'\'' -e'"" [2025-08-26 20:10:10][359104250958383][6293 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_895352b1-2940-4699-8cd8-253a2f8daf55","id":"QR_895352b1-2940-4699-8cd8-253a2f8daf55","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:10:10][359104250958383][6449 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-08-26 20:10:10][359104250958383][6450 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-26 20:10:10][359104250958383][6450 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:11:04][350722246153311][0 ms][INFO] === Request start === [2025-08-26 20:11:04][350722246153311][1 ms][DEBUG] START check_scloud [2025-08-26 20:11:04][350722246153311][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:11:04][350722246153311][357 ms][DEBUG] SU: done in 356 ms; outu0_a118 9788 21369 24780220 207716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:11:04][350722246153311][357 ms][DEBUG] targetPkg: running [2025-08-26 20:11:04][350722246153311][357 ms][DEBUG] END check_scloud in 356 ms [2025-08-26 20:11:04][350722246153311][357 ms][DEBUG] START check_boot_completed [2025-08-26 20:11:04][350722246153311][357 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:11:04][350722246153311][403 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 20:11:04][350722246153311][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:11:04][350722246153311][497 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 20:11:04][350722246153311][497 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 20:11:04][350722246153311][497 ms][DEBUG] rawBody.length=1149 [2025-08-26 20:11:04][350722246153311][497 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350722246153311\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6485\"}'\'' -e'"" [2025-08-26 20:11:04][350722246153311][497 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:11:04][350722246153311][497 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350722246153311\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6485\"}'\'' -e'"" [2025-08-26 20:11:09][350722246153311][5324 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-26 20:11:09][350722246153311][5480 ms][DEBUG] proc_open done in 4983 ms; code=255; res.len=101 [2025-08-26 20:11:09][350722246153311][5480 ms][DEBUG] END runCmdUntilRes#1 in 4983 ms [2025-08-26 20:11:09][350722246153311][5480 ms][INFO] SUCCESS response from frida (len=101) [2025-08-26 20:11:09][][0 ms][INFO] === Request start === [2025-08-26 20:11:09][][1 ms][DEBUG] START check_scloud [2025-08-26 20:11:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:11:10][][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 9788 21369 24900296 170476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:11:10][][315 ms][DEBUG] targetPkg: running [2025-08-26 20:11:10][][315 ms][DEBUG] END check_scloud in 315 ms [2025-08-26 20:11:10][][315 ms][DEBUG] START check_boot_completed [2025-08-26 20:11:10][][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:11:10][][346 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 20:11:10][][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:11:10][][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 20:11:10][][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 20:11:10][][393 ms][DEBUG] rawBody.length=1130 [2025-08-26 20:11:10][][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCY11NYTKJ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7328\"}'\'' -e'"" [2025-08-26 20:11:10][][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:11:10][][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCY11NYTKJ\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7328\"}'\'' -e'"" [2025-08-26 20:11:14][][4705 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-26 20:11:14][][4861 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=101 [2025-08-26 20:11:14][][4861 ms][DEBUG] END runCmdUntilRes#1 in 4468 ms [2025-08-26 20:11:14][][4861 ms][INFO] SUCCESS response from frida (len=101) [2025-08-26 20:12:01][352600225446054][0 ms][INFO] === Request start === [2025-08-26 20:12:01][352600225446054][1 ms][DEBUG] START check_scloud [2025-08-26 20:12:01][352600225446054][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:12:02][352600225446054][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 9788 21369 24999816 182728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:12:02][352600225446054][256 ms][DEBUG] targetPkg: running [2025-08-26 20:12:02][352600225446054][256 ms][DEBUG] END check_scloud in 256 ms [2025-08-26 20:12:02][352600225446054][256 ms][DEBUG] START check_boot_completed [2025-08-26 20:12:02][352600225446054][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:12:02][352600225446054][286 ms][DEBUG] ADB: done in 30 ms; out [2025-08-26 20:12:02][352600225446054][286 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:12:02][352600225446054][333 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 20:12:02][352600225446054][333 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-26 20:12:02][352600225446054][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 20:12:02][352600225446054][443 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3384\nsuccessfulTxPacketsPerSecond: 0.2393068079463155\nretriedTxPackets: 756\nretriedTxPacketsPerSecond: 0.07312152465026307\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3277\nsuccessfulRxPacketsPerSecond: 0.20939345695302608\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 20:12:02][352600225446054][443 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 20:12:02][352600225446054][708 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=154 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 154.749/154.749/154.749/0.000 ms\n [2025-08-26 20:12:02][352600225446054][708 ms][DEBUG] check_internet: online [2025-08-26 20:12:02][352600225446054][708 ms][DEBUG] rawBody.length=1148 [2025-08-26 20:12:02][352600225446054][708 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600225446054\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9515\"}'\'' -e'"" [2025-08-26 20:12:02][352600225446054][708 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:12:02][352600225446054][708 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600225446054\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9515\"}'\'' -e'"" [2025-08-26 20:12:06][352600225446054][4723 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d348495f-4352-422e-b09e-7d24474b4eb6","id":"QR_d348495f-4352-422e-b09e-7d24474b4eb6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:12:06][352600225446054][4879 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3343 [2025-08-26 20:12:06][352600225446054][4879 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-08-26 20:12:06][352600225446054][4879 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:12:08][354747956563009][1 ms][INFO] === Request start === [2025-08-26 20:12:08][354747956563009][1 ms][DEBUG] START check_scloud [2025-08-26 20:12:08][354747956563009][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:12:08][354747956563009][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 9788 21369 25166992 193020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:12:08][354747956563009][301 ms][DEBUG] targetPkg: running [2025-08-26 20:12:08][354747956563009][302 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 20:12:08][354747956563009][302 ms][DEBUG] START check_boot_completed [2025-08-26 20:12:08][354747956563009][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:12:08][354747956563009][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 20:12:08][354747956563009][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:12:08][354747956563009][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 20:12:08][354747956563009][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 20:12:08][354747956563009][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 20:12:08][354747956563009][505 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3384\nsuccessfulTxPacketsPerSecond: 0.2393068079463155\nretriedTxPackets: 756\nretriedTxPacketsPerSecond: 0.07312152465026307\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3277\nsuccessfulRxPacketsPerSecond: 0.20939345695302608\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 20:12:08][354747956563009][505 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 20:12:09][354747956563009][817 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=207 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 207.028/207.028/207.028/0.000 ms\n [2025-08-26 20:12:09][354747956563009][817 ms][DEBUG] check_internet: online [2025-08-26 20:12:09][354747956563009][817 ms][DEBUG] rawBody.length=1148 [2025-08-26 20:12:09][354747956563009][817 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747956563009\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7588\"}'\'' -e'"" [2025-08-26 20:12:09][354747956563009][817 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:12:09][354747956563009][817 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747956563009\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7588\"}'\'' -e'"" [2025-08-26 20:12:13][354747956563009][5066 ms][DEBUG] proc_open done in 4249 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-26 20:12:13][354747956563009][5066 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-26 20:12:13][354747956563009][5066 ms][WARN] Detected error: Process with pid 9788 either refused to load frida-agent, or terminated during injectionProcess with pid 9788 either refused to load frida-agent, or terminated during injection\r\n [2025-08-26 20:12:13][354747956563009][5066 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-08-26 20:12:13][354747956563009][5347 ms][DEBUG] SU: done in 281 ms; outsystem 21633 21369 12702324 191240 ep_poll 0 S system_server\n [2025-08-26 20:12:13][354747956563009][5347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 20:12:13][354747956563009][5488 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 20:12:13][354747956563009][5488 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 20:12:13][354747956563009][5488 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 20:12:13][354747956563009][5628 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 20:12:13][354747956563009][5628 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 20:12:14][354747956563009][5831 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 20:12:16][354747956563009][7846 ms][DEBUG] START check_boot_completed [2025-08-26 20:12:16][354747956563009][7846 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:12:16][354747956563009][7893 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 20:12:16][354747956563009][7893 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:12:16][354747956563009][7940 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 20:12:16][354747956563009][7940 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 20:12:19][354747956563009][10955 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 20:12:19][354747956563009][10955 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747956563009\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7588\"}'\'' -e'"" [2025-08-26 20:12:22][354747956563009][14407 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_668f6627-40db-434b-875b-3d667474ec53","id":"QR_668f6627-40db-434b-875b-3d667474ec53","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:12:22][354747956563009][14564 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=3343 [2025-08-26 20:12:22][354747956563009][14564 ms][DEBUG] END runCmdUntilRes#2 in 3609 ms [2025-08-26 20:12:22][354747956563009][14564 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:13:03][350896382956602][1 ms][INFO] === Request start === [2025-08-26 20:13:03][350896382956602][1 ms][DEBUG] START check_scloud [2025-08-26 20:13:03][350896382956602][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:13:04][350896382956602][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 12544 21369 23831444 126856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:13:04][350896382956602][301 ms][DEBUG] targetPkg: running [2025-08-26 20:13:04][350896382956602][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 20:13:04][350896382956602][301 ms][DEBUG] START check_boot_completed [2025-08-26 20:13:04][350896382956602][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:13:04][350896382956602][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 20:13:04][350896382956602][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:13:04][350896382956602][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 20:13:04][350896382956602][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 20:13:04][350896382956602][395 ms][DEBUG] rawBody.length=1149 [2025-08-26 20:13:04][350896382956602][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350896382956602\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9276\"}'\'' -e'"" [2025-08-26 20:13:04][350896382956602][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:13:04][350896382956602][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350896382956602\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9276\"}'\'' -e'"" [2025-08-26 20:13:09][350896382956602][5409 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ae6391f-a753-464b-b3b8-36e57b03f9ec","id":"QR_5ae6391f-a753-464b-b3b8-36e57b03f9ec","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:13:09][350896382956602][5565 ms][DEBUG] proc_open done in 5170 ms; code=255; res.len=3343 [2025-08-26 20:13:09][350896382956602][5565 ms][DEBUG] END runCmdUntilRes#1 in 5170 ms [2025-08-26 20:13:09][350896382956602][5565 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:17:05][350792524795000][1 ms][INFO] === Request start === [2025-08-26 20:17:05][350792524795000][1 ms][DEBUG] START check_scloud [2025-08-26 20:17:05][350792524795000][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:17:05][350792524795000][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 12544 21369 23997824 137488 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:17:05][350792524795000][317 ms][DEBUG] targetPkg: running [2025-08-26 20:17:05][350792524795000][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-26 20:17:05][350792524795000][317 ms][DEBUG] START check_boot_completed [2025-08-26 20:17:05][350792524795000][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:17:05][350792524795000][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 20:17:05][350792524795000][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:17:05][350792524795000][426 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 20:17:05][350792524795000][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 20:17:05][350792524795000][426 ms][DEBUG] rawBody.length=1149 [2025-08-26 20:17:05][350792524795000][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792524795000\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6891\"}'\'' -e'"" [2025-08-26 20:17:05][350792524795000][426 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:17:05][350792524795000][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792524795000\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6891\"}'\'' -e'"" [2025-08-26 20:17:10][350792524795000][5581 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a8d515d5-e014-4bd8-afdc-2c7ce2506150","id":"QR_a8d515d5-e014-4bd8-afdc-2c7ce2506150","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:17:10][350792524795000][5738 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-08-26 20:17:10][350792524795000][5738 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-08-26 20:17:10][350792524795000][5738 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:17:16][353357977780946][0 ms][INFO] === Request start === [2025-08-26 20:17:16][353357977780946][0 ms][DEBUG] START check_scloud [2025-08-26 20:17:16][353357977780946][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:17:17][353357977780946][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 12544 21369 24148552 149768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:17:17][353357977780946][308 ms][DEBUG] targetPkg: running [2025-08-26 20:17:17][353357977780946][308 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 20:17:17][353357977780946][308 ms][DEBUG] START check_boot_completed [2025-08-26 20:17:17][353357977780946][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:17:17][353357977780946][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 20:17:17][353357977780946][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:17:17][353357977780946][403 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 20:17:17][353357977780946][403 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 20:17:17][353357977780946][403 ms][DEBUG] rawBody.length=1149 [2025-08-26 20:17:17][353357977780946][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353357977780946\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1462\"}'\'' -e'"" [2025-08-26 20:17:17][353357977780946][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:17:17][353357977780946][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353357977780946\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1462\"}'\'' -e'"" [2025-08-26 20:17:21][353357977780946][4885 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0c158054-2393-4060-8351-b846238ae76c","id":"QR_0c158054-2393-4060-8351-b846238ae76c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:17:21][353357977780946][5041 ms][DEBUG] proc_open done in 4637 ms; code=255; res.len=3343 [2025-08-26 20:17:21][353357977780946][5041 ms][DEBUG] END runCmdUntilRes#1 in 4638 ms [2025-08-26 20:17:21][353357977780946][5041 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:18:03][354136921221788][0 ms][INFO] === Request start === [2025-08-26 20:18:03][354136921221788][1 ms][DEBUG] START check_scloud [2025-08-26 20:18:03][354136921221788][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:18:03][354136921221788][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 12544 21369 24239816 161060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:18:03][354136921221788][305 ms][DEBUG] targetPkg: running [2025-08-26 20:18:03][354136921221788][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 20:18:03][354136921221788][305 ms][DEBUG] START check_boot_completed [2025-08-26 20:18:03][354136921221788][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:18:03][354136921221788][350 ms][DEBUG] ADB: done in 45 ms; out [2025-08-26 20:18:03][354136921221788][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:18:03][354136921221788][397 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 20:18:03][354136921221788][397 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-26 20:18:03][354136921221788][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 20:18:03][354136921221788][506 ms][DEBUG] SU: done in 108 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4002\nsuccessfulTxPacketsPerSecond: 21.330521761529457\nretriedTxPackets: 843\nretriedTxPacketsPerSecond: 1.211461473161064\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 3939\nsuccessfulRxPacketsPerSecond: 24.859196223863727\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 20:18:03][354136921221788][506 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 20:18:04][354136921221788][944 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.523/199.523/199.523/0.000 ms\n [2025-08-26 20:18:04][354136921221788][944 ms][DEBUG] check_internet: online [2025-08-26 20:18:04][354136921221788][944 ms][DEBUG] rawBody.length=1148 [2025-08-26 20:18:04][354136921221788][944 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354136921221788\",\"model\":\"SM-X516B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6759\"}'\'' -e'"" [2025-08-26 20:18:04][354136921221788][944 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:18:04][354136921221788][944 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354136921221788\",\"model\":\"SM-X516B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6759\"}'\'' -e'"" [2025-08-26 20:18:07][354136921221788][4677 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_33d1fef7-a84d-45a3-9573-1c5a424409d3","id":"QR_33d1fef7-a84d-45a3-9573-1c5a424409d3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:18:08][354136921221788][4833 ms][DEBUG] proc_open done in 3888 ms; code=255; res.len=3343 [2025-08-26 20:18:08][354136921221788][4833 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-26 20:18:08][354136921221788][4833 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:26:04][352294624509876][1 ms][INFO] === Request start === [2025-08-26 20:26:04][352294624509876][1 ms][DEBUG] START check_scloud [2025-08-26 20:26:04][352294624509876][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:26:05][352294624509876][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 12544 21369 24344416 172692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:26:05][352294624509876][314 ms][DEBUG] targetPkg: running [2025-08-26 20:26:05][352294624509876][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-26 20:26:05][352294624509876][314 ms][DEBUG] START check_boot_completed [2025-08-26 20:26:05][352294624509876][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:26:05][352294624509876][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 20:26:05][352294624509876][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:26:05][352294624509876][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 20:26:05][352294624509876][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 20:26:05][352294624509876][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 20:26:05][352294624509876][517 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4251\nsuccessfulTxPacketsPerSecond: 0.8551852042656226\nretriedTxPackets: 954\nretriedTxPacketsPerSecond: 0.3812271392509402\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4125\nsuccessfulRxPacketsPerSecond: 0.6388130441502241\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 20:26:05][352294624509876][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 20:26:05][352294624509876][907 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.218/200.218/200.218/0.000 ms\n [2025-08-26 20:26:05][352294624509876][908 ms][DEBUG] check_internet: online [2025-08-26 20:26:05][352294624509876][908 ms][DEBUG] rawBody.length=1148 [2025-08-26 20:26:05][352294624509876][908 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352294624509876\",\"model\":\"SM-P619\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"UPO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5164\"}'\'' -e'"" [2025-08-26 20:26:05][352294624509876][908 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:26:05][352294624509876][908 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352294624509876\",\"model\":\"SM-P619\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"UPO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5164\"}'\'' -e'"" [2025-08-26 20:26:10][352294624509876][5859 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9f81171-04dc-459b-a7e2-2929c111dcc7","id":"QR_d9f81171-04dc-459b-a7e2-2929c111dcc7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:26:10][352294624509876][6016 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-08-26 20:26:10][352294624509876][6016 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-08-26 20:26:10][352294624509876][6016 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:26:16][359097841162772][0 ms][INFO] === Request start === [2025-08-26 20:26:16][359097841162772][1 ms][DEBUG] START check_scloud [2025-08-26 20:26:16][359097841162772][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:26:17][359097841162772][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 12544 21369 24531060 181152 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:26:17][359097841162772][258 ms][DEBUG] targetPkg: running [2025-08-26 20:26:17][359097841162772][258 ms][DEBUG] END check_scloud in 258 ms [2025-08-26 20:26:17][359097841162772][258 ms][DEBUG] START check_boot_completed [2025-08-26 20:26:17][359097841162772][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:26:17][359097841162772][305 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 20:26:17][359097841162772][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:26:17][359097841162772][352 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 20:26:17][359097841162772][352 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 20:26:17][359097841162772][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 20:26:17][359097841162772][445 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4251\nsuccessfulTxPacketsPerSecond: 0.8551852042656226\nretriedTxPackets: 954\nretriedTxPacketsPerSecond: 0.3812271392509402\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4125\nsuccessfulRxPacketsPerSecond: 0.6388130441502241\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 20:26:17][359097841162772][446 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 20:26:17][359097841162772][742 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=160 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 160.517/160.517/160.517/0.000 ms\n [2025-08-26 20:26:17][359097841162772][742 ms][DEBUG] check_internet: online [2025-08-26 20:26:17][359097841162772][743 ms][DEBUG] rawBody.length=1149 [2025-08-26 20:26:17][359097841162772][743 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359097841162772\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2902\"}'\'' -e'"" [2025-08-26 20:26:17][359097841162772][743 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:26:17][359097841162772][743 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359097841162772\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2902\"}'\'' -e'"" [2025-08-26 20:26:22][359097841162772][5382 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_45917105-b429-4ca7-8c54-4e417865cc2d","id":"QR_45917105-b429-4ca7-8c54-4e417865cc2d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:26:22][359097841162772][5538 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-08-26 20:26:22][359097841162772][5538 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-08-26 20:26:22][359097841162772][5538 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:27:04][353384831738746][0 ms][INFO] === Request start === [2025-08-26 20:27:04][353384831738746][1 ms][DEBUG] START check_scloud [2025-08-26 20:27:04][353384831738746][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:27:05][353384831738746][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 12544 21369 24667444 192228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:27:05][353384831738746][308 ms][DEBUG] targetPkg: running [2025-08-26 20:27:05][353384831738746][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-26 20:27:05][353384831738746][308 ms][DEBUG] START check_boot_completed [2025-08-26 20:27:05][353384831738746][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:27:05][353384831738746][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 20:27:05][353384831738746][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:27:05][353384831738746][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 20:27:05][353384831738746][401 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 20:27:05][353384831738746][401 ms][DEBUG] rawBody.length=1149 [2025-08-26 20:27:05][353384831738746][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353384831738746\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9255\"}'\'' -e'"" [2025-08-26 20:27:05][353384831738746][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:27:05][353384831738746][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353384831738746\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9255\"}'\'' -e'"" [2025-08-26 20:27:10][353384831738746][5884 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_32e481c5-a2c0-4d05-9897-e193a03d0d08","id":"QR_32e481c5-a2c0-4d05-9897-e193a03d0d08","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:27:10][353384831738746][6040 ms][DEBUG] proc_open done in 5639 ms; code=255; res.len=3343 [2025-08-26 20:27:10][353384831738746][6040 ms][DEBUG] END runCmdUntilRes#1 in 5639 ms [2025-08-26 20:27:10][353384831738746][6041 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:33:30][350551931778029][1 ms][INFO] === Request start === [2025-08-26 20:33:30][350551931778029][1 ms][DEBUG] START check_scloud [2025-08-26 20:33:30][350551931778029][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:33:31][350551931778029][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 12544 21369 24778192 203100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:33:31][350551931778029][314 ms][DEBUG] targetPkg: running [2025-08-26 20:33:31][350551931778029][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-26 20:33:31][350551931778029][314 ms][DEBUG] START check_boot_completed [2025-08-26 20:33:31][350551931778029][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:33:31][350551931778029][346 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 20:33:31][350551931778029][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:33:31][350551931778029][394 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 20:33:31][350551931778029][394 ms][DEBUG] END check_boot_completed in 80 ms [2025-08-26 20:33:31][350551931778029][394 ms][DEBUG] rawBody.length=1149 [2025-08-26 20:33:31][350551931778029][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350551931778029\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2206\"}'\'' -e'"" [2025-08-26 20:33:31][350551931778029][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:33:31][350551931778029][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350551931778029\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2206\"}'\'' -e'"" [2025-08-26 20:33:36][350551931778029][5579 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4568ceb6-2a40-46b0-81a0-14469e668097","id":"QR_4568ceb6-2a40-46b0-81a0-14469e668097","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:33:36][350551931778029][5735 ms][DEBUG] proc_open done in 5341 ms; code=255; res.len=3343 [2025-08-26 20:33:36][350551931778029][5735 ms][DEBUG] END runCmdUntilRes#1 in 5341 ms [2025-08-26 20:33:36][350551931778029][5735 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:35:05][350599270075978][0 ms][INFO] === Request start === [2025-08-26 20:35:05][350599270075978][0 ms][DEBUG] START check_scloud [2025-08-26 20:35:05][350599270075978][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:35:05][350599270075978][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 12544 21369 24935936 195336 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:35:05][350599270075978][261 ms][DEBUG] targetPkg: running [2025-08-26 20:35:05][350599270075978][261 ms][DEBUG] END check_scloud in 261 ms [2025-08-26 20:35:05][350599270075978][261 ms][DEBUG] START check_boot_completed [2025-08-26 20:35:05][350599270075978][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:35:05][350599270075978][308 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 20:35:05][350599270075978][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:35:05][350599270075978][401 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 20:35:05][350599270075978][401 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-26 20:35:05][350599270075978][402 ms][DEBUG] rawBody.length=1149 [2025-08-26 20:35:05][350599270075978][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350599270075978\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6486\"}'\'' -e'"" [2025-08-26 20:35:05][350599270075978][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:35:05][350599270075978][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350599270075978\",\"model\":\"SM-S911B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6486\"}'\'' -e'"" [2025-08-26 20:35:11][350599270075978][5775 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_61e370a7-5da3-443c-af2e-c795411ee6f7","id":"QR_61e370a7-5da3-443c-af2e-c795411ee6f7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:35:11][350599270075978][5931 ms][DEBUG] proc_open done in 5529 ms; code=255; res.len=3343 [2025-08-26 20:35:11][350599270075978][5931 ms][DEBUG] END runCmdUntilRes#1 in 5529 ms [2025-08-26 20:35:11][350599270075978][5931 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:36:04][350350683054113][1 ms][INFO] === Request start === [2025-08-26 20:36:04][350350683054113][1 ms][DEBUG] START check_scloud [2025-08-26 20:36:04][350350683054113][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:36:05][350350683054113][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 12544 21369 25069284 199172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:36:05][350350683054113][312 ms][DEBUG] targetPkg: running [2025-08-26 20:36:05][350350683054113][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-26 20:36:05][350350683054113][312 ms][DEBUG] START check_boot_completed [2025-08-26 20:36:05][350350683054113][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:36:05][350350683054113][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 20:36:05][350350683054113][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:36:05][350350683054113][422 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 20:36:05][350350683054113][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 20:36:05][350350683054113][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 20:36:05][350350683054113][562 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4475\nsuccessfulTxPacketsPerSecond: 0.34716482063150933\nretriedTxPackets: 1038\nretriedTxPacketsPerSecond: 0.11241527525210779\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4316\nsuccessfulRxPacketsPerSecond: 0.3174078360059514\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 20:36:05][350350683054113][562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 20:36:05][350350683054113][1015 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.039/202.039/202.039/0.000 ms\n [2025-08-26 20:36:05][350350683054113][1015 ms][DEBUG] check_internet: online [2025-08-26 20:36:05][350350683054113][1015 ms][DEBUG] rawBody.length=1149 [2025-08-26 20:36:05][350350683054113][1015 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350350683054113\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6150\"}'\'' -e'"" [2025-08-26 20:36:05][350350683054113][1015 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:36:05][350350683054113][1016 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350350683054113\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6150\"}'\'' -e'"" [2025-08-26 20:36:10][350350683054113][5654 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ff03e650-efea-4607-9fc6-3a17cbe0c3c5","id":"QR_ff03e650-efea-4607-9fc6-3a17cbe0c3c5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:36:10][350350683054113][5811 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-08-26 20:36:10][350350683054113][5811 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-08-26 20:36:10][350350683054113][5811 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:38:03][353684144271917][0 ms][INFO] === Request start === [2025-08-26 20:38:03][353684144271917][1 ms][DEBUG] START check_scloud [2025-08-26 20:38:03][353684144271917][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:38:04][353684144271917][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 12544 21369 25185224 210820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:38:04][353684144271917][321 ms][DEBUG] targetPkg: running [2025-08-26 20:38:04][353684144271917][321 ms][DEBUG] END check_scloud in 321 ms [2025-08-26 20:38:04][353684144271917][321 ms][DEBUG] START check_boot_completed [2025-08-26 20:38:04][353684144271917][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:38:04][353684144271917][368 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 20:38:04][353684144271917][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:38:04][353684144271917][415 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 20:38:04][353684144271917][415 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 20:38:04][353684144271917][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 20:38:04][353684144271917][540 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4475\nsuccessfulTxPacketsPerSecond: 0.34716482063150933\nretriedTxPackets: 1038\nretriedTxPacketsPerSecond: 0.11241527525210779\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4316\nsuccessfulRxPacketsPerSecond: 0.3174078360059514\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 20:38:04][353684144271917][540 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 20:38:04][353684144271917][994 ms][DEBUG] SU: done in 454 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.663/200.663/200.663/0.000 ms\n [2025-08-26 20:38:04][353684144271917][994 ms][DEBUG] check_internet: online [2025-08-26 20:38:04][353684144271917][994 ms][DEBUG] rawBody.length=1148 [2025-08-26 20:38:04][353684144271917][994 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684144271917\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7858\"}'\'' -e'"" [2025-08-26 20:38:04][353684144271917][994 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:38:04][353684144271917][995 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684144271917\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7858\"}'\'' -e'"" [2025-08-26 20:38:08][353684144271917][4820 ms][DEBUG] proc_open done in 3826 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 20:38:08][353684144271917][4820 ms][DEBUG] END runCmdUntilRes#1 in 3826 ms [2025-08-26 20:38:08][353684144271917][4820 ms][WARN] Detected error: Process with pid 12544 either refused to load frida-agent, or terminated during injectionProcess with pid 12544 either refused to load frida-agent, or terminated during injection\r\n [2025-08-26 20:38:08][353684144271917][4821 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-08-26 20:38:08][353684144271917][5101 ms][DEBUG] SU: done in 281 ms; outsystem 21633 21369 12795332 199540 ep_poll 0 S system_server\n [2025-08-26 20:38:08][353684144271917][5101 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 20:38:09][353684144271917][5242 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 20:38:09][353684144271917][5242 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 20:38:09][353684144271917][5242 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 20:38:09][353684144271917][5383 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 20:38:09][353684144271917][5383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 20:38:09][353684144271917][5570 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 20:38:11][353684144271917][7585 ms][DEBUG] START check_boot_completed [2025-08-26 20:38:11][353684144271917][7585 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:38:11][353684144271917][7632 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 20:38:11][353684144271917][7632 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:38:11][353684144271917][7679 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 20:38:11][353684144271917][7679 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 20:38:14][353684144271917][10694 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 20:38:14][353684144271917][10694 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684144271917\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7858\"}'\'' -e'"" [2025-08-26 20:38:18][353684144271917][14630 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6a25ecc4-c5b1-470f-a653-32237c146a65","id":"QR_6a25ecc4-c5b1-470f-a653-32237c146a65","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:38:18][353684144271917][14786 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-08-26 20:38:18][353684144271917][14786 ms][DEBUG] END runCmdUntilRes#2 in 4093 ms [2025-08-26 20:38:18][353684144271917][14786 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:39:03][350805650217985][1 ms][INFO] === Request start === [2025-08-26 20:39:03][350805650217985][1 ms][DEBUG] START check_scloud [2025-08-26 20:39:03][350805650217985][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:39:03][350805650217985][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 15326 21369 23814544 127276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:39:03][350805650217985][284 ms][DEBUG] targetPkg: running [2025-08-26 20:39:03][350805650217985][284 ms][DEBUG] END check_scloud in 283 ms [2025-08-26 20:39:03][350805650217985][284 ms][DEBUG] START check_boot_completed [2025-08-26 20:39:03][350805650217985][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:39:03][350805650217985][331 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 20:39:03][350805650217985][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:39:03][350805650217985][393 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 20:39:03][350805650217985][393 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 20:39:03][350805650217985][393 ms][DEBUG] rawBody.length=1148 [2025-08-26 20:39:03][350805650217985][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650217985\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8308\"}'\'' -e'"" [2025-08-26 20:39:03][350805650217985][394 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:39:03][350805650217985][394 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650217985\",\"model\":\"SM-E135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8308\"}'\'' -e'"" [2025-08-26 20:39:07][350805650217985][3924 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_14292565-f95e-4203-b9d8-375c127ef8af","id":"QR_14292565-f95e-4203-b9d8-375c127ef8af","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:39:07][350805650217985][4080 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=3343 [2025-08-26 20:39:07][350805650217985][4080 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-08-26 20:39:07][350805650217985][4080 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:39:11][359706681011432][0 ms][INFO] === Request start === [2025-08-26 20:39:11][359706681011432][1 ms][DEBUG] START check_scloud [2025-08-26 20:39:11][359706681011432][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:39:11][359706681011432][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 15326 21369 23967128 137588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:39:11][359706681011432][273 ms][DEBUG] targetPkg: running [2025-08-26 20:39:11][359706681011432][273 ms][DEBUG] END check_scloud in 272 ms [2025-08-26 20:39:11][359706681011432][273 ms][DEBUG] START check_boot_completed [2025-08-26 20:39:11][359706681011432][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:39:11][359706681011432][320 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 20:39:11][359706681011432][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:39:11][359706681011432][382 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 20:39:11][359706681011432][382 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 20:39:11][359706681011432][382 ms][DEBUG] rawBody.length=1149 [2025-08-26 20:39:11][359706681011432][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359706681011432\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1206\"}'\'' -e'"" [2025-08-26 20:39:11][359706681011432][382 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:39:11][359706681011432][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359706681011432\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1206\"}'\'' -e'"" [2025-08-26 20:39:16][359706681011432][5443 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c60f6a22-9a18-4c0a-b48a-515d6d173830","id":"QR_c60f6a22-9a18-4c0a-b48a-515d6d173830","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:39:17][359706681011432][5599 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-08-26 20:39:17][359706681011432][5599 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-08-26 20:39:17][359706681011432][5599 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:42:02][353607430214929][1 ms][INFO] === Request start === [2025-08-26 20:42:02][353607430214929][1 ms][DEBUG] START check_scloud [2025-08-26 20:42:02][353607430214929][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:42:03][353607430214929][303 ms][DEBUG] SU: done in 301 ms; outu0_a118 15326 21369 24090984 149676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:42:03][353607430214929][303 ms][DEBUG] targetPkg: running [2025-08-26 20:42:03][353607430214929][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 20:42:03][353607430214929][303 ms][DEBUG] START check_boot_completed [2025-08-26 20:42:03][353607430214929][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:42:03][353607430214929][334 ms][DEBUG] ADB: done in 30 ms; out [2025-08-26 20:42:03][353607430214929][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:42:03][353607430214929][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 20:42:03][353607430214929][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 20:42:03][353607430214929][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 20:42:03][353607430214929][490 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4653\nsuccessfulTxPacketsPerSecond: 0.44009551008942366\nretriedTxPackets: 1093\nretriedTxPacketsPerSecond: 0.12172854534388314\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4475\nsuccessfulRxPacketsPerSecond: 0.4026405730605365\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 20:42:03][353607430214929][490 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 20:42:03][353607430214929][818 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=211 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 211.012/211.012/211.012/0.000 ms\n [2025-08-26 20:42:03][353607430214929][818 ms][DEBUG] check_internet: online [2025-08-26 20:42:03][353607430214929][818 ms][DEBUG] rawBody.length=1148 [2025-08-26 20:42:03][353607430214929][818 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353607430214929\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5282\"}'\'' -e'"" [2025-08-26 20:42:03][353607430214929][818 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:42:03][353607430214929][818 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353607430214929\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5282\"}'\'' -e'"" [2025-08-26 20:42:07][353607430214929][4676 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8dfb80f4-8f4d-4d42-8d1c-699085de94c7","id":"QR_8dfb80f4-8f4d-4d42-8d1c-699085de94c7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:42:07][353607430214929][4833 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-26 20:42:07][353607430214929][4833 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-26 20:42:07][353607430214929][4833 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:43:04][355100980937733][0 ms][INFO] === Request start === [2025-08-26 20:43:04][355100980937733][1 ms][DEBUG] START check_scloud [2025-08-26 20:43:04][355100980937733][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:43:05][355100980937733][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 15326 21369 24227276 160536 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:43:05][355100980937733][307 ms][DEBUG] targetPkg: running [2025-08-26 20:43:05][355100980937733][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 20:43:05][355100980937733][307 ms][DEBUG] START check_boot_completed [2025-08-26 20:43:05][355100980937733][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:43:05][355100980937733][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 20:43:05][355100980937733][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:43:05][355100980937733][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 20:43:05][355100980937733][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 20:43:05][355100980937733][401 ms][DEBUG] rawBody.length=1149 [2025-08-26 20:43:05][355100980937733][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355100980937733\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8210\"}'\'' -e'"" [2025-08-26 20:43:05][355100980937733][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:43:05][355100980937733][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355100980937733\",\"model\":\"SM-A346M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8210\"}'\'' -e'"" [2025-08-26 20:43:10][355100980937733][5634 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_60eca628-1a4c-423d-99a6-b1ebe15ab0ce","id":"QR_60eca628-1a4c-423d-99a6-b1ebe15ab0ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:43:10][355100980937733][5790 ms][DEBUG] proc_open done in 5389 ms; code=255; res.len=3343 [2025-08-26 20:43:10][355100980937733][5790 ms][DEBUG] END runCmdUntilRes#1 in 5389 ms [2025-08-26 20:43:10][355100980937733][5790 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:43:15][351007065021602][0 ms][INFO] === Request start === [2025-08-26 20:43:15][351007065021602][1 ms][DEBUG] START check_scloud [2025-08-26 20:43:15][351007065021602][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:43:16][351007065021602][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 15326 21369 24365400 170856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:43:16][351007065021602][272 ms][DEBUG] targetPkg: running [2025-08-26 20:43:16][351007065021602][272 ms][DEBUG] END check_scloud in 272 ms [2025-08-26 20:43:16][351007065021602][272 ms][DEBUG] START check_boot_completed [2025-08-26 20:43:16][351007065021602][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:43:16][351007065021602][319 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 20:43:16][351007065021602][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:43:16][351007065021602][366 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 20:43:16][351007065021602][366 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 20:43:16][351007065021602][366 ms][DEBUG] rawBody.length=1149 [2025-08-26 20:43:16][351007065021602][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007065021602\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1343\"}'\'' -e'"" [2025-08-26 20:43:16][351007065021602][366 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:43:16][351007065021602][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007065021602\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1343\"}'\'' -e'"" [2025-08-26 20:43:20][351007065021602][5083 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c10adf34-d275-4d27-bbda-41b348d21fb6","id":"QR_c10adf34-d275-4d27-bbda-41b348d21fb6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:43:21][351007065021602][5240 ms][DEBUG] proc_open done in 4873 ms; code=255; res.len=3343 [2025-08-26 20:43:21][351007065021602][5240 ms][DEBUG] END runCmdUntilRes#1 in 4873 ms [2025-08-26 20:43:21][351007065021602][5240 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:45:05][357980446904353][1 ms][INFO] === Request start === [2025-08-26 20:45:05][357980446904353][1 ms][DEBUG] START check_scloud [2025-08-26 20:45:05][357980446904353][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:45:05][357980446904353][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 15326 21369 24497496 182908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:45:05][357980446904353][310 ms][DEBUG] targetPkg: running [2025-08-26 20:45:05][357980446904353][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-26 20:45:05][357980446904353][310 ms][DEBUG] START check_boot_completed [2025-08-26 20:45:05][357980446904353][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:45:05][357980446904353][357 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 20:45:05][357980446904353][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:45:05][357980446904353][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 20:45:05][357980446904353][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 20:45:05][357980446904353][403 ms][DEBUG] rawBody.length=1149 [2025-08-26 20:45:05][357980446904353][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980446904353\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5201\"}'\'' -e'"" [2025-08-26 20:45:05][357980446904353][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:45:05][357980446904353][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980446904353\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5201\"}'\'' -e'"" [2025-08-26 20:45:10][357980446904353][5355 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb44346e-625d-4962-87ae-6524d57d4716","id":"QR_eb44346e-625d-4962-87ae-6524d57d4716","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:45:10][357980446904353][5511 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3343 [2025-08-26 20:45:10][357980446904353][5511 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-08-26 20:45:10][357980446904353][5511 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:46:04][350962630893458][0 ms][INFO] === Request start === [2025-08-26 20:46:04][350962630893458][1 ms][DEBUG] START check_scloud [2025-08-26 20:46:04][350962630893458][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:46:04][350962630893458][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 15326 21369 24605116 193832 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:46:04][350962630893458][276 ms][DEBUG] targetPkg: running [2025-08-26 20:46:04][350962630893458][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-26 20:46:04][350962630893458][276 ms][DEBUG] START check_boot_completed [2025-08-26 20:46:04][350962630893458][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:46:04][350962630893458][323 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 20:46:04][350962630893458][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:46:04][350962630893458][401 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 20:46:04][350962630893458][401 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 20:46:04][350962630893458][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 20:46:04][350962630893458][512 ms][DEBUG] SU: done in 111 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4685\nsuccessfulTxPacketsPerSecond: 0.20151133501259447\nretriedTxPackets: 1104\nretriedTxPacketsPerSecond: 0.06926952141057935\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4504\nsuccessfulRxPacketsPerSecond: 0.18261964735516373\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 20:46:04][350962630893458][513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 20:46:05][350962630893458][995 ms][DEBUG] SU: done in 482 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.776/202.776/202.776/0.000 ms\n [2025-08-26 20:46:05][350962630893458][995 ms][DEBUG] check_internet: online [2025-08-26 20:46:05][350962630893458][995 ms][DEBUG] rawBody.length=1149 [2025-08-26 20:46:05][350962630893458][995 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962630893458\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1630\"}'\'' -e'"" [2025-08-26 20:46:05][350962630893458][995 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:46:05][350962630893458][995 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350962630893458\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1630\"}'\'' -e'"" [2025-08-26 20:46:09][350962630893458][5462 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fe24d531-4886-4697-a91b-3bc5fd1f0660","id":"QR_fe24d531-4886-4697-a91b-3bc5fd1f0660","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:46:09][350962630893458][5618 ms][DEBUG] proc_open done in 4623 ms; code=255; res.len=3343 [2025-08-26 20:46:09][350962630893458][5618 ms][DEBUG] END runCmdUntilRes#1 in 4623 ms [2025-08-26 20:46:09][350962630893458][5618 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:48:04][359590188566928][1 ms][INFO] === Request start === [2025-08-26 20:48:04][359590188566928][1 ms][DEBUG] START check_scloud [2025-08-26 20:48:04][359590188566928][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:48:05][359590188566928][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 15326 21369 24719008 205556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:48:05][359590188566928][301 ms][DEBUG] targetPkg: running [2025-08-26 20:48:05][359590188566928][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-26 20:48:05][359590188566928][301 ms][DEBUG] START check_boot_completed [2025-08-26 20:48:05][359590188566928][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:48:05][359590188566928][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 20:48:05][359590188566928][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:48:05][359590188566928][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 20:48:05][359590188566928][394 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 20:48:05][359590188566928][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 20:48:05][359590188566928][535 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4805\nsuccessfulTxPacketsPerSecond: 0.39171138705002156\nretriedTxPackets: 1152\nretriedTxPacketsPerSecond: 0.15668455482000862\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4603\nsuccessfulRxPacketsPerSecond: 0.3231618943162678\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 20:48:05][359590188566928][535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 20:48:05][359590188566928][880 ms][DEBUG] SU: done in 345 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=131 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 131.269/131.269/131.269/0.000 ms\n [2025-08-26 20:48:05][359590188566928][880 ms][DEBUG] check_internet: online [2025-08-26 20:48:05][359590188566928][880 ms][DEBUG] rawBody.length=1149 [2025-08-26 20:48:05][359590188566928][880 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359590188566928\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AIO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3082\"}'\'' -e'"" [2025-08-26 20:48:05][359590188566928][880 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:48:05][359590188566928][881 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359590188566928\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"AIO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3082\"}'\'' -e'"" [2025-08-26 20:48:10][359590188566928][6158 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_adf1fd17-0087-4ed8-a8bf-af42fa8599bc","id":"QR_adf1fd17-0087-4ed8-a8bf-af42fa8599bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:48:11][359590188566928][6315 ms][DEBUG] proc_open done in 5434 ms; code=255; res.len=3343 [2025-08-26 20:48:11][359590188566928][6315 ms][DEBUG] END runCmdUntilRes#1 in 5434 ms [2025-08-26 20:48:11][359590188566928][6315 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:52:07][357980448148967][1 ms][INFO] === Request start === [2025-08-26 20:52:07][357980448148967][1 ms][DEBUG] START check_scloud [2025-08-26 20:52:07][357980448148967][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:52:08][357980448148967][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 15326 21369 24880004 217004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:52:08][357980448148967][318 ms][DEBUG] targetPkg: running [2025-08-26 20:52:08][357980448148967][318 ms][DEBUG] END check_scloud in 316 ms [2025-08-26 20:52:08][357980448148967][318 ms][DEBUG] START check_boot_completed [2025-08-26 20:52:08][357980448148967][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:52:08][357980448148967][349 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 20:52:08][357980448148967][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:52:08][357980448148967][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 20:52:08][357980448148967][396 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 20:52:08][357980448148967][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 20:52:08][357980448148967][536 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4805\nsuccessfulTxPacketsPerSecond: 0.39171138705002156\nretriedTxPackets: 1152\nretriedTxPacketsPerSecond: 0.15668455482000862\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4603\nsuccessfulRxPacketsPerSecond: 0.3231618943162678\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 20:52:08][357980448148967][537 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 20:52:08][357980448148967][864 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=195 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 195.028/195.028/195.028/0.000 ms\n [2025-08-26 20:52:08][357980448148967][865 ms][DEBUG] check_internet: online [2025-08-26 20:52:08][357980448148967][865 ms][DEBUG] rawBody.length=1149 [2025-08-26 20:52:08][357980448148967][865 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980448148967\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8112\"}'\'' -e'"" [2025-08-26 20:52:08][357980448148967][865 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:52:08][357980448148967][865 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357980448148967\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8112\"}'\'' -e'"" [2025-08-26 20:52:13][357980448148967][5597 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_91ed6fcc-b75c-4f07-9cf7-c007c947958c","id":"QR_91ed6fcc-b75c-4f07-9cf7-c007c947958c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:52:13][357980448148967][5754 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-08-26 20:52:13][357980448148967][5754 ms][DEBUG] END runCmdUntilRes#1 in 4889 ms [2025-08-26 20:52:13][357980448148967][5754 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:53:04][350241601138981][0 ms][INFO] === Request start === [2025-08-26 20:53:04][350241601138981][1 ms][DEBUG] START check_scloud [2025-08-26 20:53:04][350241601138981][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:53:05][350241601138981][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 15326 21369 25036776 229440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:53:05][350241601138981][310 ms][DEBUG] targetPkg: running [2025-08-26 20:53:05][350241601138981][310 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 20:53:05][350241601138981][310 ms][DEBUG] START check_boot_completed [2025-08-26 20:53:05][350241601138981][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:53:05][350241601138981][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 20:53:05][350241601138981][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:53:05][350241601138981][388 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 20:53:05][350241601138981][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 20:53:05][350241601138981][388 ms][DEBUG] rawBody.length=1149 [2025-08-26 20:53:05][350241601138981][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350241601138981\",\"model\":\"SM-G998U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2431\"}'\'' -e'"" [2025-08-26 20:53:05][350241601138981][389 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:53:05][350241601138981][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350241601138981\",\"model\":\"SM-G998U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2431\"}'\'' -e'"" [2025-08-26 20:53:10][350241601138981][5387 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0799a50a-907e-4a43-81eb-cdcca2d6bfc0","id":"QR_0799a50a-907e-4a43-81eb-cdcca2d6bfc0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:53:10][350241601138981][5543 ms][DEBUG] proc_open done in 5154 ms; code=255; res.len=3343 [2025-08-26 20:53:10][350241601138981][5543 ms][DEBUG] END runCmdUntilRes#1 in 5155 ms [2025-08-26 20:53:10][350241601138981][5543 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:55:05][350060483316824][1 ms][INFO] === Request start === [2025-08-26 20:55:05][350060483316824][1 ms][DEBUG] START check_scloud [2025-08-26 20:55:05][350060483316824][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:55:05][350060483316824][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 15326 21369 25197580 240500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:55:05][350060483316824][250 ms][DEBUG] targetPkg: running [2025-08-26 20:55:05][350060483316824][250 ms][DEBUG] END check_scloud in 249 ms [2025-08-26 20:55:05][350060483316824][250 ms][DEBUG] START check_boot_completed [2025-08-26 20:55:05][350060483316824][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:55:05][350060483316824][297 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 20:55:05][350060483316824][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:55:05][350060483316824][344 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 20:55:05][350060483316824][344 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 20:55:05][350060483316824][344 ms][DEBUG] rawBody.length=1149 [2025-08-26 20:55:05][350060483316824][344 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350060483316824\",\"model\":\"SM-S921U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1607\"}'\'' -e'"" [2025-08-26 20:55:05][350060483316824][344 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:55:05][350060483316824][344 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350060483316824\",\"model\":\"SM-S921U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1607\"}'\'' -e'"" [2025-08-26 20:55:09][350060483316824][4141 ms][DEBUG] proc_open done in 3796 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 20:55:09][350060483316824][4141 ms][DEBUG] END runCmdUntilRes#1 in 3797 ms [2025-08-26 20:55:09][350060483316824][4141 ms][WARN] Detected error: Process with pid 15326 either refused to load frida-agent, or terminated during injectionProcess with pid 15326 either refused to load frida-agent, or terminated during injection\r\n [2025-08-26 20:55:09][350060483316824][4141 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-08-26 20:55:09][350060483316824][4437 ms][DEBUG] SU: done in 296 ms; outsystem 21633 21369 12779900 190088 ep_poll 0 S system_server\n [2025-08-26 20:55:09][350060483316824][4437 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 20:55:09][350060483316824][4577 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 20:55:09][350060483316824][4577 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 20:55:09][350060483316824][4577 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 20:55:09][350060483316824][4718 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 20:55:09][350060483316824][4718 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 20:55:10][350060483316824][4874 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 20:55:12][350060483316824][6889 ms][DEBUG] START check_boot_completed [2025-08-26 20:55:12][350060483316824][6889 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:55:12][350060483316824][6936 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 20:55:12][350060483316824][6936 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:55:12][350060483316824][6983 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 20:55:12][350060483316824][6983 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 20:55:15][350060483316824][9998 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 20:55:15][350060483316824][9998 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350060483316824\",\"model\":\"SM-S921U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1607\"}'\'' -e'"" [2025-08-26 20:55:20][350060483316824][15012 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3092dd94-82e1-4695-9da9-413fbac3cbf3","id":"QR_3092dd94-82e1-4695-9da9-413fbac3cbf3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:55:20][350060483316824][15168 ms][DEBUG] proc_open done in 5171 ms; code=255; res.len=3343 [2025-08-26 20:55:20][350060483316824][15168 ms][DEBUG] END runCmdUntilRes#2 in 5171 ms [2025-08-26 20:55:20][350060483316824][15168 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:55:26][356544761438990][0 ms][INFO] === Request start === [2025-08-26 20:55:26][356544761438990][1 ms][DEBUG] START check_scloud [2025-08-26 20:55:26][356544761438990][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:55:26][356544761438990][244 ms][DEBUG] SU: done in 243 ms; outu0_a118 17302 21369 23867652 127256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:55:26][356544761438990][244 ms][DEBUG] targetPkg: running [2025-08-26 20:55:26][356544761438990][244 ms][DEBUG] END check_scloud in 244 ms [2025-08-26 20:55:26][356544761438990][244 ms][DEBUG] START check_boot_completed [2025-08-26 20:55:26][356544761438990][244 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:55:26][356544761438990][291 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 20:55:26][356544761438990][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:55:26][356544761438990][338 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 20:55:26][356544761438990][338 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 20:55:26][356544761438990][338 ms][DEBUG] rawBody.length=1149 [2025-08-26 20:55:26][356544761438990][338 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544761438990\",\"model\":\"SM-G998U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4697\"}'\'' -e'"" [2025-08-26 20:55:26][356544761438990][338 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:55:26][356544761438990][338 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544761438990\",\"model\":\"SM-G998U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4697\"}'\'' -e'"" [2025-08-26 20:55:31][356544761438990][5258 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a93b0fe9-0b41-4667-80a2-5912de59956b","id":"QR_a93b0fe9-0b41-4667-80a2-5912de59956b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:55:31][356544761438990][5415 ms][DEBUG] proc_open done in 5076 ms; code=255; res.len=3343 [2025-08-26 20:55:31][356544761438990][5415 ms][DEBUG] END runCmdUntilRes#1 in 5076 ms [2025-08-26 20:55:31][356544761438990][5415 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:56:05][357242411223909][1 ms][INFO] === Request start === [2025-08-26 20:56:05][357242411223909][1 ms][DEBUG] START check_scloud [2025-08-26 20:56:05][357242411223909][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:56:05][357242411223909][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 17302 21369 23911380 139500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:56:05][357242411223909][297 ms][DEBUG] targetPkg: running [2025-08-26 20:56:05][357242411223909][298 ms][DEBUG] END check_scloud in 296 ms [2025-08-26 20:56:05][357242411223909][298 ms][DEBUG] START check_boot_completed [2025-08-26 20:56:05][357242411223909][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:56:05][357242411223909][344 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 20:56:05][357242411223909][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:56:05][357242411223909][407 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 20:56:05][357242411223909][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 20:56:05][357242411223909][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 20:56:05][357242411223909][532 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4980\nsuccessfulTxPacketsPerSecond: 0.5811173392131339\nretriedTxPackets: 1192\nretriedTxPacketsPerSecond: 0.13282682039157348\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4758\nsuccessfulRxPacketsPerSecond: 0.5147039290173472\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 20:56:05][357242411223909][532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 20:56:06][357242411223909][985 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.599/200.599/200.599/0.000 ms\n [2025-08-26 20:56:06][357242411223909][985 ms][DEBUG] check_internet: online [2025-08-26 20:56:06][357242411223909][985 ms][DEBUG] rawBody.length=1149 [2025-08-26 20:56:06][357242411223909][985 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357242411223909\",\"model\":\"SM-G998U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7418\"}'\'' -e'"" [2025-08-26 20:56:06][357242411223909][985 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:56:06][357242411223909][985 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357242411223909\",\"model\":\"SM-G998U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7418\"}'\'' -e'"" [2025-08-26 20:56:10][357242411223909][5421 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_13e51fa7-140a-48d3-b97f-619c5116797d","id":"QR_13e51fa7-140a-48d3-b97f-619c5116797d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:56:10][357242411223909][5577 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-08-26 20:56:10][357242411223909][5577 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-08-26 20:56:10][357242411223909][5577 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 20:56:16][355123542432092][0 ms][INFO] === Request start === [2025-08-26 20:56:16][355123542432092][1 ms][DEBUG] START check_scloud [2025-08-26 20:56:16][355123542432092][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 20:56:17][355123542432092][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 17302 21369 24045724 150412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 20:56:17][355123542432092][308 ms][DEBUG] targetPkg: running [2025-08-26 20:56:17][355123542432092][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 20:56:17][355123542432092][309 ms][DEBUG] START check_boot_completed [2025-08-26 20:56:17][355123542432092][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 20:56:17][355123542432092][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 20:56:17][355123542432092][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 20:56:17][355123542432092][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 20:56:17][355123542432092][402 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 20:56:17][355123542432092][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 20:56:17][355123542432092][558 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 4980\nsuccessfulTxPacketsPerSecond: 0.5811173392131339\nretriedTxPackets: 1192\nretriedTxPacketsPerSecond: 0.13282682039157348\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4758\nsuccessfulRxPacketsPerSecond: 0.5147039290173472\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 20:56:17][355123542432092][558 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 20:56:17][355123542432092][808 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=156 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 156.013/156.013/156.013/0.000 ms\n [2025-08-26 20:56:17][355123542432092][808 ms][DEBUG] check_internet: online [2025-08-26 20:56:17][355123542432092][808 ms][DEBUG] rawBody.length=1149 [2025-08-26 20:56:17][355123542432092][808 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355123542432092\",\"model\":\"SM-S911U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4224\"}'\'' -e'"" [2025-08-26 20:56:17][355123542432092][808 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 20:56:17][355123542432092][808 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355123542432092\",\"model\":\"SM-S911U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4224\"}'\'' -e'"" [2025-08-26 20:56:22][355123542432092][5541 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ad69b963-7d05-4263-b661-16ab2e2380ed","id":"QR_ad69b963-7d05-4263-b661-16ab2e2380ed","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 20:56:22][355123542432092][5698 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-08-26 20:56:22][355123542432092][5698 ms][DEBUG] END runCmdUntilRes#1 in 4890 ms [2025-08-26 20:56:22][355123542432092][5698 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 21:02:02][354916442663026][1 ms][INFO] === Request start === [2025-08-26 21:02:02][354916442663026][1 ms][DEBUG] START check_scloud [2025-08-26 21:02:02][354916442663026][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:02:02][354916442663026][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 17302 21369 24190124 161952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 21:02:02][354916442663026][314 ms][DEBUG] targetPkg: running [2025-08-26 21:02:02][354916442663026][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-26 21:02:02][354916442663026][314 ms][DEBUG] START check_boot_completed [2025-08-26 21:02:02][354916442663026][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:02:02][354916442663026][345 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 21:02:02][354916442663026][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:02:02][354916442663026][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 21:02:02][354916442663026][393 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 21:02:02][354916442663026][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 21:02:02][354916442663026][517 ms][DEBUG] SU: done in 124 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5099\nsuccessfulTxPacketsPerSecond: 0.013468789397252443\nretriedTxPackets: 1229\nretriedTxPacketsPerSecond: 0.013468789397252443\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4862\nsuccessfulRxPacketsPerSecond: 0.013468789397252443\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 21:02:02][354916442663026][517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 21:02:03][354916442663026][954 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.490/201.490/201.490/0.000 ms\n [2025-08-26 21:02:03][354916442663026][955 ms][DEBUG] check_internet: online [2025-08-26 21:02:03][354916442663026][955 ms][DEBUG] rawBody.length=1148 [2025-08-26 21:02:03][354916442663026][955 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916442663026\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7970\"}'\'' -e'"" [2025-08-26 21:02:03][354916442663026][955 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:02:03][354916442663026][955 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916442663026\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7970\"}'\'' -e'"" [2025-08-26 21:02:07][354916442663026][5234 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fb0f6d01-1780-4cac-bf4b-5de3f0cb1f07","id":"QR_fb0f6d01-1780-4cac-bf4b-5de3f0cb1f07","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 21:02:07][354916442663026][5391 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3343 [2025-08-26 21:02:07][354916442663026][5391 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-08-26 21:02:07][354916442663026][5391 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 21:06:03][350532459579718][1 ms][INFO] === Request start === [2025-08-26 21:06:03][350532459579718][1 ms][DEBUG] START check_scloud [2025-08-26 21:06:03][350532459579718][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:06:04][350532459579718][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 17302 21369 24338768 174168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 21:06:04][350532459579718][299 ms][DEBUG] targetPkg: running [2025-08-26 21:06:04][350532459579718][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-26 21:06:04][350532459579718][299 ms][DEBUG] START check_boot_completed [2025-08-26 21:06:04][350532459579718][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:06:04][350532459579718][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 21:06:04][350532459579718][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:06:04][350532459579718][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 21:06:04][350532459579718][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 21:06:04][350532459579718][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 21:06:04][350532459579718][487 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5141\nsuccessfulTxPacketsPerSecond: 0.1375898838675861\nretriedTxPackets: 1250\nretriedTxPacketsPerSecond: 0.06879494193379306\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4893\nsuccessfulRxPacketsPerSecond: 0.10155443809274213\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 21:06:04][350532459579718][487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 21:06:04][350532459579718][940 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.163/201.163/201.163/0.000 ms\n [2025-08-26 21:06:04][350532459579718][940 ms][DEBUG] check_internet: online [2025-08-26 21:06:04][350532459579718][940 ms][DEBUG] rawBody.length=1148 [2025-08-26 21:06:04][350532459579718][940 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350532459579718\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9988\"}'\'' -e'"" [2025-08-26 21:06:04][350532459579718][940 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:06:04][350532459579718][940 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350532459579718\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9988\"}'\'' -e'"" [2025-08-26 21:06:08][350532459579718][4970 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb6af4fb-9784-4726-a8eb-f74c7e45650c","id":"QR_eb6af4fb-9784-4726-a8eb-f74c7e45650c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 21:06:09][350532459579718][5126 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-26 21:06:09][350532459579718][5126 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-26 21:06:09][350532459579718][5126 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 21:09:03][352635111918683][1 ms][INFO] === Request start === [2025-08-26 21:09:03][352635111918683][1 ms][DEBUG] START check_scloud [2025-08-26 21:09:03][352635111918683][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:09:04][352635111918683][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 17302 21369 24472116 183768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 21:09:04][352635111918683][309 ms][DEBUG] targetPkg: running [2025-08-26 21:09:04][352635111918683][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 21:09:04][352635111918683][309 ms][DEBUG] START check_boot_completed [2025-08-26 21:09:04][352635111918683][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:09:04][352635111918683][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 21:09:04][352635111918683][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:09:04][352635111918683][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 21:09:04][352635111918683][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 21:09:04][352635111918683][387 ms][DEBUG] rawBody.length=1149 [2025-08-26 21:09:04][352635111918683][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352635111918683\",\"model\":\"SM-A715F\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1490\"}'\'' -e'"" [2025-08-26 21:09:04][352635111918683][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:09:04][352635111918683][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352635111918683\",\"model\":\"SM-A715F\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1490\"}'\'' -e'"" [2025-08-26 21:09:09][352635111918683][5417 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fcf0a4fd-cd3a-4e1e-926a-015df1449e7c","id":"QR_fcf0a4fd-cd3a-4e1e-926a-015df1449e7c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 21:09:09][352635111918683][5573 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-08-26 21:09:09][352635111918683][5573 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-08-26 21:09:09][352635111918683][5573 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 21:09:13][350518497419868][0 ms][INFO] === Request start === [2025-08-26 21:09:13][350518497419868][1 ms][DEBUG] START check_scloud [2025-08-26 21:09:13][350518497419868][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:09:13][350518497419868][321 ms][DEBUG] SU: done in 321 ms; outu0_a118 17302 21369 24646972 195628 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 21:09:13][350518497419868][322 ms][DEBUG] targetPkg: running [2025-08-26 21:09:13][350518497419868][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-26 21:09:13][350518497419868][322 ms][DEBUG] START check_boot_completed [2025-08-26 21:09:13][350518497419868][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:09:13][350518497419868][368 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 21:09:13][350518497419868][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:09:13][350518497419868][415 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 21:09:13][350518497419868][415 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 21:09:13][350518497419868][415 ms][DEBUG] rawBody.length=1148 [2025-08-26 21:09:13][350518497419868][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350518497419868\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8713\"}'\'' -e'"" [2025-08-26 21:09:13][350518497419868][415 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:09:13][350518497419868][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350518497419868\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8713\"}'\'' -e'"" [2025-08-26 21:09:17][350518497419868][4336 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6e21b50d-b345-4c7a-8c67-40eae64c6865","id":"QR_6e21b50d-b345-4c7a-8c67-40eae64c6865","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 21:09:17][350518497419868][4492 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-26 21:09:17][350518497419868][4492 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-26 21:09:17][350518497419868][4492 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 21:09:19][353427864802309][0 ms][INFO] === Request start === [2025-08-26 21:09:19][353427864802309][1 ms][DEBUG] START check_scloud [2025-08-26 21:09:19][353427864802309][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:09:19][353427864802309][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 17302 21369 24814084 206412 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 21:09:19][353427864802309][311 ms][DEBUG] targetPkg: running [2025-08-26 21:09:19][353427864802309][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-26 21:09:19][353427864802309][311 ms][DEBUG] START check_boot_completed [2025-08-26 21:09:19][353427864802309][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:09:19][353427864802309][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 21:09:19][353427864802309][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:09:19][353427864802309][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 21:09:19][353427864802309][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 21:09:19][353427864802309][420 ms][DEBUG] rawBody.length=1148 [2025-08-26 21:09:19][353427864802309][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353427864802309\",\"model\":\"SM-A326B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3545\"}'\'' -e'"" [2025-08-26 21:09:19][353427864802309][420 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:09:19][353427864802309][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353427864802309\",\"model\":\"SM-A326B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3545\"}'\'' -e'"" [2025-08-26 21:09:23][353427864802309][4028 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_56de0454-e803-42d9-bc49-5ea7d3a344fe","id":"QR_56de0454-e803-42d9-bc49-5ea7d3a344fe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 21:09:23][353427864802309][4185 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-08-26 21:09:23][353427864802309][4185 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-08-26 21:09:23][353427864802309][4185 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 21:09:24][355001763705836][0 ms][INFO] === Request start === [2025-08-26 21:09:24][355001763705836][1 ms][DEBUG] START check_scloud [2025-08-26 21:09:24][355001763705836][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:09:24][355001763705836][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 17302 21369 24974988 214120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 21:09:24][355001763705836][318 ms][DEBUG] targetPkg: running [2025-08-26 21:09:24][355001763705836][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-26 21:09:24][355001763705836][318 ms][DEBUG] START check_boot_completed [2025-08-26 21:09:24][355001763705836][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:09:24][355001763705836][365 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 21:09:24][355001763705836][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:09:24][355001763705836][427 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 21:09:24][355001763705836][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 21:09:24][355001763705836][427 ms][DEBUG] rawBody.length=1148 [2025-08-26 21:09:24][355001763705836][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355001763705836\",\"model\":\"SM-F711B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5688\"}'\'' -e'"" [2025-08-26 21:09:24][355001763705836][427 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:09:24][355001763705836][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355001763705836\",\"model\":\"SM-F711B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5688\"}'\'' -e'"" [2025-08-26 21:09:28][355001763705836][3879 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b67a93eb-2878-4c46-8fcc-48651e9c03b6","id":"QR_b67a93eb-2878-4c46-8fcc-48651e9c03b6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 21:09:28][355001763705836][4035 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=3343 [2025-08-26 21:09:28][355001763705836][4035 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-08-26 21:09:28][355001763705836][4035 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 21:09:29][356663821732802][0 ms][INFO] === Request start === [2025-08-26 21:09:29][356663821732802][1 ms][DEBUG] START check_scloud [2025-08-26 21:09:29][356663821732802][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:09:30][356663821732802][304 ms][DEBUG] SU: done in 304 ms; outu0_a118 17302 21369 25086704 225384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 21:09:30][356663821732802][305 ms][DEBUG] targetPkg: running [2025-08-26 21:09:30][356663821732802][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-26 21:09:30][356663821732802][305 ms][DEBUG] START check_boot_completed [2025-08-26 21:09:30][356663821732802][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:09:30][356663821732802][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 21:09:30][356663821732802][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:09:30][356663821732802][414 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 21:09:30][356663821732802][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 21:09:30][356663821732802][414 ms][DEBUG] rawBody.length=1148 [2025-08-26 21:09:30][356663821732802][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663821732802\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8358\"}'\'' -e'"" [2025-08-26 21:09:30][356663821732802][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:09:30][356663821732802][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356663821732802\",\"model\":\"SM-A546B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8358\"}'\'' -e'"" [2025-08-26 21:09:33][356663821732802][4038 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_61fd0af8-9598-45f2-9bde-4358e0cbf0fc","id":"QR_61fd0af8-9598-45f2-9bde-4358e0cbf0fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 21:09:34][356663821732802][4194 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3343 [2025-08-26 21:09:34][356663821732802][4194 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-26 21:09:34][356663821732802][4194 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 21:10:04][354239346856764][0 ms][INFO] === Request start === [2025-08-26 21:10:04][354239346856764][1 ms][DEBUG] START check_scloud [2025-08-26 21:10:04][354239346856764][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:10:04][354239346856764][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 17302 21369 25147240 237592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 21:10:04][354239346856764][263 ms][DEBUG] targetPkg: running [2025-08-26 21:10:04][354239346856764][263 ms][DEBUG] END check_scloud in 262 ms [2025-08-26 21:10:04][354239346856764][263 ms][DEBUG] START check_boot_completed [2025-08-26 21:10:04][354239346856764][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:10:04][354239346856764][309 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 21:10:04][354239346856764][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:10:04][354239346856764][356 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 21:10:04][354239346856764][356 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 21:10:04][354239346856764][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 21:10:04][354239346856764][466 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5141\nsuccessfulTxPacketsPerSecond: 0.1375898838675861\nretriedTxPackets: 1250\nretriedTxPacketsPerSecond: 0.06879494193379306\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 4893\nsuccessfulRxPacketsPerSecond: 0.10155443809274213\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 21:10:04][354239346856764][466 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 21:10:05][354239346856764][872 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.572/202.572/202.572/0.000 ms\n [2025-08-26 21:10:05][354239346856764][872 ms][DEBUG] check_internet: online [2025-08-26 21:10:05][354239346856764][872 ms][DEBUG] rawBody.length=1149 [2025-08-26 21:10:05][354239346856764][872 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354239346856764\",\"model\":\"SM-X218U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9906\"}'\'' -e'"" [2025-08-26 21:10:05][354239346856764][872 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:10:05][354239346856764][872 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354239346856764\",\"model\":\"SM-X218U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9906\"}'\'' -e'"" [2025-08-26 21:10:08][354239346856764][4668 ms][DEBUG] proc_open done in 3795 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 21:10:08][354239346856764][4668 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-26 21:10:08][354239346856764][4668 ms][WARN] Detected error: Process with pid 17302 either refused to load frida-agent, or terminated during injectionProcess with pid 17302 either refused to load frida-agent, or terminated during injection\r\n [2025-08-26 21:10:08][354239346856764][4668 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-08-26 21:10:09][354239346856764][4918 ms][DEBUG] SU: done in 250 ms; outsystem 21633 21369 12743716 197416 ep_poll 0 S system_server\n [2025-08-26 21:10:09][354239346856764][4918 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 21:10:09][354239346856764][5058 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 21:10:09][354239346856764][5058 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 21:10:09][354239346856764][5058 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 21:10:09][354239346856764][5199 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 21:10:09][354239346856764][5199 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 21:10:09][354239346856764][5355 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 21:10:11][354239346856764][7370 ms][DEBUG] START check_boot_completed [2025-08-26 21:10:11][354239346856764][7370 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:10:11][354239346856764][7417 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 21:10:11][354239346856764][7417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:10:11][354239346856764][7464 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 21:10:11][354239346856764][7464 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 21:10:14][354239346856764][10479 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 21:10:14][354239346856764][10479 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354239346856764\",\"model\":\"SM-X218U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9906\"}'\'' -e'"" [2025-08-26 21:10:19][354239346856764][15321 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eb62fee1-cc49-4acb-a903-50da7fdb8ca0","id":"QR_eb62fee1-cc49-4acb-a903-50da7fdb8ca0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 21:10:19][354239346856764][15477 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3343 [2025-08-26 21:10:19][354239346856764][15478 ms][DEBUG] END runCmdUntilRes#2 in 4999 ms [2025-08-26 21:10:19][354239346856764][15478 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 21:11:03][350957915243841][0 ms][INFO] === Request start === [2025-08-26 21:11:03][350957915243841][1 ms][DEBUG] START check_scloud [2025-08-26 21:11:03][350957915243841][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:11:03][350957915243841][319 ms][DEBUG] SU: done in 319 ms; outu0_a118 19193 21369 23765396 127332 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 21:11:03][350957915243841][320 ms][DEBUG] targetPkg: running [2025-08-26 21:11:03][350957915243841][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-26 21:11:03][350957915243841][320 ms][DEBUG] START check_boot_completed [2025-08-26 21:11:03][350957915243841][320 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:11:03][350957915243841][366 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 21:11:03][350957915243841][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:11:04][350957915243841][413 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 21:11:04][350957915243841][413 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 21:11:04][350957915243841][414 ms][DEBUG] rawBody.length=1148 [2025-08-26 21:11:04][350957915243841][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350957915243841\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4562\"}'\'' -e'"" [2025-08-26 21:11:04][350957915243841][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:11:04][350957915243841][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350957915243841\",\"model\":\"SM-A346E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XNZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4562\"}'\'' -e'"" [2025-08-26 21:11:07][350957915243841][4303 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_68c0ee72-cbf7-4b0a-874b-31850047f10a","id":"QR_68c0ee72-cbf7-4b0a-874b-31850047f10a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 21:11:08][350957915243841][4459 ms][DEBUG] proc_open done in 4045 ms; code=255; res.len=3343 [2025-08-26 21:11:08][350957915243841][4459 ms][DEBUG] END runCmdUntilRes#1 in 4045 ms [2025-08-26 21:11:08][350957915243841][4459 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 21:14:03][353235520385837][1 ms][INFO] === Request start === [2025-08-26 21:14:03][353235520385837][1 ms][DEBUG] START check_scloud [2025-08-26 21:14:03][353235520385837][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:14:03][353235520385837][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 19193 21369 23884076 137840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 21:14:03][353235520385837][319 ms][DEBUG] targetPkg: running [2025-08-26 21:14:03][353235520385837][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-26 21:14:03][353235520385837][319 ms][DEBUG] START check_boot_completed [2025-08-26 21:14:03][353235520385837][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:14:03][353235520385837][351 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 21:14:03][353235520385837][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:14:03][353235520385837][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 21:14:03][353235520385837][398 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 21:14:03][353235520385837][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 21:14:03][353235520385837][507 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5323\nsuccessfulTxPacketsPerSecond: 0.32816888075478845\nretriedTxPackets: 1311\nretriedTxPacketsPerSecond: 0.14515162033384874\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5047\nsuccessfulRxPacketsPerSecond: 0.25874854059512165\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 21:14:03][353235520385837][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 21:14:04][353235520385837][976 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.004/202.004/202.004/0.000 ms\n [2025-08-26 21:14:04][353235520385837][976 ms][DEBUG] check_internet: online [2025-08-26 21:14:04][353235520385837][976 ms][DEBUG] rawBody.length=1148 [2025-08-26 21:14:04][353235520385837][976 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353235520385837\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9785\"}'\'' -e'"" [2025-08-26 21:14:04][353235520385837][976 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:14:04][353235520385837][976 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353235520385837\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9785\"}'\'' -e'"" [2025-08-26 21:14:07][353235520385837][4709 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e4cebfc9-e7d8-4cf3-aa98-5b0de150170a","id":"QR_e4cebfc9-e7d8-4cf3-aa98-5b0de150170a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 21:14:07][353235520385837][4865 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3343 [2025-08-26 21:14:07][353235520385837][4865 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-26 21:14:07][353235520385837][4865 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 21:17:05][351676565097427][1 ms][INFO] === Request start === [2025-08-26 21:17:05][351676565097427][1 ms][DEBUG] START check_scloud [2025-08-26 21:17:05][351676565097427][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:17:05][351676565097427][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 19193 21369 24036872 149992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 21:17:05][351676565097427][312 ms][DEBUG] targetPkg: running [2025-08-26 21:17:05][351676565097427][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-26 21:17:05][351676565097427][312 ms][DEBUG] START check_boot_completed [2025-08-26 21:17:05][351676565097427][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:17:05][351676565097427][343 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 21:17:05][351676565097427][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:17:05][351676565097427][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 21:17:05][351676565097427][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 21:17:05][351676565097427][390 ms][DEBUG] rawBody.length=1149 [2025-08-26 21:17:05][351676565097427][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676565097427\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1323\"}'\'' -e'"" [2025-08-26 21:17:05][351676565097427][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:17:05][351676565097427][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351676565097427\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1323\"}'\'' -e'"" [2025-08-26 21:17:11][351676565097427][5920 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb60f0c7-8496-47da-bd0f-b0788d8683f8","id":"QR_cb60f0c7-8496-47da-bd0f-b0788d8683f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 21:17:11][351676565097427][6076 ms][DEBUG] proc_open done in 5686 ms; code=255; res.len=3343 [2025-08-26 21:17:11][351676565097427][6076 ms][DEBUG] END runCmdUntilRes#1 in 5686 ms [2025-08-26 21:17:11][351676565097427][6076 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 21:19:04][355622367433176][1 ms][INFO] === Request start === [2025-08-26 21:19:04][355622367433176][1 ms][DEBUG] START check_scloud [2025-08-26 21:19:04][355622367433176][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:19:04][355622367433176][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 19193 21369 24150764 161260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 21:19:04][355622367433176][314 ms][DEBUG] targetPkg: running [2025-08-26 21:19:04][355622367433176][314 ms][DEBUG] END check_scloud in 314 ms [2025-08-26 21:19:04][355622367433176][314 ms][DEBUG] START check_boot_completed [2025-08-26 21:19:04][355622367433176][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:19:04][355622367433176][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 21:19:04][355622367433176][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:19:04][355622367433176][423 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 21:19:04][355622367433176][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 21:19:04][355622367433176][424 ms][DEBUG] rawBody.length=1148 [2025-08-26 21:19:04][355622367433176][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355622367433176\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8718\"}'\'' -e'"" [2025-08-26 21:19:04][355622367433176][424 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:19:04][355622367433176][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355622367433176\",\"model\":\"SM-S926B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8718\"}'\'' -e'"" [2025-08-26 21:19:08][355622367433176][4563 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_69c6ab39-4b19-48e2-8308-ddb0e93a6f2a","id":"QR_69c6ab39-4b19-48e2-8308-ddb0e93a6f2a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 21:19:08][355622367433176][4719 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3343 [2025-08-26 21:19:08][355622367433176][4719 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-26 21:19:08][355622367433176][4719 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 21:29:05][351397294438002][1 ms][INFO] === Request start === [2025-08-26 21:29:05][351397294438002][1 ms][DEBUG] START check_scloud [2025-08-26 21:29:05][351397294438002][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:29:05][351397294438002][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 19193 21369 24286084 172804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 21:29:05][351397294438002][247 ms][DEBUG] targetPkg: running [2025-08-26 21:29:05][351397294438002][247 ms][DEBUG] END check_scloud in 246 ms [2025-08-26 21:29:05][351397294438002][247 ms][DEBUG] START check_boot_completed [2025-08-26 21:29:05][351397294438002][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:29:05][351397294438002][293 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 21:29:05][351397294438002][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:29:06][351397294438002][386 ms][DEBUG] SU: done in 94 ms; out [2025-08-26 21:29:06][351397294438002][386 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-26 21:29:06][351397294438002][387 ms][DEBUG] rawBody.length=1159 [2025-08-26 21:29:06][351397294438002][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351397294438002\",\"model\":\"SM-X920\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52XA0JCA6X\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MXO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8497\"}'\'' -e'"" [2025-08-26 21:29:06][351397294438002][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:29:06][351397294438002][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351397294438002\",\"model\":\"SM-X920\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52XA0JCA6X\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"MXO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8497\"}'\'' -e'"" [2025-08-26 21:29:10][351397294438002][5182 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b093ac34-710e-4b27-9d82-07d3d4ee2ccf","id":"QR_b093ac34-710e-4b27-9d82-07d3d4ee2ccf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 21:29:10][351397294438002][5338 ms][DEBUG] proc_open done in 4951 ms; code=255; res.len=3343 [2025-08-26 21:29:10][351397294438002][5338 ms][DEBUG] END runCmdUntilRes#1 in 4951 ms [2025-08-26 21:29:10][351397294438002][5338 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 21:29:16][352766392043782][0 ms][INFO] === Request start === [2025-08-26 21:29:16][352766392043782][1 ms][DEBUG] START check_scloud [2025-08-26 21:29:16][352766392043782][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:29:16][352766392043782][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 19193 21369 24445264 185180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 21:29:16][352766392043782][260 ms][DEBUG] targetPkg: running [2025-08-26 21:29:16][352766392043782][260 ms][DEBUG] END check_scloud in 260 ms [2025-08-26 21:29:16][352766392043782][260 ms][DEBUG] START check_boot_completed [2025-08-26 21:29:16][352766392043782][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:29:16][352766392043782][307 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 21:29:16][352766392043782][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:29:16][352766392043782][354 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 21:29:16][352766392043782][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 21:29:16][352766392043782][354 ms][DEBUG] rawBody.length=1149 [2025-08-26 21:29:16][352766392043782][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352766392043782\",\"model\":\"SM-S911U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3497\"}'\'' -e'"" [2025-08-26 21:29:16][352766392043782][354 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:29:16][352766392043782][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352766392043782\",\"model\":\"SM-S911U\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3497\"}'\'' -e'"" [2025-08-26 21:29:21][352766392043782][4977 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9464d1a8-2942-4e13-b2bc-1ccdb27cc5e8","id":"QR_9464d1a8-2942-4e13-b2bc-1ccdb27cc5e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 21:29:21][352766392043782][5134 ms][DEBUG] proc_open done in 4780 ms; code=255; res.len=3343 [2025-08-26 21:29:21][352766392043782][5134 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-08-26 21:29:21][352766392043782][5134 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 21:30:04][353026647464179][0 ms][INFO] === Request start === [2025-08-26 21:30:04][353026647464179][1 ms][DEBUG] START check_scloud [2025-08-26 21:30:04][353026647464179][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:30:04][353026647464179][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 19193 21369 24558992 196100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 21:30:04][353026647464179][309 ms][DEBUG] targetPkg: running [2025-08-26 21:30:04][353026647464179][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-26 21:30:04][353026647464179][309 ms][DEBUG] START check_boot_completed [2025-08-26 21:30:04][353026647464179][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:30:04][353026647464179][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 21:30:04][353026647464179][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:30:04][353026647464179][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 21:30:04][353026647464179][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 21:30:04][353026647464179][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 21:30:04][353026647464179][512 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5480\nsuccessfulTxPacketsPerSecond: 0.04318492115429972\nretriedTxPackets: 1364\nretriedTxPacketsPerSecond: 0.0332191701186921\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5190\nsuccessfulRxPacketsPerSecond: 0.029897253106822886\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 21:30:04][353026647464179][512 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 21:30:05][353026647464179][964 ms][DEBUG] SU: done in 452 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.641/200.641/200.641/0.000 ms\n [2025-08-26 21:30:05][353026647464179][964 ms][DEBUG] check_internet: online [2025-08-26 21:30:05][353026647464179][964 ms][DEBUG] rawBody.length=1149 [2025-08-26 21:30:05][353026647464179][964 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353026647464179\",\"model\":\"SM-A166U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6089\"}'\'' -e'"" [2025-08-26 21:30:05][353026647464179][964 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:30:05][353026647464179][964 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353026647464179\",\"model\":\"SM-A166U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6089\"}'\'' -e'"" [2025-08-26 21:30:10][353026647464179][6229 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_85bc5c65-e419-4ff7-9983-1dc7716130a3","id":"QR_85bc5c65-e419-4ff7-9983-1dc7716130a3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 21:30:10][353026647464179][6385 ms][DEBUG] proc_open done in 5420 ms; code=255; res.len=3343 [2025-08-26 21:30:10][353026647464179][6385 ms][DEBUG] END runCmdUntilRes#1 in 5420 ms [2025-08-26 21:30:10][353026647464179][6385 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 21:37:04][355506803241576][1 ms][INFO] === Request start === [2025-08-26 21:37:04][355506803241576][1 ms][DEBUG] START check_scloud [2025-08-26 21:37:04][355506803241576][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:37:04][355506803241576][268 ms][DEBUG] SU: done in 266 ms; outu0_a118 19193 21369 24683944 206608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 21:37:04][355506803241576][268 ms][DEBUG] targetPkg: running [2025-08-26 21:37:04][355506803241576][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-26 21:37:04][355506803241576][268 ms][DEBUG] START check_boot_completed [2025-08-26 21:37:04][355506803241576][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:37:04][355506803241576][314 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 21:37:04][355506803241576][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:37:04][355506803241576][392 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 21:37:04][355506803241576][392 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 21:37:04][355506803241576][393 ms][DEBUG] rawBody.length=1148 [2025-08-26 21:37:04][355506803241576][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506803241576\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"VFJ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5675\"}'\'' -e'"" [2025-08-26 21:37:04][355506803241576][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:37:04][355506803241576][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506803241576\",\"model\":\"SM-A245F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"VFJ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5675\"}'\'' -e'"" [2025-08-26 21:37:09][355506803241576][5110 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fce1b206-9818-434f-ac72-fa18e7d89b06","id":"QR_fce1b206-9818-434f-ac72-fa18e7d89b06","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 21:37:09][355506803241576][5266 ms][DEBUG] proc_open done in 4873 ms; code=255; res.len=3343 [2025-08-26 21:37:09][355506803241576][5266 ms][DEBUG] END runCmdUntilRes#1 in 4873 ms [2025-08-26 21:37:09][355506803241576][5266 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 21:42:04][356697211958999][1 ms][INFO] === Request start === [2025-08-26 21:42:04][356697211958999][1 ms][DEBUG] START check_scloud [2025-08-26 21:42:04][356697211958999][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:42:04][356697211958999][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 19193 21369 24833752 218344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 21:42:04][356697211958999][317 ms][DEBUG] targetPkg: running [2025-08-26 21:42:04][356697211958999][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-26 21:42:04][356697211958999][317 ms][DEBUG] START check_boot_completed [2025-08-26 21:42:04][356697211958999][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:42:05][356697211958999][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 21:42:05][356697211958999][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:42:05][356697211958999][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 21:42:05][356697211958999][411 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 21:42:05][356697211958999][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 21:42:05][356697211958999][520 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 5971\nsuccessfulTxPacketsPerSecond: 21.45698721743343\nretriedTxPackets: 1419\nretriedTxPacketsPerSecond: 0.26936524501343323\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5649\nsuccessfulRxPacketsPerSecond: 21.255108656581527\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 21:42:05][356697211958999][520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 21:42:05][356697211958999][989 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.079/202.079/202.079/0.000 ms\n [2025-08-26 21:42:05][356697211958999][989 ms][DEBUG] check_internet: online [2025-08-26 21:42:05][356697211958999][989 ms][DEBUG] rawBody.length=1149 [2025-08-26 21:42:05][356697211958999][989 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356697211958999\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8637\"}'\'' -e'"" [2025-08-26 21:42:05][356697211958999][989 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:42:05][356697211958999][989 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356697211958999\",\"model\":\"SM-A217M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8637\"}'\'' -e'"" [2025-08-26 21:42:10][356697211958999][6019 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_295c383c-0392-400c-9bed-f0df50d671b3","id":"QR_295c383c-0392-400c-9bed-f0df50d671b3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 21:42:10][356697211958999][6175 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-08-26 21:42:10][356697211958999][6175 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-08-26 21:42:10][356697211958999][6175 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 21:43:04][357651715459482][0 ms][INFO] === Request start === [2025-08-26 21:43:04][357651715459482][1 ms][DEBUG] START check_scloud [2025-08-26 21:43:04][357651715459482][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:43:05][357651715459482][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 19193 21369 24968124 229424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 21:43:05][357651715459482][308 ms][DEBUG] targetPkg: running [2025-08-26 21:43:05][357651715459482][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-26 21:43:05][357651715459482][308 ms][DEBUG] START check_boot_completed [2025-08-26 21:43:05][357651715459482][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:43:05][357651715459482][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 21:43:05][357651715459482][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:43:05][357651715459482][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 21:43:05][357651715459482][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 21:43:05][357651715459482][386 ms][DEBUG] rawBody.length=1149 [2025-08-26 21:43:05][357651715459482][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651715459482\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7410\"}'\'' -e'"" [2025-08-26 21:43:05][357651715459482][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:43:05][357651715459482][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651715459482\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7410\"}'\'' -e'"" [2025-08-26 21:43:10][357651715459482][5369 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0e99ff37-5452-4be7-a965-427ae4808e6b","id":"QR_0e99ff37-5452-4be7-a965-427ae4808e6b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 21:43:10][357651715459482][5525 ms][DEBUG] proc_open done in 5139 ms; code=255; res.len=3343 [2025-08-26 21:43:10][357651715459482][5525 ms][DEBUG] END runCmdUntilRes#1 in 5139 ms [2025-08-26 21:43:10][357651715459482][5525 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 21:44:03][351272333428464][1 ms][INFO] === Request start === [2025-08-26 21:44:03][351272333428464][1 ms][DEBUG] START check_scloud [2025-08-26 21:44:03][351272333428464][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:44:03][351272333428464][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 19193 21369 25094308 241248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 21:44:03][351272333428464][329 ms][DEBUG] targetPkg: running [2025-08-26 21:44:03][351272333428464][329 ms][DEBUG] END check_scloud in 328 ms [2025-08-26 21:44:03][351272333428464][329 ms][DEBUG] START check_boot_completed [2025-08-26 21:44:03][351272333428464][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:44:03][351272333428464][376 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 21:44:03][351272333428464][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:44:03][351272333428464][438 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 21:44:03][351272333428464][438 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 21:44:03][351272333428464][438 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 21:44:04][351272333428464][594 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=1487778 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 6020\nsuccessfulTxPacketsPerSecond: 0.25417047057847125\nretriedTxPackets: 1431\nretriedTxPacketsPerSecond: 0.06224582952942153\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 5698\nsuccessfulRxPacketsPerSecond: 0.25417047057847125\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -48, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -48 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 21:44:04][351272333428464][595 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 21:44:04][351272333428464][985 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.064/202.064/202.064/0.000 ms\n [2025-08-26 21:44:04][351272333428464][985 ms][DEBUG] check_internet: online [2025-08-26 21:44:04][351272333428464][985 ms][DEBUG] rawBody.length=1148 [2025-08-26 21:44:04][351272333428464][985 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272333428464\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2572\"}'\'' -e'"" [2025-08-26 21:44:04][351272333428464][985 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:44:04][351272333428464][985 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272333428464\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2572\"}'\'' -e'"" [2025-08-26 21:44:12][351272333428464][8983 ms][DEBUG] proc_open done in 7998 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 21:44:12][351272333428464][8983 ms][DEBUG] END runCmdUntilRes#1 in 7998 ms [2025-08-26 21:44:12][351272333428464][8983 ms][WARN] Detected error: Process with pid 19193 either refused to load frida-agent, or terminated during injectionProcess with pid 19193 either refused to load frida-agent, or terminated during injection\r\n [2025-08-26 21:44:12][351272333428464][8983 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-08-26 21:44:12][351272333428464][9342 ms][DEBUG] SU: done in 359 ms; out [2025-08-26 21:44:12][351272333428464][9342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 21:44:13][351272333428464][9686 ms][DEBUG] SU: done in 344 ms; out [2025-08-26 21:44:13][351272333428464][9686 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 21:44:13][351272333428464][9686 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 21:44:13][351272333428464][10014 ms][DEBUG] SU: done in 328 ms; out [2025-08-26 21:44:13][351272333428464][10014 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 21:44:13][351272333428464][10233 ms][DEBUG] SU: done in 219 ms; out [2025-08-26 21:44:15][351272333428464][12248 ms][DEBUG] START check_boot_completed [2025-08-26 21:44:15][351272333428464][12248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:44:15][351272333428464][12295 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 21:44:15][351272333428464][12295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:44:15][351272333428464][12357 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 21:44:15][351272333428464][12357 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-26 21:44:18][351272333428464][15372 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 21:44:18][351272333428464][15372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272333428464\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2572\"}'\'' -e'"" [2025-08-26 21:44:20][351272333428464][17013 ms][DEBUG] proc_open done in 1640 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-26 21:44:20][351272333428464][17013 ms][DEBUG] END runCmdUntilRes#2 in 1641 ms [2025-08-26 21:44:20][351272333428464][17013 ms][WARN] Detected error 2; Reboot the device [2025-08-26 21:44:20][351272333428464][17013 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-08-26 21:44:20][351272333428464][17263 ms][DEBUG] SU: done in 250 ms; outsystem 22476 22138 7983212 139316 0 0 R system_server\n [2025-08-26 21:44:20][351272333428464][17263 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-26 21:44:21][351272333428464][17871 ms][DEBUG] SU: done in 608 ms; out [2025-08-26 21:45:03][351272333428464][1 ms][INFO] === Request start === [2025-08-26 21:45:03][351272333428464][1 ms][DEBUG] START check_scloud [2025-08-26 21:45:03][351272333428464][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:45:03][351272333428464][41 ms][DEBUG] SU: done in 40 ms; out [2025-08-26 21:45:03][351272333428464][41 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-08-26 21:45:04][351272333428464][103 ms][DEBUG] ADB: done in 62 ms; outList of devices attached\n\n [2025-08-26 21:45:04][351272333428464][103 ms][WARN] check_devices: no device [2025-08-26 21:45:04][351272333428464][103 ms][WARN] check_devices: no device [2025-08-26 21:45:04][351272333428464][103 ms][DEBUG] END check_scloud in 102 ms [2025-08-26 21:46:03][351272333428464][0 ms][INFO] === Request start === [2025-08-26 21:46:03][351272333428464][1 ms][DEBUG] START check_scloud [2025-08-26 21:46:03][351272333428464][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:46:03][351272333428464][582 ms][DEBUG] SU: done in 581 ms; out [2025-08-26 21:46:03][351272333428464][582 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" devices [2025-08-26 21:46:03][351272333428464][629 ms][DEBUG] ADB: done in 47 ms; outList of devices attached\nR58NA0L8M7X device\n\n [2025-08-26 21:46:03][351272333428464][629 ms][DEBUG] check_devices: device found [2025-08-26 21:46:03][351272333428464][629 ms][WARN] targetPkg: not running, restarting [2025-08-26 21:46:03][351272333428464][629 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 21:46:04][351272333428464][770 ms][DEBUG] SU: done in 141 ms; out [2025-08-26 21:46:04][351272333428464][770 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 21:46:04][351272333428464][1066 ms][DEBUG] SU: done in 296 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 21:46:06][351272333428464][3081 ms][DEBUG] END check_scloud in 3080 ms [2025-08-26 21:46:06][351272333428464][3081 ms][DEBUG] START check_boot_completed [2025-08-26 21:46:06][351272333428464][3081 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:46:06][351272333428464][3128 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 21:46:06][351272333428464][3128 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:46:06][351272333428464][3206 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 21:46:06][351272333428464][3206 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-26 21:46:06][351272333428464][3206 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 21:46:06][351272333428464][3362 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 463\nsuccessfulTxPacketsPerSecond: 0.0\nretriedTxPackets: 22\nretriedTxPacketsPerSecond: 0.0\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 549\nsuccessfulRxPacketsPerSecond: 0.0\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 21:46:06][351272333428464][3363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 21:46:07][351272333428464][3942 ms][DEBUG] SU: done in 580 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=180 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 180.790/180.790/180.790/0.000 ms\n [2025-08-26 21:46:07][351272333428464][3942 ms][DEBUG] check_internet: online [2025-08-26 21:46:07][351272333428464][3942 ms][DEBUG] rawBody.length=1148 [2025-08-26 21:46:07][351272333428464][3943 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272333428464\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8106\"}'\'' -e'"" [2025-08-26 21:46:07][351272333428464][3943 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:46:07][351272333428464][3943 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272333428464\",\"model\":\"SM-A165F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8106\"}'\'' -e'"" [2025-08-26 21:46:13][351272333428464][10111 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f5d767b4-d9b7-402d-a103-f45ca45b6a73","id":"QR_f5d767b4-d9b7-402d-a103-f45ca45b6a73","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 21:46:13][351272333428464][10267 ms][DEBUG] proc_open done in 6324 ms; code=255; res.len=3343 [2025-08-26 21:46:13][351272333428464][10267 ms][DEBUG] END runCmdUntilRes#1 in 6324 ms [2025-08-26 21:46:13][351272333428464][10267 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 21:46:17][358615316150674][1 ms][INFO] === Request start === [2025-08-26 21:46:17][358615316150674][1 ms][DEBUG] START check_scloud [2025-08-26 21:46:17][358615316150674][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:46:17][358615316150674][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 11083 5018 23712352 104036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 21:46:17][358615316150674][306 ms][DEBUG] targetPkg: running [2025-08-26 21:46:17][358615316150674][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 21:46:17][358615316150674][307 ms][DEBUG] START check_boot_completed [2025-08-26 21:46:17][358615316150674][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:46:17][358615316150674][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 21:46:17][358615316150674][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:46:17][358615316150674][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 21:46:17][358615316150674][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 21:46:17][358615316150674][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 21:46:17][358615316150674][509 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 954\nsuccessfulTxPacketsPerSecond: 21.50082442577341\nretriedTxPackets: 61\nretriedTxPacketsPerSecond: 1.7078047914565435\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1008\nsuccessfulRxPacketsPerSecond: 20.09954869945009\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 21:46:17][358615316150674][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 21:46:18][358615316150674][837 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=186 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 186.167/186.167/186.167/0.000 ms\n [2025-08-26 21:46:18][358615316150674][838 ms][DEBUG] check_internet: online [2025-08-26 21:46:18][358615316150674][838 ms][DEBUG] rawBody.length=1149 [2025-08-26 21:46:18][358615316150674][838 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615316150674\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4899\"}'\'' -e'"" [2025-08-26 21:46:18][358615316150674][838 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:46:18][358615316150674][838 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615316150674\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4899\"}'\'' -e'"" [2025-08-26 21:46:24][358615316150674][6867 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a481c2cf-75da-449c-a15f-01edf5cf9c38","id":"QR_a481c2cf-75da-449c-a15f-01edf5cf9c38","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 21:46:24][358615316150674][7023 ms][DEBUG] proc_open done in 6185 ms; code=255; res.len=3343 [2025-08-26 21:46:24][358615316150674][7023 ms][DEBUG] END runCmdUntilRes#1 in 6185 ms [2025-08-26 21:46:24][358615316150674][7023 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 21:47:04][355567617027312][0 ms][INFO] === Request start === [2025-08-26 21:47:04][355567617027312][1 ms][DEBUG] START check_scloud [2025-08-26 21:47:04][355567617027312][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:47:05][355567617027312][343 ms][DEBUG] SU: done in 342 ms; outu0_a118 11083 5018 23779836 72520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 21:47:05][355567617027312][343 ms][DEBUG] targetPkg: running [2025-08-26 21:47:05][355567617027312][343 ms][DEBUG] END check_scloud in 342 ms [2025-08-26 21:47:05][355567617027312][343 ms][DEBUG] START check_boot_completed [2025-08-26 21:47:05][355567617027312][343 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:47:05][355567617027312][389 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 21:47:05][355567617027312][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:47:05][355567617027312][452 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 21:47:05][355567617027312][452 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 21:47:05][355567617027312][452 ms][DEBUG] rawBody.length=1149 [2025-08-26 21:47:05][355567617027312][452 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355567617027312\",\"model\":\"SM-M127F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4033\"}'\'' -e'"" [2025-08-26 21:47:05][355567617027312][452 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:47:05][355567617027312][452 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355567617027312\",\"model\":\"SM-M127F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4033\"}'\'' -e'"" [2025-08-26 21:47:10][355567617027312][5482 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bf6f7f25-7c7e-4124-abf9-09a02bfd97b8","id":"QR_bf6f7f25-7c7e-4124-abf9-09a02bfd97b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 21:47:10][355567617027312][5638 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3343 [2025-08-26 21:47:10][355567617027312][5638 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-08-26 21:47:10][355567617027312][5638 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 21:52:03][357576770189908][1 ms][INFO] === Request start === [2025-08-26 21:52:03][357576770189908][1 ms][DEBUG] START check_scloud [2025-08-26 21:52:03][357576770189908][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:52:03][357576770189908][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 11083 5018 23911856 88768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 21:52:03][357576770189908][254 ms][DEBUG] targetPkg: running [2025-08-26 21:52:03][357576770189908][254 ms][DEBUG] END check_scloud in 253 ms [2025-08-26 21:52:03][357576770189908][254 ms][DEBUG] START check_boot_completed [2025-08-26 21:52:03][357576770189908][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:52:03][357576770189908][285 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 21:52:03][357576770189908][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:52:03][357576770189908][332 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 21:52:03][357576770189908][333 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 21:52:03][357576770189908][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 21:52:03][357576770189908][489 ms][DEBUG] SU: done in 156 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1539\nsuccessfulTxPacketsPerSecond: 0.9930811261458236\nretriedTxPackets: 142\nretriedTxPacketsPerSecond: 0.2206846946990719\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1600\nsuccessfulRxPacketsPerSecond: 0.8582182571630573\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 21:52:03][357576770189908][489 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 21:52:04][357576770189908][973 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.253/202.253/202.253/0.000 ms\n [2025-08-26 21:52:04][357576770189908][973 ms][DEBUG] check_internet: online [2025-08-26 21:52:04][357576770189908][973 ms][DEBUG] rawBody.length=1148 [2025-08-26 21:52:04][357576770189908][973 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576770189908\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8446\"}'\'' -e'"" [2025-08-26 21:52:04][357576770189908][973 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:52:04][357576770189908][973 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576770189908\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8446\"}'\'' -e'"" [2025-08-26 21:52:07][357576770189908][4753 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_765ea46d-7ffb-46d2-a83e-64fd381d1957","id":"QR_765ea46d-7ffb-46d2-a83e-64fd381d1957","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 21:52:07][357576770189908][4909 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-26 21:52:07][357576770189908][4909 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-26 21:52:07][357576770189908][4909 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 21:56:05][350262400043743][1 ms][INFO] === Request start === [2025-08-26 21:56:05][350262400043743][1 ms][DEBUG] START check_scloud [2025-08-26 21:56:05][350262400043743][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 21:56:05][350262400043743][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 11083 5018 24067860 105284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 21:56:05][350262400043743][252 ms][DEBUG] targetPkg: running [2025-08-26 21:56:05][350262400043743][252 ms][DEBUG] END check_scloud in 251 ms [2025-08-26 21:56:05][350262400043743][252 ms][DEBUG] START check_boot_completed [2025-08-26 21:56:05][350262400043743][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 21:56:05][350262400043743][283 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 21:56:05][350262400043743][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 21:56:05][350262400043743][330 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 21:56:05][350262400043743][330 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 21:56:05][350262400043743][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 21:56:05][350262400043743][440 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1684\nsuccessfulTxPacketsPerSecond: 0.481596375738171\nretriedTxPackets: 174\nretriedTxPacketsPerSecond: 0.10628333809394118\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1729\nsuccessfulRxPacketsPerSecond: 0.4284547066912004\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 21:56:05][350262400043743][440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 21:56:06][350262400043743][861 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.765/201.765/201.765/0.000 ms\n [2025-08-26 21:56:06][350262400043743][861 ms][DEBUG] check_internet: online [2025-08-26 21:56:06][350262400043743][861 ms][DEBUG] rawBody.length=1149 [2025-08-26 21:56:06][350262400043743][861 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350262400043743\",\"model\":\"SM-M236B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4336\"}'\'' -e'"" [2025-08-26 21:56:06][350262400043743][861 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 21:56:06][350262400043743][861 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350262400043743\",\"model\":\"SM-M236B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4336\"}'\'' -e'"" [2025-08-26 21:56:10][350262400043743][5501 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5baa0e2-b917-489f-b5b6-1eb4c26e546b","id":"QR_a5baa0e2-b917-489f-b5b6-1eb4c26e546b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 21:56:10][350262400043743][5657 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3343 [2025-08-26 21:56:10][350262400043743][5657 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-08-26 21:56:10][350262400043743][5657 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 22:00:05][353026642984734][1 ms][INFO] === Request start === [2025-08-26 22:00:05][353026642984734][1 ms][DEBUG] START check_scloud [2025-08-26 22:00:05][353026642984734][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 22:00:05][353026642984734][267 ms][DEBUG] SU: done in 266 ms; outu0_a118 11083 5018 24175608 117300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 22:00:05][353026642984734][267 ms][DEBUG] targetPkg: running [2025-08-26 22:00:05][353026642984734][267 ms][DEBUG] END check_scloud in 266 ms [2025-08-26 22:00:05][353026642984734][268 ms][DEBUG] START check_boot_completed [2025-08-26 22:00:05][353026642984734][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:00:05][353026642984734][314 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 22:00:05][353026642984734][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:00:05][353026642984734][361 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 22:00:05][353026642984734][361 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 22:00:05][353026642984734][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 22:00:05][353026642984734][470 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1684\nsuccessfulTxPacketsPerSecond: 0.481596375738171\nretriedTxPackets: 174\nretriedTxPacketsPerSecond: 0.10628333809394118\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1729\nsuccessfulRxPacketsPerSecond: 0.4284547066912004\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 22:00:05][353026642984734][470 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 22:00:05][353026642984734][939 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.254/202.254/202.254/0.000 ms\n [2025-08-26 22:00:05][353026642984734][939 ms][DEBUG] check_internet: online [2025-08-26 22:00:05][353026642984734][939 ms][DEBUG] rawBody.length=1149 [2025-08-26 22:00:05][353026642984734][939 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353026642984734\",\"model\":\"SM-A166U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2261\"}'\'' -e'"" [2025-08-26 22:00:05][353026642984734][939 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 22:00:05][353026642984734][939 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353026642984734\",\"model\":\"SM-A166U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2261\"}'\'' -e'"" [2025-08-26 22:00:10][353026642984734][5828 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_89ad32a4-ae16-4fe0-9e5b-a236606d841f","id":"QR_89ad32a4-ae16-4fe0-9e5b-a236606d841f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 22:00:11][353026642984734][5984 ms][DEBUG] proc_open done in 5045 ms; code=255; res.len=3343 [2025-08-26 22:00:11][353026642984734][5985 ms][DEBUG] END runCmdUntilRes#1 in 5045 ms [2025-08-26 22:00:11][353026642984734][5985 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 22:01:05][354106708503328][0 ms][INFO] === Request start === [2025-08-26 22:01:05][354106708503328][1 ms][DEBUG] START check_scloud [2025-08-26 22:01:05][354106708503328][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 22:01:05][354106708503328][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 11083 5018 24307932 126756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 22:01:05][354106708503328][298 ms][DEBUG] targetPkg: running [2025-08-26 22:01:05][354106708503328][298 ms][DEBUG] END check_scloud in 298 ms [2025-08-26 22:01:05][354106708503328][298 ms][DEBUG] START check_boot_completed [2025-08-26 22:01:05][354106708503328][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:01:05][354106708503328][345 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 22:01:05][354106708503328][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:01:05][354106708503328][407 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 22:01:05][354106708503328][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 22:01:05][354106708503328][407 ms][DEBUG] rawBody.length=1149 [2025-08-26 22:01:05][354106708503328][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106708503328\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2843\"}'\'' -e'"" [2025-08-26 22:01:05][354106708503328][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 22:01:05][354106708503328][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106708503328\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2843\"}'\'' -e'"" [2025-08-26 22:01:10][354106708503328][5140 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_10f60f32-accf-445b-9a87-7f6a24fbab9f","id":"QR_10f60f32-accf-445b-9a87-7f6a24fbab9f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 22:01:10][354106708503328][5297 ms][DEBUG] proc_open done in 4889 ms; code=255; res.len=3343 [2025-08-26 22:01:10][354106708503328][5297 ms][DEBUG] END runCmdUntilRes#1 in 4890 ms [2025-08-26 22:01:10][354106708503328][5297 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 22:02:04][353353825384999][0 ms][INFO] === Request start === [2025-08-26 22:02:04][353353825384999][1 ms][DEBUG] START check_scloud [2025-08-26 22:02:04][353353825384999][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 22:02:04][353353825384999][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 11083 5018 24473024 137864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 22:02:04][353353825384999][306 ms][DEBUG] targetPkg: running [2025-08-26 22:02:04][353353825384999][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-26 22:02:04][353353825384999][306 ms][DEBUG] START check_boot_completed [2025-08-26 22:02:04][353353825384999][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:02:04][353353825384999][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 22:02:04][353353825384999][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:02:05][353353825384999][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 22:02:05][353353825384999][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 22:02:05][353353825384999][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 22:02:05][353353825384999][509 ms][DEBUG] SU: done in 110 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1750\nsuccessfulTxPacketsPerSecond: 0.21908713692946058\nretriedTxPackets: 193\nretriedTxPacketsPerSecond: 0.06307053941908713\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1788\nsuccessfulRxPacketsPerSecond: 0.195850622406639\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 22:02:05][353353825384999][510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 22:02:05][353353825384999][822 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.736/198.736/198.736/0.000 ms\n [2025-08-26 22:02:05][353353825384999][822 ms][DEBUG] check_internet: online [2025-08-26 22:02:05][353353825384999][822 ms][DEBUG] rawBody.length=1149 [2025-08-26 22:02:05][353353825384999][822 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353353825384999\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8717\"}'\'' -e'"" [2025-08-26 22:02:05][353353825384999][822 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 22:02:05][353353825384999][822 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353353825384999\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8717\"}'\'' -e'"" [2025-08-26 22:02:13][353353825384999][8632 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d1d4d9a4-9e31-4118-abc0-e8efef7d16b7","id":"QR_d1d4d9a4-9e31-4118-abc0-e8efef7d16b7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 22:02:13][353353825384999][8788 ms][DEBUG] proc_open done in 7966 ms; code=255; res.len=3343 [2025-08-26 22:02:13][353353825384999][8788 ms][DEBUG] END runCmdUntilRes#1 in 7966 ms [2025-08-26 22:02:13][353353825384999][8788 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 22:08:03][353809892538031][1 ms][INFO] === Request start === [2025-08-26 22:08:03][353809892538031][1 ms][DEBUG] START check_scloud [2025-08-26 22:08:03][353809892538031][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 22:08:04][353809892538031][271 ms][DEBUG] SU: done in 269 ms; outu0_a118 11083 5018 24619684 136000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 22:08:04][353809892538031][271 ms][DEBUG] targetPkg: running [2025-08-26 22:08:04][353809892538031][271 ms][DEBUG] END check_scloud in 269 ms [2025-08-26 22:08:04][353809892538031][271 ms][DEBUG] START check_boot_completed [2025-08-26 22:08:04][353809892538031][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:08:04][353809892538031][302 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 22:08:04][353809892538031][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:08:04][353809892538031][349 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 22:08:04][353809892538031][349 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 22:08:04][353809892538031][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 22:08:04][353809892538031][458 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1817\nsuccessfulTxPacketsPerSecond: 0.05274505020669466\nretriedTxPackets: 221\nretriedTxPacketsPerSecond: 0.039558787655021\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1843\nsuccessfulRxPacketsPerSecond: 0.032965656379184166\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 22:08:04][353809892538031][458 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 22:08:04][353809892538031][927 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.454/201.454/201.454/0.000 ms\n [2025-08-26 22:08:04][353809892538031][927 ms][DEBUG] check_internet: online [2025-08-26 22:08:04][353809892538031][927 ms][DEBUG] rawBody.length=1148 [2025-08-26 22:08:04][353809892538031][927 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809892538031\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4670\"}'\'' -e'"" [2025-08-26 22:08:04][353809892538031][927 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 22:08:04][353809892538031][927 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353809892538031\",\"model\":\"SM-A047F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XSA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4670\"}'\'' -e'"" [2025-08-26 22:08:08][353809892538031][4723 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dbbf4bca-6fdc-4bce-b7a3-bc4c26508c81","id":"QR_dbbf4bca-6fdc-4bce-b7a3-bc4c26508c81","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 22:08:08][353809892538031][4879 ms][DEBUG] proc_open done in 3951 ms; code=255; res.len=3343 [2025-08-26 22:08:08][353809892538031][4879 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-26 22:08:08][353809892538031][4879 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 22:12:02][359156944661674][1 ms][INFO] === Request start === [2025-08-26 22:12:02][359156944661674][1 ms][DEBUG] START check_scloud [2025-08-26 22:12:02][359156944661674][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 22:12:02][359156944661674][263 ms][DEBUG] SU: done in 261 ms; outu0_a118 11083 5018 24782600 141368 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 22:12:02][359156944661674][263 ms][DEBUG] targetPkg: running [2025-08-26 22:12:02][359156944661674][263 ms][DEBUG] END check_scloud in 262 ms [2025-08-26 22:12:02][359156944661674][263 ms][DEBUG] START check_boot_completed [2025-08-26 22:12:02][359156944661674][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:12:02][359156944661674][309 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 22:12:02][359156944661674][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:12:02][359156944661674][356 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 22:12:02][359156944661674][356 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 22:12:02][359156944661674][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 22:12:02][359156944661674][481 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1817\nsuccessfulTxPacketsPerSecond: 0.05274505020669466\nretriedTxPackets: 221\nretriedTxPacketsPerSecond: 0.039558787655021\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1843\nsuccessfulRxPacketsPerSecond: 0.032965656379184166\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 22:12:02][359156944661674][481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 22:12:03][359156944661674][809 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=181 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 181.856/181.856/181.856/0.000 ms\n [2025-08-26 22:12:03][359156944661674][809 ms][DEBUG] check_internet: online [2025-08-26 22:12:03][359156944661674][809 ms][DEBUG] rawBody.length=1148 [2025-08-26 22:12:03][359156944661674][810 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156944661674\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3706\"}'\'' -e'"" [2025-08-26 22:12:03][359156944661674][810 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 22:12:03][359156944661674][810 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156944661674\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3706\"}'\'' -e'"" [2025-08-26 22:12:06][359156944661674][4574 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_89f70c4b-f057-476d-adb5-5f3ee6ad0c71","id":"QR_89f70c4b-f057-476d-adb5-5f3ee6ad0c71","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 22:12:06][359156944661674][4730 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3343 [2025-08-26 22:12:06][359156944661674][4730 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-08-26 22:12:06][359156944661674][4730 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 22:18:03][350525791105192][1 ms][INFO] === Request start === [2025-08-26 22:18:03][350525791105192][1 ms][DEBUG] START check_scloud [2025-08-26 22:18:03][350525791105192][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 22:18:03][350525791105192][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 11083 5018 24913772 138708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 22:18:03][350525791105192][290 ms][DEBUG] targetPkg: running [2025-08-26 22:18:03][350525791105192][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-26 22:18:03][350525791105192][290 ms][DEBUG] START check_boot_completed [2025-08-26 22:18:03][350525791105192][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:18:03][350525791105192][337 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 22:18:03][350525791105192][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:18:03][350525791105192][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 22:18:03][350525791105192][384 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 22:18:03][350525791105192][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 22:18:03][350525791105192][493 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1874\nsuccessfulTxPacketsPerSecond: 0.043751039087178326\nretriedTxPackets: 243\nretriedTxPacketsPerSecond: 0.035000831269742655\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1893\nsuccessfulRxPacketsPerSecond: 0.026250623452306995\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 22:18:03][350525791105192][493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 22:18:04][350525791105192][883 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.585/202.585/202.585/0.000 ms\n [2025-08-26 22:18:04][350525791105192][884 ms][DEBUG] check_internet: online [2025-08-26 22:18:04][350525791105192][884 ms][DEBUG] rawBody.length=1149 [2025-08-26 22:18:04][350525791105192][884 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350525791105192\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7086\"}'\'' -e'"" [2025-08-26 22:18:04][350525791105192][884 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 22:18:04][350525791105192][884 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350525791105192\",\"model\":\"SM-A166M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7086\"}'\'' -e'"" [2025-08-26 22:18:08][350525791105192][5414 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ba77ebe0-b61b-406b-af0a-21f0f880bdc7","id":"QR_ba77ebe0-b61b-406b-af0a-21f0f880bdc7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 22:18:08][350525791105192][5570 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3343 [2025-08-26 22:18:08][350525791105192][5570 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-08-26 22:18:08][350525791105192][5570 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 22:20:29][350784345816362][1 ms][INFO] === Request start === [2025-08-26 22:20:29][350784345816362][1 ms][DEBUG] START check_scloud [2025-08-26 22:20:29][350784345816362][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 22:20:29][350784345816362][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 11083 5018 25072724 135292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 22:20:29][350784345816362][266 ms][DEBUG] targetPkg: running [2025-08-26 22:20:29][350784345816362][266 ms][DEBUG] END check_scloud in 265 ms [2025-08-26 22:20:29][350784345816362][266 ms][DEBUG] START check_boot_completed [2025-08-26 22:20:29][350784345816362][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:20:29][350784345816362][313 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 22:20:29][350784345816362][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:20:29][350784345816362][375 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 22:20:29][350784345816362][375 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 22:20:29][350784345816362][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 22:20:29][350784345816362][500 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1913\nsuccessfulTxPacketsPerSecond: 0.07061334330564438\nretriedTxPackets: 259\nretriedTxPacketsPerSecond: 0.06996666084800095\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1926\nsuccessfulRxPacketsPerSecond: 9.27848743575362E-4\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 22:20:29][350784345816362][500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 22:20:29][350784345816362][751 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=153 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 153.179/153.179/153.179/0.000 ms\n [2025-08-26 22:20:29][350784345816362][751 ms][DEBUG] check_internet: online [2025-08-26 22:20:29][350784345816362][751 ms][DEBUG] rawBody.length=1149 [2025-08-26 22:20:29][350784345816362][751 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350784345816362\",\"model\":\"SM-A325M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9290\"}'\'' -e'"" [2025-08-26 22:20:29][350784345816362][751 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 22:20:29][350784345816362][751 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350784345816362\",\"model\":\"SM-A325M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9290\"}'\'' -e'"" [2025-08-26 22:20:34][350784345816362][5061 ms][DEBUG] proc_open done in 4310 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 22:20:34][350784345816362][5061 ms][DEBUG] END runCmdUntilRes#1 in 4310 ms [2025-08-26 22:20:34][350784345816362][5061 ms][WARN] Detected error: Process with pid 11083 either refused to load frida-agent, or terminated during injectionProcess with pid 11083 either refused to load frida-agent, or terminated during injection\r\n [2025-08-26 22:20:34][350784345816362][5061 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-08-26 22:20:34][350784345816362][5327 ms][DEBUG] SU: done in 266 ms; outsystem 5439 5018 12813200 240320 ep_poll 0 S system_server\n [2025-08-26 22:20:34][350784345816362][5327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 22:20:34][350784345816362][5468 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 22:20:34][350784345816362][5468 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 22:20:34][350784345816362][5468 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 22:20:34][350784345816362][5593 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 22:20:34][350784345816362][5593 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 22:20:34][350784345816362][5795 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 22:20:36][350784345816362][7811 ms][DEBUG] START check_boot_completed [2025-08-26 22:20:36][350784345816362][7811 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:20:36][350784345816362][7858 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 22:20:36][350784345816362][7858 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:20:36][350784345816362][7905 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 22:20:36][350784345816362][7905 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 22:20:40][350784345816362][10919 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 22:20:40][350784345816362][10919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350784345816362\",\"model\":\"SM-A325M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9290\"}'\'' -e'"" [2025-08-26 22:20:45][350784345816362][16027 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_818108d0-31d5-4817-9fc0-057481282dc7","id":"QR_818108d0-31d5-4817-9fc0-057481282dc7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 22:20:45][350784345816362][16184 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3343 [2025-08-26 22:20:45][350784345816362][16184 ms][DEBUG] END runCmdUntilRes#2 in 5264 ms [2025-08-26 22:20:45][350784345816362][16184 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 22:21:03][353600810559294][0 ms][INFO] === Request start === [2025-08-26 22:21:03][353600810559294][1 ms][DEBUG] START check_scloud [2025-08-26 22:21:03][353600810559294][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 22:21:03][353600810559294][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 19258 5018 23700832 126208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 22:21:03][353600810559294][303 ms][DEBUG] targetPkg: running [2025-08-26 22:21:03][353600810559294][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-26 22:21:03][353600810559294][303 ms][DEBUG] START check_boot_completed [2025-08-26 22:21:03][353600810559294][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:21:03][353600810559294][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 22:21:03][353600810559294][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:21:03][353600810559294][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 22:21:03][353600810559294][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 22:21:03][353600810559294][381 ms][DEBUG] rawBody.length=1149 [2025-08-26 22:21:03][353600810559294][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600810559294\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3152\"}'\'' -e'"" [2025-08-26 22:21:03][353600810559294][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 22:21:03][353600810559294][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600810559294\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3152\"}'\'' -e'"" [2025-08-26 22:21:08][353600810559294][5082 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_afee7888-9726-4e2a-8575-40d79062678e","id":"QR_afee7888-9726-4e2a-8575-40d79062678e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 22:21:08][353600810559294][5239 ms][DEBUG] proc_open done in 4857 ms; code=255; res.len=3343 [2025-08-26 22:21:08][353600810559294][5239 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-08-26 22:21:08][353600810559294][5239 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 22:24:02][351165706882095][1 ms][INFO] === Request start === [2025-08-26 22:24:02][351165706882095][1 ms][DEBUG] START check_scloud [2025-08-26 22:24:02][351165706882095][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 22:24:02][351165706882095][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 19258 5018 23746724 137456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 22:24:02][351165706882095][265 ms][DEBUG] targetPkg: running [2025-08-26 22:24:02][351165706882095][265 ms][DEBUG] END check_scloud in 264 ms [2025-08-26 22:24:02][351165706882095][265 ms][DEBUG] START check_boot_completed [2025-08-26 22:24:02][351165706882095][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:24:02][351165706882095][297 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 22:24:02][351165706882095][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:24:02][351165706882095][344 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 22:24:02][351165706882095][344 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 22:24:02][351165706882095][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 22:24:03][351165706882095][469 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1913\nsuccessfulTxPacketsPerSecond: 0.07061334330564438\nretriedTxPackets: 259\nretriedTxPacketsPerSecond: 0.06996666084800095\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1926\nsuccessfulRxPacketsPerSecond: 9.27848743575362E-4\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 22:24:03][351165706882095][469 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 22:24:03][351165706882095][906 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.238/200.238/200.238/0.000 ms\n [2025-08-26 22:24:03][351165706882095][906 ms][DEBUG] check_internet: online [2025-08-26 22:24:03][351165706882095][906 ms][DEBUG] rawBody.length=1148 [2025-08-26 22:24:03][351165706882095][906 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351165706882095\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5223\"}'\'' -e'"" [2025-08-26 22:24:03][351165706882095][907 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 22:24:03][351165706882095][907 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351165706882095\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5223\"}'\'' -e'"" [2025-08-26 22:24:06][351165706882095][4311 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 22:24:07][351165706882095][4467 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=107 [2025-08-26 22:24:07][351165706882095][4467 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-08-26 22:24:07][351165706882095][4467 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 22:24:07][][0 ms][INFO] === Request start === [2025-08-26 22:24:07][][1 ms][DEBUG] START check_scloud [2025-08-26 22:24:07][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 22:24:07][][258 ms][DEBUG] SU: done in 258 ms; outu0_a118 19258 5018 23893164 147612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 22:24:07][][259 ms][DEBUG] targetPkg: running [2025-08-26 22:24:07][][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-26 22:24:07][][259 ms][DEBUG] START check_boot_completed [2025-08-26 22:24:07][][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:24:07][][305 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 22:24:07][][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:24:07][][352 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 22:24:07][][352 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 22:24:07][][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 22:24:07][][493 ms][DEBUG] SU: done in 141 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 1913\nsuccessfulTxPacketsPerSecond: 0.07061334330564438\nretriedTxPackets: 259\nretriedTxPacketsPerSecond: 0.06996666084800095\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 1926\nsuccessfulRxPacketsPerSecond: 9.27848743575362E-4\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 22:24:07][][493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 22:24:08][][727 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=116 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 116.805/116.805/116.805/0.000 ms\n [2025-08-26 22:24:08][][727 ms][DEBUG] check_internet: online [2025-08-26 22:24:08][][727 ms][DEBUG] rawBody.length=1129 [2025-08-26 22:24:08][][728 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCXA16J5MP\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2733\"}'\'' -e'"" [2025-08-26 22:24:08][][728 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 22:24:08][][728 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCXA16J5MP\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2733\"}'\'' -e'"" [2025-08-26 22:24:11][][3976 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-26 22:24:11][][4132 ms][DEBUG] proc_open done in 3405 ms; code=255; res.len=107 [2025-08-26 22:24:11][][4132 ms][DEBUG] END runCmdUntilRes#1 in 3405 ms [2025-08-26 22:24:11][][4132 ms][INFO] SUCCESS response from frida (len=107) [2025-08-26 22:25:03][351351022399556][0 ms][INFO] === Request start === [2025-08-26 22:25:03][351351022399556][1 ms][DEBUG] START check_scloud [2025-08-26 22:25:03][351351022399556][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 22:25:03][351351022399556][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 19258 5018 24027308 158184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 22:25:03][351351022399556][308 ms][DEBUG] targetPkg: running [2025-08-26 22:25:03][351351022399556][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-26 22:25:03][351351022399556][308 ms][DEBUG] START check_boot_completed [2025-08-26 22:25:03][351351022399556][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:25:03][351351022399556][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 22:25:03][351351022399556][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:25:03][351351022399556][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 22:25:03][351351022399556][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 22:25:03][351351022399556][386 ms][DEBUG] rawBody.length=1148 [2025-08-26 22:25:03][351351022399556][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351022399556\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9055\"}'\'' -e'"" [2025-08-26 22:25:03][351351022399556][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 22:25:03][351351022399556][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351022399556\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9055\"}'\'' -e'"" [2025-08-26 22:25:07][351351022399556][3885 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0e3c8177-b975-4f39-8e80-e6eb4c26e592","id":"QR_0e3c8177-b975-4f39-8e80-e6eb4c26e592","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 22:25:07][351351022399556][4041 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=3343 [2025-08-26 22:25:07][351351022399556][4041 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-26 22:25:07][351351022399556][4041 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 22:25:09][354401162311924][0 ms][INFO] === Request start === [2025-08-26 22:25:09][354401162311924][1 ms][DEBUG] START check_scloud [2025-08-26 22:25:09][354401162311924][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 22:25:09][354401162311924][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 19258 5018 24155380 168972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 22:25:09][354401162311924][257 ms][DEBUG] targetPkg: running [2025-08-26 22:25:09][354401162311924][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-26 22:25:09][354401162311924][257 ms][DEBUG] START check_boot_completed [2025-08-26 22:25:09][354401162311924][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:25:10][354401162311924][303 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 22:25:10][354401162311924][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:25:10][354401162311924][350 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 22:25:10][354401162311924][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 22:25:10][354401162311924][350 ms][DEBUG] rawBody.length=1149 [2025-08-26 22:25:10][354401162311924][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354401162311924\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6588\"}'\'' -e'"" [2025-08-26 22:25:10][354401162311924][350 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 22:25:10][354401162311924][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354401162311924\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6588\"}'\'' -e'"" [2025-08-26 22:25:14][354401162311924][5146 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_366853de-d6c4-4f5c-a258-3e0c05125a88","id":"QR_366853de-d6c4-4f5c-a258-3e0c05125a88","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 22:25:15][354401162311924][5302 ms][DEBUG] proc_open done in 4952 ms; code=255; res.len=3343 [2025-08-26 22:25:15][354401162311924][5302 ms][DEBUG] END runCmdUntilRes#1 in 4952 ms [2025-08-26 22:25:15][354401162311924][5302 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 22:26:01][354420573321058][0 ms][INFO] === Request start === [2025-08-26 22:26:01][354420573321058][1 ms][DEBUG] START check_scloud [2025-08-26 22:26:01][354420573321058][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 22:26:02][354420573321058][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 19258 5018 24289076 181028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 22:26:02][354420573321058][312 ms][DEBUG] targetPkg: running [2025-08-26 22:26:02][354420573321058][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-26 22:26:02][354420573321058][312 ms][DEBUG] START check_boot_completed [2025-08-26 22:26:02][354420573321058][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:26:02][354420573321058][343 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 22:26:02][354420573321058][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:26:02][354420573321058][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 22:26:02][354420573321058][391 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-26 22:26:02][354420573321058][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 22:26:02][354420573321058][531 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2026\nsuccessfulTxPacketsPerSecond: 0.39387506840529396\nretriedTxPackets: 291\nretriedTxPacketsPerSecond: 0.11153984238026024\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2023\nsuccessfulRxPacketsPerSecond: 0.3381051472151638\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 22:26:02][354420573321058][531 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 22:26:02][354420573321058][874 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.234/223.234/223.234/0.000 ms\n [2025-08-26 22:26:02][354420573321058][875 ms][DEBUG] check_internet: online [2025-08-26 22:26:02][354420573321058][875 ms][DEBUG] rawBody.length=1149 [2025-08-26 22:26:02][354420573321058][875 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354420573321058\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4658\"}'\'' -e'"" [2025-08-26 22:26:02][354420573321058][875 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 22:26:02][354420573321058][875 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354420573321058\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a9094cbfb44069064023a2\",\"group\":\"7d56b13b-d43e-4ba9-8512-bd5cc9710a2f\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4658\"}'\'' -e'"" [2025-08-26 22:26:07][354420573321058][5311 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_52b6ef25-9c51-46c5-b9a3-ab495a4d691f","id":"QR_52b6ef25-9c51-46c5-b9a3-ab495a4d691f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 22:26:07][354420573321058][5467 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3343 [2025-08-26 22:26:07][354420573321058][5467 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-08-26 22:26:07][354420573321058][5467 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 22:28:05][353600810559294][1 ms][INFO] === Request start === [2025-08-26 22:28:05][353600810559294][1 ms][DEBUG] START check_scloud [2025-08-26 22:28:05][353600810559294][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 22:28:05][353600810559294][248 ms][DEBUG] SU: done in 247 ms; outu0_a118 19258 5018 24415256 192208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 22:28:05][353600810559294][248 ms][DEBUG] targetPkg: running [2025-08-26 22:28:05][353600810559294][248 ms][DEBUG] END check_scloud in 247 ms [2025-08-26 22:28:05][353600810559294][248 ms][DEBUG] START check_boot_completed [2025-08-26 22:28:05][353600810559294][248 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:28:05][353600810559294][280 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 22:28:05][353600810559294][280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:28:05][353600810559294][326 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 22:28:05][353600810559294][326 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 22:28:05][353600810559294][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 22:28:05][353600810559294][436 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2026\nsuccessfulTxPacketsPerSecond: 0.39387506840529396\nretriedTxPackets: 291\nretriedTxPacketsPerSecond: 0.11153984238026024\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2023\nsuccessfulRxPacketsPerSecond: 0.3381051472151638\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 22:28:05][353600810559294][436 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 22:28:06][353600810559294][842 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=154 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 154.415/154.415/154.415/0.000 ms\n [2025-08-26 22:28:06][353600810559294][842 ms][DEBUG] check_internet: online [2025-08-26 22:28:06][353600810559294][842 ms][DEBUG] rawBody.length=1149 [2025-08-26 22:28:06][353600810559294][842 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600810559294\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4259\"}'\'' -e'"" [2025-08-26 22:28:06][353600810559294][842 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 22:28:06][353600810559294][842 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600810559294\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4259\"}'\'' -e'"" [2025-08-26 22:28:09][353600810559294][4638 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bd9eac38-9b0a-4532-99d1-0806d0eaca19","id":"QR_bd9eac38-9b0a-4532-99d1-0806d0eaca19","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 22:28:10][353600810559294][4794 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=3343 [2025-08-26 22:28:10][353600810559294][4794 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-26 22:28:10][353600810559294][4794 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 22:28:11][352826831636479][0 ms][INFO] === Request start === [2025-08-26 22:28:11][352826831636479][1 ms][DEBUG] START check_scloud [2025-08-26 22:28:11][352826831636479][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 22:28:11][352826831636479][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 19258 5018 24561824 203984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 22:28:11][352826831636479][246 ms][DEBUG] targetPkg: running [2025-08-26 22:28:11][352826831636479][246 ms][DEBUG] END check_scloud in 246 ms [2025-08-26 22:28:11][352826831636479][246 ms][DEBUG] START check_boot_completed [2025-08-26 22:28:11][352826831636479][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:28:11][352826831636479][277 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 22:28:11][352826831636479][277 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:28:11][352826831636479][324 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 22:28:11][352826831636479][324 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 22:28:11][352826831636479][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 22:28:12][352826831636479][433 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2026\nsuccessfulTxPacketsPerSecond: 0.39387506840529396\nretriedTxPackets: 291\nretriedTxPacketsPerSecond: 0.11153984238026024\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2023\nsuccessfulRxPacketsPerSecond: 0.3381051472151638\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 22:28:12][352826831636479][434 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 22:28:12][352826831636479][683 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=116 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 116.771/116.771/116.771/0.000 ms\n [2025-08-26 22:28:12][352826831636479][683 ms][DEBUG] check_internet: online [2025-08-26 22:28:12][352826831636479][683 ms][DEBUG] rawBody.length=1149 [2025-08-26 22:28:12][352826831636479][683 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352826831636479\",\"model\":\"SM-M536B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2746\"}'\'' -e'"" [2025-08-26 22:28:12][352826831636479][683 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 22:28:12][352826831636479][683 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352826831636479\",\"model\":\"SM-M536B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2746\"}'\'' -e'"" [2025-08-26 22:28:17][352826831636479][5651 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_70608f99-889a-4fe4-9010-a1a91ebde0a9","id":"QR_70608f99-889a-4fe4-9010-a1a91ebde0a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 22:28:17][352826831636479][5807 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-08-26 22:28:17][352826831636479][5807 ms][DEBUG] END runCmdUntilRes#1 in 5124 ms [2025-08-26 22:28:17][352826831636479][5807 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 22:28:19][356722915796170][1 ms][INFO] === Request start === [2025-08-26 22:28:19][356722915796170][1 ms][DEBUG] START check_scloud [2025-08-26 22:28:19][356722915796170][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 22:28:19][356722915796170][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 19258 5018 24729832 214264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 22:28:19][356722915796170][266 ms][DEBUG] targetPkg: running [2025-08-26 22:28:19][356722915796170][266 ms][DEBUG] END check_scloud in 266 ms [2025-08-26 22:28:19][356722915796170][266 ms][DEBUG] START check_boot_completed [2025-08-26 22:28:19][356722915796170][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:28:19][356722915796170][312 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 22:28:19][356722915796170][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:28:19][356722915796170][359 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 22:28:19][356722915796170][359 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 22:28:19][356722915796170][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 22:28:19][356722915796170][499 ms][DEBUG] SU: done in 140 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2026\nsuccessfulTxPacketsPerSecond: 0.39387506840529396\nretriedTxPackets: 291\nretriedTxPacketsPerSecond: 0.11153984238026024\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2023\nsuccessfulRxPacketsPerSecond: 0.3381051472151638\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 22:28:19][356722915796170][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 22:28:19][356722915796170][812 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=210 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 210.415/210.415/210.415/0.000 ms\n [2025-08-26 22:28:19][356722915796170][812 ms][DEBUG] check_internet: online [2025-08-26 22:28:19][356722915796170][812 ms][DEBUG] rawBody.length=1149 [2025-08-26 22:28:19][356722915796170][812 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722915796170\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2249\"}'\'' -e'"" [2025-08-26 22:28:19][356722915796170][813 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 22:28:19][356722915796170][813 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722915796170\",\"model\":\"SM-A156M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2249\"}'\'' -e'"" [2025-08-26 22:28:24][356722915796170][5654 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5dcb4ad1-e970-4b99-9e58-6bf9d0d7c32d","id":"QR_5dcb4ad1-e970-4b99-9e58-6bf9d0d7c32d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 22:28:24][356722915796170][5811 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-08-26 22:28:24][356722915796170][5811 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-08-26 22:28:24][356722915796170][5811 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 22:28:26][353065224451373][0 ms][INFO] === Request start === [2025-08-26 22:28:26][353065224451373][1 ms][DEBUG] START check_scloud [2025-08-26 22:28:26][353065224451373][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 22:28:26][353065224451373][281 ms][DEBUG] SU: done in 280 ms; outu0_a118 19258 5018 24856012 226248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 22:28:26][353065224451373][281 ms][DEBUG] targetPkg: running [2025-08-26 22:28:26][353065224451373][281 ms][DEBUG] END check_scloud in 280 ms [2025-08-26 22:28:26][353065224451373][281 ms][DEBUG] START check_boot_completed [2025-08-26 22:28:26][353065224451373][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:28:26][353065224451373][328 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 22:28:26][353065224451373][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:28:26][353065224451373][390 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 22:28:26][353065224451373][390 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 22:28:26][353065224451373][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 22:28:26][353065224451373][515 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2026\nsuccessfulTxPacketsPerSecond: 0.39387506840529396\nretriedTxPackets: 291\nretriedTxPacketsPerSecond: 0.11153984238026024\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2023\nsuccessfulRxPacketsPerSecond: 0.3381051472151638\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 22:28:26][353065224451373][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 22:28:27][353065224451373][890 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=233 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 233.808/233.808/233.808/0.000 ms\n [2025-08-26 22:28:27][353065224451373][890 ms][DEBUG] check_internet: online [2025-08-26 22:28:27][353065224451373][890 ms][DEBUG] rawBody.length=1149 [2025-08-26 22:28:27][353065224451373][891 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353065224451373\",\"model\":\"SM-M546B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4154\"}'\'' -e'"" [2025-08-26 22:28:27][353065224451373][891 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 22:28:27][353065224451373][891 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353065224451373\",\"model\":\"SM-M546B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4154\"}'\'' -e'"" [2025-08-26 22:28:32][353065224451373][5732 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_181cd1a9-ace0-4576-9a3b-029d8313a8af","id":"QR_181cd1a9-ace0-4576-9a3b-029d8313a8af","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 22:28:32][353065224451373][5889 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=3343 [2025-08-26 22:28:32][353065224451373][5889 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-08-26 22:28:32][353065224451373][5889 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 22:31:03][359706682408884][1 ms][INFO] === Request start === [2025-08-26 22:31:03][359706682408884][1 ms][DEBUG] START check_scloud [2025-08-26 22:31:03][359706682408884][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 22:31:03][359706682408884][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 19258 5018 24982120 237744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 22:31:03][359706682408884][251 ms][DEBUG] targetPkg: running [2025-08-26 22:31:03][359706682408884][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-26 22:31:03][359706682408884][251 ms][DEBUG] START check_boot_completed [2025-08-26 22:31:03][359706682408884][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:31:03][359706682408884][282 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 22:31:03][359706682408884][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:31:03][359706682408884][329 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 22:31:03][359706682408884][329 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 22:31:03][359706682408884][329 ms][DEBUG] rawBody.length=1149 [2025-08-26 22:31:03][359706682408884][329 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359706682408884\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4752\"}'\'' -e'"" [2025-08-26 22:31:03][359706682408884][329 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 22:31:03][359706682408884][329 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359706682408884\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4752\"}'\'' -e'"" [2025-08-26 22:31:07][359706682408884][4203 ms][DEBUG] proc_open done in 3874 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 22:31:07][359706682408884][4203 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-26 22:31:07][359706682408884][4203 ms][WARN] Detected error: Process with pid 19258 either refused to load frida-agent, or terminated during injectionProcess with pid 19258 either refused to load frida-agent, or terminated during injection\r\n [2025-08-26 22:31:07][359706682408884][4203 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-08-26 22:31:07][359706682408884][4500 ms][DEBUG] SU: done in 297 ms; outsystem 5439 5018 12730796 216988 ep_poll 0 S system_server\n [2025-08-26 22:31:07][359706682408884][4500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 22:31:07][359706682408884][4641 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 22:31:07][359706682408884][4641 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 22:31:07][359706682408884][4641 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 22:31:07][359706682408884][4781 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 22:31:07][359706682408884][4781 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 22:31:08][359706682408884][4969 ms][DEBUG] SU: done in 188 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 22:31:10][359706682408884][6984 ms][DEBUG] START check_boot_completed [2025-08-26 22:31:10][359706682408884][6984 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:31:10][359706682408884][7030 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 22:31:10][359706682408884][7030 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:31:10][359706682408884][7078 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 22:31:10][359706682408884][7078 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 22:31:13][359706682408884][10092 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 22:31:13][359706682408884][10092 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359706682408884\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4752\"}'\'' -e'"" [2025-08-26 22:31:18][359706682408884][15060 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6edcf10d-619e-42f2-a689-43c858ad975d","id":"QR_6edcf10d-619e-42f2-a689-43c858ad975d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 22:31:18][359706682408884][15216 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-08-26 22:31:18][359706682408884][15216 ms][DEBUG] END runCmdUntilRes#2 in 5124 ms [2025-08-26 22:31:18][359706682408884][15216 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 22:33:02][355088852671771][0 ms][INFO] === Request start === [2025-08-26 22:33:02][355088852671771][1 ms][DEBUG] START check_scloud [2025-08-26 22:33:02][355088852671771][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 22:33:02][355088852671771][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 21607 5018 23620104 126432 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 22:33:02][355088852671771][255 ms][DEBUG] targetPkg: running [2025-08-26 22:33:02][355088852671771][255 ms][DEBUG] END check_scloud in 254 ms [2025-08-26 22:33:02][355088852671771][255 ms][DEBUG] START check_boot_completed [2025-08-26 22:33:02][355088852671771][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:33:02][355088852671771][302 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 22:33:02][355088852671771][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:33:02][355088852671771][348 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 22:33:02][355088852671771][349 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 22:33:02][355088852671771][349 ms][DEBUG] rawBody.length=1148 [2025-08-26 22:33:02][355088852671771][349 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355088852671771\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1757\"}'\'' -e'"" [2025-08-26 22:33:02][355088852671771][349 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 22:33:02][355088852671771][349 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355088852671771\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a908f644d1aa1d0da2c7b8\",\"group\":\"503e7952-e35e-46d5-a72a-7f13b0ab6143\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1757\"}'\'' -e'"" [2025-08-26 22:33:06][355088852671771][3957 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_46e70544-500b-4976-9681-27abd09d39df","id":"QR_46e70544-500b-4976-9681-27abd09d39df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 22:33:06][355088852671771][4113 ms][DEBUG] proc_open done in 3764 ms; code=255; res.len=3343 [2025-08-26 22:33:06][355088852671771][4113 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-08-26 22:33:06][355088852671771][4113 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 22:33:08][357157887847280][1 ms][INFO] === Request start === [2025-08-26 22:33:08][357157887847280][1 ms][DEBUG] START check_scloud [2025-08-26 22:33:08][357157887847280][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 22:33:08][357157887847280][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 21607 5018 23765508 137244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 22:33:08][357157887847280][295 ms][DEBUG] targetPkg: running [2025-08-26 22:33:08][357157887847280][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-26 22:33:08][357157887847280][295 ms][DEBUG] START check_boot_completed [2025-08-26 22:33:08][357157887847280][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:33:08][357157887847280][342 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 22:33:08][357157887847280][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:33:08][357157887847280][405 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 22:33:08][357157887847280][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 22:33:08][357157887847280][405 ms][DEBUG] rawBody.length=1149 [2025-08-26 22:33:08][357157887847280][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357157887847280\",\"model\":\"SM-A326U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9577\"}'\'' -e'"" [2025-08-26 22:33:08][357157887847280][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 22:33:08][357157887847280][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357157887847280\",\"model\":\"SM-A326U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9577\"}'\'' -e'"" [2025-08-26 22:33:13][357157887847280][5419 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_87e565f3-082e-4e92-b904-afc04db3f094","id":"QR_87e565f3-082e-4e92-b904-afc04db3f094","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 22:33:14][357157887847280][5575 ms][DEBUG] proc_open done in 5170 ms; code=255; res.len=3343 [2025-08-26 22:33:14][357157887847280][5575 ms][DEBUG] END runCmdUntilRes#1 in 5170 ms [2025-08-26 22:33:14][357157887847280][5575 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 22:52:03][357040731051921][1 ms][INFO] === Request start === [2025-08-26 22:52:03][357040731051921][1 ms][DEBUG] START check_scloud [2025-08-26 22:52:03][357040731051921][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 22:52:03][357040731051921][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 21607 5018 23857784 145824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 22:52:03][357040731051921][315 ms][DEBUG] targetPkg: running [2025-08-26 22:52:03][357040731051921][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-26 22:52:03][357040731051921][315 ms][DEBUG] START check_boot_completed [2025-08-26 22:52:03][357040731051921][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:52:03][357040731051921][347 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 22:52:03][357040731051921][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:52:03][357040731051921][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 22:52:03][357040731051921][394 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 22:52:03][357040731051921][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 22:52:03][357040731051921][519 ms][DEBUG] SU: done in 125 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2400\nsuccessfulTxPacketsPerSecond: 0.016423395126357498\nretriedTxPackets: 386\nretriedTxPacketsPerSecond: 0.016423395126357498\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2331\nsuccessfulRxPacketsPerSecond: 0.016423395126357498\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 22:52:03][357040731051921][519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 22:52:04][357040731051921][987 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.409/202.409/202.409/0.000 ms\n [2025-08-26 22:52:04][357040731051921][987 ms][DEBUG] check_internet: online [2025-08-26 22:52:04][357040731051921][987 ms][DEBUG] rawBody.length=1148 [2025-08-26 22:52:04][357040731051921][987 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040731051921\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6581\"}'\'' -e'"" [2025-08-26 22:52:04][357040731051921][987 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 22:52:04][357040731051921][987 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357040731051921\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6581\"}'\'' -e'"" [2025-08-26 22:52:08][357040731051921][5017 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5caaa8f4-eb80-4350-9d3c-3ee33220eac0","id":"QR_5caaa8f4-eb80-4350-9d3c-3ee33220eac0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 22:52:08][357040731051921][5174 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3343 [2025-08-26 22:52:08][357040731051921][5174 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-26 22:52:08][357040731051921][5174 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 22:59:04][352610712676360][1 ms][INFO] === Request start === [2025-08-26 22:59:04][352610712676360][1 ms][DEBUG] START check_scloud [2025-08-26 22:59:04][352610712676360][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 22:59:04][352610712676360][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 21607 5018 24022992 136004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 22:59:04][352610712676360][253 ms][DEBUG] targetPkg: running [2025-08-26 22:59:04][352610712676360][253 ms][DEBUG] END check_scloud in 252 ms [2025-08-26 22:59:04][352610712676360][253 ms][DEBUG] START check_boot_completed [2025-08-26 22:59:04][352610712676360][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 22:59:04][352610712676360][285 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 22:59:04][352610712676360][285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 22:59:05][352610712676360][332 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 22:59:05][352610712676360][332 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 22:59:05][352610712676360][332 ms][DEBUG] rawBody.length=1149 [2025-08-26 22:59:05][352610712676360][332 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352610712676360\",\"model\":\"SM-A356U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PCT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7928\"}'\'' -e'"" [2025-08-26 22:59:05][352610712676360][332 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 22:59:05][352610712676360][332 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352610712676360\",\"model\":\"SM-A356U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"PCT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7928\"}'\'' -e'"" [2025-08-26 22:59:10][352610712676360][5487 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8a4a87f7-8497-42e2-b2a8-03dc6074d13c","id":"QR_8a4a87f7-8497-42e2-b2a8-03dc6074d13c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 22:59:10][352610712676360][5643 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-08-26 22:59:10][352610712676360][5643 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-08-26 22:59:10][352610712676360][5643 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 23:00:04][355415231735029][0 ms][INFO] === Request start === [2025-08-26 23:00:04][355415231735029][1 ms][DEBUG] START check_scloud [2025-08-26 23:00:04][355415231735029][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 23:00:05][355415231735029][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 21607 5018 24199296 135364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 23:00:05][355415231735029][266 ms][DEBUG] targetPkg: running [2025-08-26 23:00:05][355415231735029][266 ms][DEBUG] END check_scloud in 266 ms [2025-08-26 23:00:05][355415231735029][266 ms][DEBUG] START check_boot_completed [2025-08-26 23:00:05][355415231735029][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 23:00:05][355415231735029][312 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 23:00:05][355415231735029][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 23:00:05][355415231735029][390 ms][DEBUG] SU: done in 78 ms; out [2025-08-26 23:00:05][355415231735029][390 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-26 23:00:05][355415231735029][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 23:00:05][355415231735029][547 ms][DEBUG] SU: done in 157 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2519\nsuccessfulTxPacketsPerSecond: 0.16601092351876753\nretriedTxPackets: 421\nretriedTxPacketsPerSecond: 0.053123495526005614\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2449\nsuccessfulRxPacketsPerSecond: 0.1626907050483922\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 23:00:05][355415231735029][548 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 23:00:05][355415231735029][984 ms][DEBUG] SU: done in 436 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.480/201.480/201.480/0.000 ms\n [2025-08-26 23:00:05][355415231735029][984 ms][DEBUG] check_internet: online [2025-08-26 23:00:05][355415231735029][984 ms][DEBUG] rawBody.length=1149 [2025-08-26 23:00:05][355415231735029][984 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355415231735029\",\"model\":\"SM-A536U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2116\"}'\'' -e'"" [2025-08-26 23:00:05][355415231735029][984 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 23:00:05][355415231735029][984 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355415231735029\",\"model\":\"SM-A536U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2116\"}'\'' -e'"" [2025-08-26 23:00:10][355415231735029][5998 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_17a43ab5-7da0-4344-ae11-7867eaffe959","id":"QR_17a43ab5-7da0-4344-ae11-7867eaffe959","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 23:00:11][355415231735029][6154 ms][DEBUG] proc_open done in 5170 ms; code=255; res.len=3343 [2025-08-26 23:00:11][355415231735029][6154 ms][DEBUG] END runCmdUntilRes#1 in 5170 ms [2025-08-26 23:00:11][355415231735029][6154 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 23:03:04][357861962076216][1 ms][INFO] === Request start === [2025-08-26 23:03:04][357861962076216][1 ms][DEBUG] START check_scloud [2025-08-26 23:03:04][357861962076216][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 23:03:04][357861962076216][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 21607 5018 24337764 146860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 23:03:04][357861962076216][252 ms][DEBUG] targetPkg: running [2025-08-26 23:03:04][357861962076216][252 ms][DEBUG] END check_scloud in 251 ms [2025-08-26 23:03:04][357861962076216][252 ms][DEBUG] START check_boot_completed [2025-08-26 23:03:04][357861962076216][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 23:03:04][357861962076216][299 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 23:03:04][357861962076216][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 23:03:04][357861962076216][361 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 23:03:04][357861962076216][361 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 23:03:04][357861962076216][362 ms][DEBUG] rawBody.length=1149 [2025-08-26 23:03:04][357861962076216][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357861962076216\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1339\"}'\'' -e'"" [2025-08-26 23:03:04][357861962076216][362 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 23:03:04][357861962076216][362 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357861962076216\",\"model\":\"SM-A156U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1339\"}'\'' -e'"" [2025-08-26 23:03:09][357861962076216][5376 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e23ac249-9113-41a5-b5c1-b81ef6bfd316","id":"QR_e23ac249-9113-41a5-b5c1-b81ef6bfd316","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 23:03:10][357861962076216][5532 ms][DEBUG] proc_open done in 5170 ms; code=255; res.len=3343 [2025-08-26 23:03:10][357861962076216][5532 ms][DEBUG] END runCmdUntilRes#1 in 5170 ms [2025-08-26 23:03:10][357861962076216][5532 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 23:03:15][353725747270440][0 ms][INFO] === Request start === [2025-08-26 23:03:15][353725747270440][1 ms][DEBUG] START check_scloud [2025-08-26 23:03:15][353725747270440][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 23:03:15][353725747270440][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 21607 5018 24482412 158724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 23:03:15][353725747270440][252 ms][DEBUG] targetPkg: running [2025-08-26 23:03:15][353725747270440][252 ms][DEBUG] END check_scloud in 251 ms [2025-08-26 23:03:15][353725747270440][252 ms][DEBUG] START check_boot_completed [2025-08-26 23:03:15][353725747270440][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 23:03:15][353725747270440][298 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 23:03:15][353725747270440][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 23:03:15][353725747270440][345 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 23:03:15][353725747270440][345 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 23:03:15][353725747270440][345 ms][DEBUG] rawBody.length=1148 [2025-08-26 23:03:15][353725747270440][345 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353725747270440\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2208\"}'\'' -e'"" [2025-08-26 23:03:15][353725747270440][345 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 23:03:15][353725747270440][345 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353725747270440\",\"model\":\"SM-A137F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2208\"}'\'' -e'"" [2025-08-26 23:03:19][353725747270440][4282 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5dd144a5-a315-42f3-8a08-7cb6675b857b","id":"QR_5dd144a5-a315-42f3-8a08-7cb6675b857b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 23:03:19][353725747270440][4438 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-08-26 23:03:19][353725747270440][4438 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-08-26 23:03:19][353725747270440][4438 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 23:04:04][356115230807071][0 ms][INFO] === Request start === [2025-08-26 23:04:04][356115230807071][1 ms][DEBUG] START check_scloud [2025-08-26 23:04:04][356115230807071][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 23:04:04][356115230807071][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 21607 5018 24618796 169820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 23:04:04][356115230807071][306 ms][DEBUG] targetPkg: running [2025-08-26 23:04:04][356115230807071][306 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 23:04:04][356115230807071][306 ms][DEBUG] START check_boot_completed [2025-08-26 23:04:04][356115230807071][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 23:04:04][356115230807071][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 23:04:04][356115230807071][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 23:04:05][356115230807071][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 23:04:05][356115230807071][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 23:04:05][356115230807071][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 23:04:05][356115230807071][509 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2613\nsuccessfulTxPacketsPerSecond: 0.3121057175111229\nretriedTxPackets: 449\nretriedTxPacketsPerSecond: 0.0929676605352281\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2534\nsuccessfulRxPacketsPerSecond: 0.28222325519622815\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 23:04:05][356115230807071][509 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 23:04:05][356115230807071][947 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.248/199.248/199.248/0.000 ms\n [2025-08-26 23:04:05][356115230807071][947 ms][DEBUG] check_internet: online [2025-08-26 23:04:05][356115230807071][947 ms][DEBUG] rawBody.length=1149 [2025-08-26 23:04:05][356115230807071][947 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356115230807071\",\"model\":\"SM-A166U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6615\"}'\'' -e'"" [2025-08-26 23:04:05][356115230807071][947 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 23:04:05][356115230807071][947 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356115230807071\",\"model\":\"SM-A166U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6615\"}'\'' -e'"" [2025-08-26 23:04:10][356115230807071][5711 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c110c33b-3568-4445-aa15-4c2da7e3ed90","id":"QR_c110c33b-3568-4445-aa15-4c2da7e3ed90","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 23:04:10][356115230807071][5867 ms][DEBUG] proc_open done in 4920 ms; code=255; res.len=3343 [2025-08-26 23:04:10][356115230807071][5867 ms][DEBUG] END runCmdUntilRes#1 in 4920 ms [2025-08-26 23:04:10][356115230807071][5867 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 23:10:03][353475125318250][1 ms][INFO] === Request start === [2025-08-26 23:10:03][353475125318250][1 ms][DEBUG] START check_scloud [2025-08-26 23:10:03][353475125318250][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 23:10:04][353475125318250][261 ms][DEBUG] SU: done in 259 ms; outu0_a118 21607 5018 24777744 180868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 23:10:04][353475125318250][261 ms][DEBUG] targetPkg: running [2025-08-26 23:10:04][353475125318250][261 ms][DEBUG] END check_scloud in 260 ms [2025-08-26 23:10:04][353475125318250][261 ms][DEBUG] START check_boot_completed [2025-08-26 23:10:04][353475125318250][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 23:10:04][353475125318250][307 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 23:10:04][353475125318250][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 23:10:04][353475125318250][354 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 23:10:04][353475125318250][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 23:10:04][353475125318250][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 23:10:04][353475125318250][464 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2645\nsuccessfulTxPacketsPerSecond: 0.14873205919535956\nretriedTxPackets: 461\nretriedTxPacketsPerSecond: 0.05577452219825983\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2559\nsuccessfulRxPacketsPerSecond: 0.11619692124637465\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 23:10:04][353475125318250][464 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 23:10:04][353475125318250][932 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.861/200.861/200.861/0.000 ms\n [2025-08-26 23:10:04][353475125318250][932 ms][DEBUG] check_internet: online [2025-08-26 23:10:04][353475125318250][932 ms][DEBUG] rawBody.length=1148 [2025-08-26 23:10:04][353475125318250][933 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475125318250\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4352\"}'\'' -e'"" [2025-08-26 23:10:04][353475125318250][933 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 23:10:04][353475125318250][933 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353475125318250\",\"model\":\"SM-A336E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4352\"}'\'' -e'"" [2025-08-26 23:10:08][353475125318250][4728 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d72b9a2-6ad7-4eb9-ac27-eb3e3b340079","id":"QR_7d72b9a2-6ad7-4eb9-ac27-eb3e3b340079","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 23:10:08][353475125318250][4884 ms][DEBUG] proc_open done in 3951 ms; code=255; res.len=3343 [2025-08-26 23:10:08][353475125318250][4884 ms][DEBUG] END runCmdUntilRes#1 in 3951 ms [2025-08-26 23:10:08][353475125318250][4884 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 23:15:03][352350275279365][1 ms][INFO] === Request start === [2025-08-26 23:15:03][352350275279365][1 ms][DEBUG] START check_scloud [2025-08-26 23:15:03][352350275279365][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 23:15:03][352350275279365][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 21607 5018 24941812 189088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 23:15:03][352350275279365][287 ms][DEBUG] targetPkg: running [2025-08-26 23:15:03][352350275279365][287 ms][DEBUG] END check_scloud in 286 ms [2025-08-26 23:15:03][352350275279365][287 ms][DEBUG] START check_boot_completed [2025-08-26 23:15:03][352350275279365][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 23:15:03][352350275279365][318 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 23:15:03][352350275279365][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 23:15:04][352350275279365][381 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 23:15:04][352350275279365][381 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 23:15:04][352350275279365][381 ms][DEBUG] rawBody.length=1148 [2025-08-26 23:15:04][352350275279365][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350275279365\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7853\"}'\'' -e'"" [2025-08-26 23:15:04][352350275279365][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 23:15:04][352350275279365][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350275279365\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7853\"}'\'' -e'"" [2025-08-26 23:15:08][352350275279365][4520 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_26d07a92-18f1-44f7-9a99-158520c66485","id":"QR_26d07a92-18f1-44f7-9a99-158520c66485","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 23:15:08][352350275279365][4676 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3343 [2025-08-26 23:15:08][352350275279365][4676 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-08-26 23:15:08][352350275279365][4677 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 23:19:03][354259520237862][1 ms][INFO] === Request start === [2025-08-26 23:19:03][354259520237862][1 ms][DEBUG] START check_scloud [2025-08-26 23:19:03][354259520237862][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 23:19:03][354259520237862][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 21607 5018 25067992 200176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 23:19:03][354259520237862][315 ms][DEBUG] targetPkg: running [2025-08-26 23:19:03][354259520237862][315 ms][DEBUG] END check_scloud in 313 ms [2025-08-26 23:19:03][354259520237862][315 ms][DEBUG] START check_boot_completed [2025-08-26 23:19:03][354259520237862][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 23:19:03][354259520237862][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 23:19:03][354259520237862][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 23:19:03][354259520237862][410 ms][DEBUG] SU: done in 49 ms; out [2025-08-26 23:19:03][354259520237862][410 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 23:19:03][354259520237862][410 ms][DEBUG] rawBody.length=1148 [2025-08-26 23:19:03][354259520237862][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354259520237862\",\"model\":\"SM-A235F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1698\"}'\'' -e'"" [2025-08-26 23:19:03][354259520237862][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 23:19:03][354259520237862][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354259520237862\",\"model\":\"SM-A235F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1698\"}'\'' -e'"" [2025-08-26 23:19:07][354259520237862][4251 ms][DEBUG] proc_open done in 3840 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-26 23:19:07][354259520237862][4251 ms][DEBUG] END runCmdUntilRes#1 in 3841 ms [2025-08-26 23:19:07][354259520237862][4251 ms][WARN] Detected error: Process with pid 21607 either refused to load frida-agent, or terminated during injectionProcess with pid 21607 either refused to load frida-agent, or terminated during injection\r\n [2025-08-26 23:19:07][354259520237862][4251 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep system_server" [2025-08-26 23:19:08][354259520237862][4517 ms][DEBUG] SU: done in 265 ms; outsystem 5439 5018 12846940 199572 ep_poll 0 S system_server\n [2025-08-26 23:19:08][354259520237862][4517 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-26 23:19:08][354259520237862][4657 ms][DEBUG] SU: done in 140 ms; out [2025-08-26 23:19:08][354259520237862][4657 ms][WARN] targetPkg: not running, restarting 2 [2025-08-26 23:19:08][354259520237862][4657 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-26 23:19:08][354259520237862][4782 ms][DEBUG] SU: done in 125 ms; out [2025-08-26 23:19:08][354259520237862][4782 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-26 23:19:08][354259520237862][4938 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-26 23:19:10][354259520237862][6953 ms][DEBUG] START check_boot_completed [2025-08-26 23:19:10][354259520237862][6953 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 23:19:10][354259520237862][7000 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 23:19:10][354259520237862][7000 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 23:19:10][354259520237862][7047 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 23:19:10][354259520237862][7047 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 23:19:13][354259520237862][10062 ms][DEBUG] START runCmdUntilRes#2 [2025-08-26 23:19:13][354259520237862][10062 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354259520237862\",\"model\":\"SM-A235F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1698\"}'\'' -e'"" [2025-08-26 23:19:17][354259520237862][13920 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6a926891-34ce-4623-8e64-d46e67d6b1b7","id":"QR_6a926891-34ce-4623-8e64-d46e67d6b1b7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 23:19:17][354259520237862][14077 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3343 [2025-08-26 23:19:17][354259520237862][14077 ms][DEBUG] END runCmdUntilRes#2 in 4015 ms [2025-08-26 23:19:17][354259520237862][14077 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 23:19:21][352042194269243][1 ms][INFO] === Request start === [2025-08-26 23:19:21][352042194269243][1 ms][DEBUG] START check_scloud [2025-08-26 23:19:21][352042194269243][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 23:19:21][352042194269243][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 24386 5018 23672216 123392 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 23:19:21][352042194269243][300 ms][DEBUG] targetPkg: running [2025-08-26 23:19:21][352042194269243][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-26 23:19:21][352042194269243][300 ms][DEBUG] START check_boot_completed [2025-08-26 23:19:21][352042194269243][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 23:19:21][352042194269243][331 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 23:19:21][352042194269243][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 23:19:21][352042194269243][378 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 23:19:21][352042194269243][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 23:19:21][352042194269243][378 ms][DEBUG] rawBody.length=1149 [2025-08-26 23:19:21][352042194269243][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042194269243\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9195\"}'\'' -e'"" [2025-08-26 23:19:21][352042194269243][378 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 23:19:21][352042194269243][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352042194269243\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9195\"}'\'' -e'"" [2025-08-26 23:19:26][352042194269243][5283 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d86acd5e-8ea8-4ec8-bb49-1b262c11eb49","id":"QR_d86acd5e-8ea8-4ec8-bb49-1b262c11eb49","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 23:19:26][352042194269243][5440 ms][DEBUG] proc_open done in 5061 ms; code=255; res.len=3343 [2025-08-26 23:19:26][352042194269243][5440 ms][DEBUG] END runCmdUntilRes#1 in 5061 ms [2025-08-26 23:19:26][352042194269243][5440 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 23:21:04][351652533124973][0 ms][INFO] === Request start === [2025-08-26 23:21:04][351652533124973][1 ms][DEBUG] START check_scloud [2025-08-26 23:21:04][351652533124973][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 23:21:04][351652533124973][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 24386 5018 23746836 137056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 23:21:04][351652533124973][306 ms][DEBUG] targetPkg: running [2025-08-26 23:21:04][351652533124973][306 ms][DEBUG] END check_scloud in 306 ms [2025-08-26 23:21:04][351652533124973][306 ms][DEBUG] START check_boot_completed [2025-08-26 23:21:04][351652533124973][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 23:21:04][351652533124973][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 23:21:04][351652533124973][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 23:21:04][351652533124973][401 ms][DEBUG] SU: done in 48 ms; out [2025-08-26 23:21:04][351652533124973][401 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-26 23:21:04][351652533124973][401 ms][DEBUG] rawBody.length=1149 [2025-08-26 23:21:04][351652533124973][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351652533124973\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5726\"}'\'' -e'"" [2025-08-26 23:21:04][351652533124973][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 23:21:04][351652533124973][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351652533124973\",\"model\":\"SM-A256E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5726\"}'\'' -e'"" [2025-08-26 23:21:09][351652533124973][5461 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fefba93a-c472-4a9e-b5f4-d89be9adb49d","id":"QR_fefba93a-c472-4a9e-b5f4-d89be9adb49d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 23:21:09][351652533124973][5617 ms][DEBUG] proc_open done in 5215 ms; code=255; res.len=3343 [2025-08-26 23:21:09][351652533124973][5617 ms][DEBUG] END runCmdUntilRes#1 in 5215 ms [2025-08-26 23:21:09][351652533124973][5617 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 23:22:05][352132620037486][1 ms][INFO] === Request start === [2025-08-26 23:22:05][352132620037486][1 ms][DEBUG] START check_scloud [2025-08-26 23:22:05][352132620037486][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 23:22:05][352132620037486][250 ms][DEBUG] SU: done in 248 ms; outu0_a118 24386 5018 23872968 149344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 23:22:05][352132620037486][250 ms][DEBUG] targetPkg: running [2025-08-26 23:22:05][352132620037486][250 ms][DEBUG] END check_scloud in 249 ms [2025-08-26 23:22:05][352132620037486][250 ms][DEBUG] START check_boot_completed [2025-08-26 23:22:05][352132620037486][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 23:22:06][352132620037486][296 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 23:22:06][352132620037486][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 23:22:06][352132620037486][343 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 23:22:06][352132620037486][343 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 23:22:06][352132620037486][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 23:22:06][352132620037486][453 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2760\nsuccessfulTxPacketsPerSecond: 0.17238849765258216\nretriedTxPackets: 506\nretriedTxPacketsPerSecond: 0.05868544600938967\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2659\nsuccessfulRxPacketsPerSecond: 0.1467136150234742\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 23:22:06][352132620037486][453 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 23:22:06][352132620037486][875 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.613/201.613/201.613/0.000 ms\n [2025-08-26 23:22:06][352132620037486][875 ms][DEBUG] check_internet: online [2025-08-26 23:22:06][352132620037486][875 ms][DEBUG] rawBody.length=1159 [2025-08-26 23:22:06][352132620037486][875 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352132620037486\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52WB0FR18E\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3031\"}'\'' -e'"" [2025-08-26 23:22:06][352132620037486][875 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 23:22:06][352132620037486][875 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352132620037486\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52WB0FR18E\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3031\"}'\'' -e'"" [2025-08-26 23:22:11][352132620037486][5717 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"NON_SAMSUNG_DEVICE"}\r\n [2025-08-26 23:22:11][352132620037486][5873 ms][DEBUG] proc_open done in 4998 ms; code=255; res.len=80 [2025-08-26 23:22:11][352132620037486][5873 ms][DEBUG] END runCmdUntilRes#1 in 4998 ms [2025-08-26 23:22:11][352132620037486][5873 ms][INFO] SUCCESS response from frida (len=80) [2025-08-26 23:22:12][355198111622216][0 ms][INFO] === Request start === [2025-08-26 23:22:12][355198111622216][1 ms][DEBUG] START check_scloud [2025-08-26 23:22:12][355198111622216][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 23:22:12][355198111622216][324 ms][DEBUG] SU: done in 323 ms; outu0_a118 24386 5018 24044112 160172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 23:22:12][355198111622216][324 ms][DEBUG] targetPkg: running [2025-08-26 23:22:12][355198111622216][324 ms][DEBUG] END check_scloud in 323 ms [2025-08-26 23:22:12][355198111622216][324 ms][DEBUG] START check_boot_completed [2025-08-26 23:22:12][355198111622216][324 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 23:22:12][355198111622216][370 ms][DEBUG] ADB: done in 46 ms; out [2025-08-26 23:22:12][355198111622216][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 23:22:12][355198111622216][417 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 23:22:12][355198111622216][417 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-26 23:22:12][355198111622216][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 23:22:12][355198111622216][511 ms][DEBUG] SU: done in 94 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2760\nsuccessfulTxPacketsPerSecond: 0.17238849765258216\nretriedTxPackets: 506\nretriedTxPacketsPerSecond: 0.05868544600938967\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2659\nsuccessfulRxPacketsPerSecond: 0.1467136150234742\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 23:22:12][355198111622216][511 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 23:22:13][355198111622216][745 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=139 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 139.914/139.914/139.914/0.000 ms\n [2025-08-26 23:22:13][355198111622216][745 ms][DEBUG] check_internet: online [2025-08-26 23:22:13][355198111622216][746 ms][DEBUG] rawBody.length=1158 [2025-08-26 23:22:13][355198111622216][746 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355198111622216\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52WB0FR18E\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4735\"}'\'' -e'"" [2025-08-26 23:22:13][355198111622216][746 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 23:22:13][355198111622216][746 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355198111622216\",\"model\":\"SM-P613\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52WB0FR18E\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4735\"}'\'' -e'"" [2025-08-26 23:22:16][355198111622216][4447 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e798cbc6-8565-41b4-a834-0707b7c352fd","id":"QR_e798cbc6-8565-41b4-a834-0707b7c352fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 23:22:16][355198111622216][4604 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3343 [2025-08-26 23:22:16][355198111622216][4604 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-26 23:22:16][355198111622216][4604 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 23:30:04][356310855514355][1 ms][INFO] === Request start === [2025-08-26 23:30:04][356310855514355][1 ms][DEBUG] START check_scloud [2025-08-26 23:30:04][356310855514355][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 23:30:04][356310855514355][245 ms][DEBUG] SU: done in 243 ms; outu0_a118 24386 5018 24181444 171444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 23:30:04][356310855514355][245 ms][DEBUG] targetPkg: running [2025-08-26 23:30:04][356310855514355][245 ms][DEBUG] END check_scloud in 243 ms [2025-08-26 23:30:04][356310855514355][245 ms][DEBUG] START check_boot_completed [2025-08-26 23:30:04][356310855514355][245 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 23:30:04][356310855514355][276 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 23:30:04][356310855514355][276 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 23:30:04][356310855514355][323 ms][DEBUG] SU: done in 47 ms; out [2025-08-26 23:30:04][356310855514355][323 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-26 23:30:04][356310855514355][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 23:30:04][356310855514355][432 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 2876\nsuccessfulTxPacketsPerSecond: 0.04649170289145184\nretriedTxPackets: 553\nretriedTxPacketsPerSecond: 0.03985003104981586\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2755\nsuccessfulRxPacketsPerSecond: 0.026566687366543905\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 23:30:04][356310855514355][432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 23:30:05][356310855514355][870 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.317/202.317/202.317/0.000 ms\n [2025-08-26 23:30:05][356310855514355][870 ms][DEBUG] check_internet: online [2025-08-26 23:30:05][356310855514355][870 ms][DEBUG] rawBody.length=1149 [2025-08-26 23:30:05][356310855514355][870 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356310855514355\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7514\"}'\'' -e'"" [2025-08-26 23:30:05][356310855514355][870 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 23:30:05][356310855514355][870 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356310855514355\",\"model\":\"SM-A065M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7514\"}'\'' -e'"" [2025-08-26 23:30:10][356310855514355][6228 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_304c2ff4-e4a0-45fe-b1f3-ea4b58b78c48","id":"QR_304c2ff4-e4a0-45fe-b1f3-ea4b58b78c48","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 23:30:10][356310855514355][6384 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-08-26 23:30:10][356310855514355][6384 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-26 23:30:10][356310855514355][6384 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 23:33:05][355178450295691][1 ms][INFO] === Request start === [2025-08-26 23:33:05][355178450295691][1 ms][DEBUG] START check_scloud [2025-08-26 23:33:05][355178450295691][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 23:33:05][355178450295691][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 24386 5018 24308596 183516 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 23:33:05][355178450295691][290 ms][DEBUG] targetPkg: running [2025-08-26 23:33:05][355178450295691][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-26 23:33:05][355178450295691][290 ms][DEBUG] START check_boot_completed [2025-08-26 23:33:05][355178450295691][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 23:33:05][355178450295691][321 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 23:33:05][355178450295691][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 23:33:05][355178450295691][384 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 23:33:05][355178450295691][384 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 23:33:05][355178450295691][384 ms][DEBUG] rawBody.length=1149 [2025-08-26 23:33:05][355178450295691][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355178450295691\",\"model\":\"SM-A127M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4577\"}'\'' -e'"" [2025-08-26 23:33:05][355178450295691][384 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 23:33:05][355178450295691][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355178450295691\",\"model\":\"SM-A127M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4577\"}'\'' -e'"" [2025-08-26 23:33:10][355178450295691][5351 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e15b5254-c3ed-49d8-950e-533fd10fa7d8","id":"QR_e15b5254-c3ed-49d8-950e-533fd10fa7d8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 23:33:10][355178450295691][5508 ms][DEBUG] proc_open done in 5124 ms; code=255; res.len=3343 [2025-08-26 23:33:10][355178450295691][5508 ms][DEBUG] END runCmdUntilRes#1 in 5124 ms [2025-08-26 23:33:10][355178450295691][5508 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 23:41:04][350158640000214][1 ms][INFO] === Request start === [2025-08-26 23:41:04][350158640000214][1 ms][DEBUG] START check_scloud [2025-08-26 23:41:04][350158640000214][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 23:41:04][350158640000214][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 24386 5018 24439820 194896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 23:41:04][350158640000214][296 ms][DEBUG] targetPkg: running [2025-08-26 23:41:04][350158640000214][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-26 23:41:04][350158640000214][296 ms][DEBUG] START check_boot_completed [2025-08-26 23:41:04][350158640000214][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 23:41:04][350158640000214][327 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 23:41:04][350158640000214][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 23:41:04][350158640000214][390 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 23:41:04][350158640000214][390 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 23:41:04][350158640000214][390 ms][DEBUG] rawBody.length=1149 [2025-08-26 23:41:04][350158640000214][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350158640000214\",\"model\":\"SM-F926B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3706\"}'\'' -e'"" [2025-08-26 23:41:04][350158640000214][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 23:41:04][350158640000214][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350158640000214\",\"model\":\"SM-F926B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3706\"}'\'' -e'"" [2025-08-26 23:41:09][350158640000214][5060 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab88fe01-95ee-45a8-89d9-0e540999c75b","id":"QR_ab88fe01-95ee-45a8-89d9-0e540999c75b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 23:41:09][350158640000214][5216 ms][DEBUG] proc_open done in 4826 ms; code=255; res.len=3343 [2025-08-26 23:41:09][350158640000214][5216 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-08-26 23:41:09][350158640000214][5216 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 23:45:04][355139240257094][1 ms][INFO] === Request start === [2025-08-26 23:45:04][355139240257094][1 ms][DEBUG] START check_scloud [2025-08-26 23:45:04][355139240257094][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 23:45:04][355139240257094][276 ms][DEBUG] SU: done in 275 ms; outu0_a118 24386 5018 24620348 206008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 23:45:04][355139240257094][276 ms][DEBUG] targetPkg: running [2025-08-26 23:45:04][355139240257094][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-26 23:45:04][355139240257094][277 ms][DEBUG] START check_boot_completed [2025-08-26 23:45:04][355139240257094][277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 23:45:04][355139240257094][308 ms][DEBUG] ADB: done in 31 ms; out [2025-08-26 23:45:04][355139240257094][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 23:45:04][355139240257094][370 ms][DEBUG] SU: done in 63 ms; out [2025-08-26 23:45:04][355139240257094][371 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-26 23:45:04][355139240257094][371 ms][DEBUG] rawBody.length=1149 [2025-08-26 23:45:04][355139240257094][371 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355139240257094\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2135\"}'\'' -e'"" [2025-08-26 23:45:04][355139240257094][371 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 23:45:04][355139240257094][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355139240257094\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2135\"}'\'' -e'"" [2025-08-26 23:45:10][355139240257094][5541 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cc7cdecd-b482-4a94-9eb3-f9fed24afb71","id":"QR_cc7cdecd-b482-4a94-9eb3-f9fed24afb71","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 23:45:10][355139240257094][5697 ms][DEBUG] proc_open done in 5326 ms; code=255; res.len=3343 [2025-08-26 23:45:10][355139240257094][5697 ms][DEBUG] END runCmdUntilRes#1 in 5326 ms [2025-08-26 23:45:10][355139240257094][5697 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-26 23:48:05][354314900296689][1 ms][INFO] === Request start === [2025-08-26 23:48:05][354314900296689][1 ms][DEBUG] START check_scloud [2025-08-26 23:48:05][354314900296689][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-26 23:48:05][354314900296689][277 ms][DEBUG] SU: done in 276 ms; outu0_a118 24386 5018 24728096 218176 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-26 23:48:05][354314900296689][278 ms][DEBUG] targetPkg: running [2025-08-26 23:48:05][354314900296689][278 ms][DEBUG] END check_scloud in 276 ms [2025-08-26 23:48:05][354314900296689][278 ms][DEBUG] START check_boot_completed [2025-08-26 23:48:05][354314900296689][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-26 23:48:05][354314900296689][324 ms][DEBUG] ADB: done in 47 ms; out [2025-08-26 23:48:05][354314900296689][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-26 23:48:05][354314900296689][386 ms][DEBUG] SU: done in 62 ms; out [2025-08-26 23:48:05][354314900296689][387 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-26 23:48:05][354314900296689][387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c cmd wifi status" [2025-08-26 23:48:06][354314900296689][496 ms][DEBUG] SU: done in 109 ms; outWifi is enabled\nWifi scanning is only available when wifi is enabled\n==== ClientModeManager instance: ConcreteClientModeManager{id=31244 iface=wlan0 role=ROLE_CLIENT_PRIMARY} ====\nWifi is connected to "FRP"\nWifiInfo: SSID: "FRP", BSSID: 2c:b2:1a:5c:21:0e, MAC: 4a:ab:a4:5f:c3:53, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 150Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: 0, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1\nsuccessfulTxPackets: 3011\nsuccessfulTxPacketsPerSecond: 0.05594196953027393\nretriedTxPackets: 594\nretriedTxPacketsPerSecond: 0.027970984765136965\nlostTxPackets: 0\nlostTxPacketsPerSecond: 0.0\nsuccessfulRxPackets: 2879\nsuccessfulRxPacketsPerSecond: 0.05128013873608443\nNetworkCapabilities: [ Transports: WIFI Capabilities: INTERNET&NOT_RESTRICTED&TRUSTED&NOT_VPN&VALIDATED&NOT_ROAMING&FOREGROUND&NOT_CONGESTED&NOT_SUSPENDED&NOT_VCN_MANAGED LinkUpBandwidth>=12000Kbps LinkDnBandwidth>=60000Kbps TransportInfo: , BSSID: 02:00:00:00:00:00, MAC: 02:00:00:00:00:00, Security type: 2, Supplicant state: COMPLETED, Wi-Fi standard: 4, RSSI: -47, Link speed: 150Mbps, Tx Link speed: 150Mbps, Max Supported Tx Link speed: 150Mbps, Rx Link speed: 6Mbps, Max Supported Rx Link speed: 150Mbps, Frequency: 5805MHz, Net ID: -1, Metered hint: false, score: 60, CarrierMerged: false, SubscriptionId: -1, IsPrimary: 1> SignalStrength: -47 AdminUids: [1000] SSID: "FRP" UnderlyingNetworks: Null]\n [2025-08-26 23:48:06][354314900296689][496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-26 23:48:06][354314900296689][965 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=115 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.154/200.154/200.154/0.000 ms\n [2025-08-26 23:48:06][354314900296689][965 ms][DEBUG] check_internet: online [2025-08-26 23:48:06][354314900296689][965 ms][DEBUG] rawBody.length=1149 [2025-08-26 23:48:06][354314900296689][965 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354314900296689\",\"model\":\"SM-A245M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1068\"}'\'' -e'"" [2025-08-26 23:48:06][354314900296689][965 ms][DEBUG] START runCmdUntilRes#1 [2025-08-26 23:48:06][354314900296689][965 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354314900296689\",\"model\":\"SM-A245M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1068\"}'\'' -e'"" [2025-08-26 23:48:11][354314900296689][6120 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_15500d06-4625-4e95-a7e6-0a1f113b88fe","id":"QR_15500d06-4625-4e95-a7e6-0a1f113b88fe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-26 23:48:11][354314900296689][6276 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3343 [2025-08-26 23:48:11][354314900296689][6276 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-08-26 23:48:11][354314900296689][6276 ms][INFO] SUCCESS response from frida (len=3343)